Function at 0x140130630
Capabilities:
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2e8
mov rsi, rdx
mov qword [rsp + 0x128], rcx
movzx eax, byte [rdx + 0x378]
test eax, eax
mov qword [rsp + 0x58], r8
je 0x140130690
cmp eax, 3
jne case.0x140130c93.1
mov rbx, r8
lea rax, [rsi + 0x1f0]
mov qword [rsp + 0x120], rax
movzx eax, byte [rsi + 0x280]
lea rcx, [0x1401fce74]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rcx
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x40], rax
xor r12d, r12d
jmp 0x140130709
movzx eax, byte [rsi + 0x300]
test eax, eax
je 0x140130d26
cmp eax, 3
jne case.0x140130c93.1
lea rdi, [rsi + 0x2f8]
movzx eax, byte [rsi + 0x2f8]
lea r12, [rsi + 0x2b8]
test eax, eax
je 0x1401306f6
cmp eax, 3
jne case.0x140130c93.1
mov rax, qword [rsi + 0x2f0]
jmp 0x14013107d
mov rdx, qword [rsi + 0x2b8]
mov r8, qword [rsi + 0x2c0]
jmp 0x140130ff3
mov rcx, qword [rax + 0x10]
mov r15, r12
cmp rcx, qword [rax + 0x18]
je 0x140131b95
lea rdx, [rcx + 0x20]
mov qword [rax + 0x10], rdx
movzx r12d, word [rcx]
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x2ce], xmm0
movups xmm0, xmmword [rcx + 2]
movaps xmmword [rsp + 0x2c0], xmm0
cmp r12w, 2
je 0x140131b91
mov word [rsi + 0x48], r12w
movaps xmm0, xmmword [rsp + 0x2c0]
movups xmmword [rsi + 0x4a], xmm0
movups xmm0, xmmword [rsp + 0x2ce]
movups xmmword [rsi + 0x58], xmm0
mov rax, qword [rsi + 0x10]
mov r13, qword [rsi + 0x18]
mov rdi, qword [rax + 0x20]
mov ebx, dword [rax + 0x28]
test r12w, r12w
mov eax, 2
mov ebp, 0x17
cmove ebp, eax
mov rax, qword [0x1402d9068]
cmp rax, 3
jne 0x140131aa3
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, ebp
mov edx, 1
mov r8d, 6
xor r9d, r9d
call sub.ws2_32.dll_WSASocketW
cmp rax, 0xffffffffffffffff
je 0x140131baf
mov r14, rax
mov dword [rsp + 0x80], 1
lea r8, [rsp + 0x80]
mov rcx, rax
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x140131c6e
mov ebp, dword [r13 + 0x48]
cmp ebp, 0x3b9aca00
je 0x1401308de
mov r15, qword [r13 + 0x40]
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 8
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x1401308d9
mov ecx, 0x3e8
mov rax, r15
mul rcx
mov ecx, ebp
imul rcx, rcx, 0x431bde83
shr rcx, 0x32
add rcx, rax
adc rdx, 0
mov eax, 0xffffffff
cmp rcx, rax
cmovae rcx, rax
xor eax, eax
neg rdx
sbb eax, eax
or eax, ecx
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x88], 0
mov dword [rsp + 0x60], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x80]
mov rcx, r14
mov edx, 0x98000004
mov r9d, 0xc
call sub.ws2_32.dll_WSAIoctl
cmp eax, 0xffffffff
jne 0x1401308de
call sub.kernel32.dll_GetLastError
test r12w, r12w
je 0x140130972
cmp byte [r13 + 0x56], 0
je 0x1401309fb
movups xmm0, xmmword [r13 + 0x57]
movabs rax, 0x1c00000000
mov qword [rsp + 0xfc], rax
xorps xmm1, xmm1
movups xmmword [rsp + 0xec], xmm1
movups xmmword [rsp + 0xdc], xmm1
movups xmmword [rsp + 0xcc], xmm1
movups xmmword [rsp + 0xbc], xmm1
movups xmmword [rsp + 0xac], xmm1
movups xmmword [rsp + 0x9c], xmm1
movups xmmword [rsp + 0x88], xmm0
mov dword [rsp + 0x98], 0
mov qword [rsp + 0x80], 0x17
lea rdx, [rsp + 0x80]
mov rcx, r14
mov r8d, 0x1c
jmp 0x140130a9f
cmp byte [r13 + 0x51], 0
je 0x140130a0f
mov eax, dword [r13 + 0x52]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0xf8], 0
mov dword [rsp + 0x80], 2
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x100], 0x10
lea rdx, [rsp + 0x80]
mov rcx, r14
mov r8d, 0x10
jmp 0x140130a9f
xorps xmm0, xmm0
movups xmmword [rsp + 0x62], xmm0
mov r8d, 0x1c
mov ax, 0x17
jmp 0x140130a28
mov dword [rsp + 0x60], 0
mov word [rsp + 0x64], 0
mov r8d, 0x10
mov ax, 2
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0xf8], 0
mov word [rsp + 0x80], ax
mov word [rsp + 0x82], 0
mov dword [rsp + 0x84], 0
mov dword [rsp + 0x100], r8d
lea rdx, [rsp + 0x80]
mov rcx, r14
call sub.ws2_32.dll_bind
xor r12d, r12d
test eax, eax
je 0x140130abb
call sub.kernel32.dll_GetLastError
mov r12d, eax
shl r12, 0x20
or r12, 2
test r12, r12
jne 0x140131cf5
cmp byte [r13 + 0x68], 0
je 0x140130afe
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 4
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x140130b4f
cmp qword [r13], 0
je 0x140130b5b
mov rax, qword [r13 + 8]
mov rcx, rax
shr rcx, 0x20
xor edx, edx
neg rcx
sbb edx, edx
or edx, eax
mov dword [rsp + 0x80], edx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 0x1001
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x140130b5b
call sub.kernel32.dll_GetLastError
jmp 0x140130b5b
call sub.kernel32.dll_GetLastError
cmp qword [r13], 0
jne 0x140130b05
cmp qword [r13 + 0x10], 0
je case.default.0x140130c93
mov rax, qword [r13 + 0x18]
mov rcx, rax
shr rcx, 0x20
xor edx, edx
neg rcx
sbb edx, edx
or edx, eax
mov dword [rsp + 0x80], edx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 0x1002
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne case.default.0x140130c93
call sub.kernel32.dll_GetLastError
movups xmm0, xmmword [rsi + 0x48]
movups xmm1, xmmword [rsi + 0x58]
lea r15, [rsi + 0x68]
mov qword [rsi + 0x68], rdi
mov dword [rsi + 0x70], ebx
movups xmmword [rsi + 0x78], xmm0
movups xmmword [rsi + 0x88], xmm1
mov qword [rsi + 0x98], r14
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmm3, xmmword [rsp + 0x160]
movups xmmword [rsi + 0xa0], xmm0
movups xmmword [rsi + 0xb0], xmm1
movups xmmword [rsi + 0xc0], xmm2
movups xmmword [rsi + 0xd0], xmm3
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsi + 0xe0], xmm0
mov byte [rsi + 0xf0], 0
mov eax, dword [rsp + 0x1a9]
mov ecx, dword [rsp + 0x1ac]
mov dword [rsi + 0xf4], ecx
mov dword [rsi + 0xf1], eax
mov byte [rsi + 0xf8], 0
lea rcx, [rsi + 0xf9]
lea rdx, [rsp + 0x1c0]
mov r8d, 0xf7
call sub.msvcrt.dll_memcpy
lea rcx, [rsi + 0x1f0]
mov r8d, 0x188
mov qword [rsp + 0x120], rcx
mov rdx, r15
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsi + 0x280]
lea rcx, [0x1401fce74]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
mov rbx, qword [rsp + 0x58]
jmp rax
mov ebp, dword [rsi + 0x1f8]
cmp ebp, 0x3b9aca00
jne 0x140130e10
movups xmm0, xmmword [rsi + 0x270]
movups xmmword [rsi + 0x2f8], xmm0
movups xmm0, xmmword [rsi + 0x260]
movups xmmword [rsi + 0x2e8], xmm0
movups xmm0, xmmword [rsi + 0x250]
movups xmmword [rsi + 0x2d8], xmm0
movups xmm0, xmmword [rsi + 0x240]
movups xmmword [rsi + 0x2c8], xmm0
movups xmm0, xmmword [rsi + 0x200]
movups xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movups xmmword [rsi + 0x2b8], xmm3
movups xmmword [rsi + 0x2a8], xmm2
movups xmmword [rsi + 0x298], xmm1
movups xmmword [rsi + 0x288], xmm0
movzx eax, byte [rsi + 0x300]
test eax, eax
jne 0x1401306bf
mov rcx, qword [rsi + 0x2a8]
mov qword [rsi + 0x2b0], rcx
cmp word [rsi + 0x288], 0
movzx eax, word [rsi + 0x29a]
mov word [rsp + 0x140], ax
movups xmm0, xmmword [rsi + 0x28a]
movaps xmmword [rsp + 0x130], xmm0
je 0x140130f29
mov edx, dword [rsi + 0x29c]
mov r8d, dword [rsi + 0x2a0]
movzx eax, word [rsi + 0x2a4]
mov r9, qword [rsp + 0x132]
mov r10d, dword [rsp + 0x13a]
movzx r11d, word [rsp + 0x13e]
movzx edi, word [rsp + 0x140]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1dc], xmm0
movups xmmword [rsp + 0x1ec], xmm0
movups xmmword [rsp + 0x1fc], xmm0
movups xmmword [rsp + 0x20c], xmm0
movups xmmword [rsp + 0x21c], xmm0
movups xmmword [rsp + 0x22c], xmm0
rol ax, 8
mov dword [rsp + 0x23c], 0
mov qword [rsp + 0x1c8], r9
mov dword [rsp + 0x1d0], r10d
mov word [rsp + 0x1d4], r11w
mov word [rsp + 0x1d6], di
mov dword [rsp + 0x1d8], r8d
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x140130f7c
mov r15, qword [rsi + 0x1f0]
movups xmm0, xmmword [rsi + 0x270]
movaps xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [rsi + 0x260]
movaps xmmword [rsp + 0xe0], xmm0
movups xmm0, xmmword [rsi + 0x250]
movaps xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [rsi + 0x240]
movaps xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsi + 0x200]
movups xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x130], 0
lea rcx, [rsp + 0x130]
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x140131f74
mov r12, qword [rsp + 0x130]
mov rcx, qword [0x1402d9130]
test rcx, rcx
mov rbx, qword [rsp + 0x50]
jne 0x140130f02
mov qword [rsp + 0x130], 0
lea rcx, [rsp + 0x130]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x140131f74
mov rcx, qword [rsp + 0x130]
mov qword [0x1402d9130], rcx
test rcx, rcx
je case.0x140130c93.1
mov rax, r12
or rax, rcx
shr rax, 0x20
je 0x14013114e
mov rax, r12
xor edx, edx
div rcx
jmp 0x140131155
mov rbx, qword [rsp + 0x50]
jmp 0x1401312ea
lea r8, [rsp + 0x1c8]
movzx eax, word [rsp + 0x134]
rol ax, 8
mov edx, dword [rsp + 0x130]
xorps xmm0, xmm0
movups xmmword [r8 + 0x60], xmm0
movups xmmword [r8 + 0x50], xmm0
movups xmmword [r8 + 0x40], xmm0
movups xmmword [r8 + 0x30], xmm0
movups xmmword [r8 + 0x20], xmm0
movups xmmword [r8 + 0x10], xmm0
movups xmmword [r8], xmm0
mov qword [r8 + 0x70], 0
mov r8d, 0x10
mov r9w, 2
mov word [rsp + 0x1c0], r9w
mov word [rsp + 0x1c2], ax
mov dword [rsp + 0x1c4], edx
mov dword [rsp + 0x240], r8d
lea rdx, [rsp + 0x1c0]
call sub.ws2_32.dll_connect
test eax, eax
je 0x140130fbd
call sub.kernel32.dll_GetLastError
cmp eax, 0x2733
jne 0x14013176b
mov rdx, qword [rsi + 0x2b0]
lea r12, [rsi + 0x2b8]
mov qword [rsi + 0x2b8], rdx
mov qword [rsi + 0x2c0], 0
lea rdi, [rsi + 0x2f8]
mov byte [rsi + 0x2f8], 0
xor r8d, r8d
mov rbx, qword [rsp + 0x58]
lea rcx, [rsp + 0x1c0]
call fcn.1401d5020
mov rcx, qword [rsp + 0x1c0]
cmp rcx, 2
jne 0x14013101b
mov r15, qword [rsp + 0x1c8]
jmp 0x140131866
mov rdx, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x80], xmm0
lea rax, [rsi + 0x2c8]
mov qword [rsi + 0x2c8], rcx
mov qword [rsi + 0x2d0], rdx
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [rsi + 0x2d8], xmm0
mov rcx, qword [rsp + 0x90]
mov qword [rsi + 0x2e8], rcx
mov qword [rsi + 0x2f0], rax
mov rdx, qword [rax + 0x10]
lea r13, [rsp + 0x1c0]
mov rcx, r13
mov r8, rbx
mov r9b, 1
call fcn.1401da680
movzx eax, byte [rsp + 0x1c9]
cmp al, 3
je 0x140131f0c
mov r15, qword [rsp + 0x1c0]
cmp al, 2
je 0x14013185a
mov rcx, qword [rsi + 0x2e0]
cmp rcx, 0xffffffffffffffff
je case.0x140130c93.1
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x1c0], 4
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov edx, 0xffff
mov r8d, 0x1007
call sub.ws2_32.dll_getsockopt
cmp eax, 0xffffffff
je 0x14013184a
movsxd r15, dword [rsp + 0x80]
test r15, r15
jne 0x140131852
mov r14, qword [rsi + 0x2c8]
mov r15, qword [rsi + 0x2d0]
mov rdi, qword [rsi + 0x2d8]
mov r13, qword [rsi + 0x2e0]
mov rbp, qword [rsi + 0x2e8]
mov byte [rsi + 0x2f8], 1
cmp r14, 3
jne 0x14013186f
jmp 0x140131f0f
mov eax, r12d
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x140131179
xor edx, edx
div rcx
mov rcx, rax
jmp 0x14013117f
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
movabs rdx, 0x44b82fa09b5a53
mul rdx
shr rdx, 0xb
add r15, rdx
jae 0x1401311ae
lea rcx, [rsp + 0x130]
call fcn.1401dad50
jmp 0x1401311e0
imul rax, rdx, 0x3b9aca00
sub rcx, rax
add ebp, ecx
cmp ebp, 0x3b9aca00
jb 0x1401311cd
add ebp, 0xc4653600
inc r15
je 0x14013119f
lea rcx, [rsp + 0x130]
mov rdx, r15
mov r8d, ebp
call fcn.1401dac10
movups xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x220], xmm0
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x210], xmm0
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x200], xmm0
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmm3, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x1f0], xmm3
movaps xmmword [rsp + 0x1e0], xmm2
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
movaps xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movaps xmm2, xmmword [rsp + 0xa0]
movaps xmm3, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x230], xmm0
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x260], xmm3
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x270], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x280], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x290], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x2a0], xmm0
lea rcx, [rsi + 0x288]
lea rdx, [rsp + 0x1c0]
mov r8d, 0xf0
call sub.msvcrt.dll_memcpy
lea rax, [rsi + 0x288]
mov qword [rsp + 0x50], rax
xor r15d, r15d
xor ecx, ecx
call fcn.14019bb60
test rax, rax
je 0x140131317
cmp byte [rax + 0x4c], 0
setne cl
cmp byte [rax + 0x4d], 0
sete r15b
and r15b, cl
movzx eax, byte [rsi + 0x370]
test eax, eax
je 0x140131366
cmp eax, 3
jne case.0x140130c93.1
lea r14, [rsi + 0x368]
movzx eax, byte [rsi + 0x368]
test eax, eax
je 0x14013143b
mov rbp, rbx
cmp eax, 3
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
jne case.0x140130c93.1
mov rax, qword [rsi + 0x360]
jmp 0x1401315a0
mov rcx, qword [rsi + 0x318]
mov qword [rsi + 0x320], rcx
cmp word [rsi + 0x2f8], 0
movzx eax, word [rsi + 0x30a]
mov word [rsp + 0x70], ax
movups xmm0, xmmword [rsi + 0x2fa]
movaps xmmword [rsp + 0x60], xmm0
je 0x14013144e
mov edx, dword [rsi + 0x30c]
mov r8d, dword [rsi + 0x310]
movzx eax, word [rsi + 0x314]
mov r9, qword [rsp + 0x62]
mov r10d, dword [rsp + 0x6a]
movzx r11d, word [rsp + 0x6e]
movzx edi, word [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x9c], xmm0
movups xmmword [rsp + 0xac], xmm0
movups xmmword [rsp + 0xbc], xmm0
movups xmmword [rsp + 0xcc], xmm0
movups xmmword [rsp + 0xdc], xmm0
movups xmmword [rsp + 0xec], xmm0
rol ax, 8
mov dword [rsp + 0xfc], 0
mov qword [rsp + 0x88], r9
mov dword [rsp + 0x90], r10d
mov word [rsp + 0x94], r11w
mov word [rsp + 0x96], di
mov dword [rsp + 0x98], r8d
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x14013149b
mov rdx, qword [rsi + 0x328]
mov r8, qword [rsi + 0x330]
jmp 0x140131506
lea r8, [rsp + 0x88]
movzx eax, word [rsp + 0x64]
rol ax, 8
mov edx, dword [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [r8 + 0x60], xmm0
movups xmmword [r8 + 0x50], xmm0
movups xmmword [r8 + 0x40], xmm0
movups xmmword [r8 + 0x30], xmm0
movups xmmword [r8 + 0x20], xmm0
movups xmmword [r8 + 0x10], xmm0
movups xmmword [r8], xmm0
mov qword [r8 + 0x70], 0
mov r8d, 0x10
mov r9w, 2
mov word [rsp + 0x80], r9w
mov word [rsp + 0x82], ax
mov dword [rsp + 0x84], edx
mov dword [rsp + 0x100], r8d
lea rdx, [rsp + 0x80]
call sub.ws2_32.dll_connect
test eax, eax
je 0x1401314dc
call sub.kernel32.dll_GetLastError
cmp eax, 0x2733
jne 0x140131739
mov rdx, qword [rsi + 0x320]
mov qword [rsi + 0x328], rdx
mov qword [rsi + 0x330], 0
lea r14, [rsi + 0x368]
mov byte [rsi + 0x368], 0
xor r8d, r8d
lea rcx, [rsp + 0x80]
call fcn.1401d5020
mov rcx, qword [rsp + 0x80]
cmp rcx, 2
jne 0x14013152e
mov r12, qword [rsp + 0x88]
jmp 0x1401318d7
mov rdx, qword [rsp + 0x88]
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x130], xmm0
lea rax, [rsi + 0x338]
mov qword [rsi + 0x338], rcx
mov qword [rsi + 0x340], rdx
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0x348], xmm0
mov rcx, qword [rsp + 0x140]
mov qword [rsi + 0x358], rcx
mov qword [rsi + 0x360], rax
mov rbp, rbx
mov rbx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rax + 0x10]
lea r13, [rsp + 0x80]
mov rcx, r13
mov r8, qword [rsp + 0x58]
mov r9b, 1
call fcn.1401da680
movzx eax, byte [rsp + 0x89]
cmp al, 3
jne 0x140131692
mov byte [r14], 3
mov byte [rsi + 0x370], 3
xor ecx, ecx
call fcn.14019bb60
test rax, rax
je 0x140131600
cmp byte [rax + 0x4c], 0
sete cl
cmp byte [rax + 0x4d], 0
setne al
or al, cl
or r15b, al
cmp r15b, 1
jne 0x1401317ab
mov r14, qword [rsp + 0x58]
mov r12, qword [r14]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
mov r13, qword [rsp + 0x108]
je 0x140131826
movzx r15d, byte [rax + 0x4c]
movzx r14d, byte [rax + 0x4d]
test r15b, r15b
je 0x140131638
test r14b, r14b
je 0x140131f35
xor ecx, ecx
mov edx, r14d
sub dl, 1
movzx edx, dl
cmovb edx, ecx
test r15b, r15b
movzx ecx, r14b
cmovne ecx, edx
mov byte [rax + 0x4d], cl
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.1401d9550
test r15b, r15b
je 0x140131833
cmp al, 4
jne 0x140131833
xor ecx, ecx
call fcn.1401d91c0
mov cl, 3
test rax, rax
je 0x140131f43
mov byte [rax + 0x4c], 1
mov byte [rax + 0x4d], r14b
jmp 0x140131f43
mov r12, qword [rsp + 0x80]
cmp al, 2
je 0x1401318cb
mov rcx, qword [rsi + 0x350]
cmp rcx, 0xffffffffffffffff
je case.0x140130c93.1
mov dword [rsp + 0x130], 0
mov dword [rsp + 0x80], 4
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x130]
mov edx, 0xffff
mov r8d, 0x1007
call sub.ws2_32.dll_getsockopt
cmp eax, 0xffffffff
je 0x1401318bb
movsxd r12, dword [rsp + 0x130]
test r12, r12
jne 0x1401318c3
mov r14, qword [rsi + 0x338]
mov r12, qword [rsi + 0x340]
mov rax, qword [rsi + 0x348]
mov rcx, qword [rsi + 0x350]
mov rdx, qword [rsi + 0x358]
mov byte [rsi + 0x368], 1
cmp r14, 3
je 0x1401315d0
jmp 0x1401318e1
mov r12d, eax
shl r12, 0x20
or r12, 2
mov rcx, qword [rsi + 0x320]
call fcn.1401f2a3c
mov r14d, 2
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x110]
mov rdx, rbx
jmp 0x1401318e1
mov r15d, eax
shl r15, 0x20
or r15, 2
mov rcx, qword [rsi + 0x2b0]
call fcn.1401f2a3c
mov r14d, 2
mov byte [rsi + 0x300], 1
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
cmp r14, 2
je 0x140131972
jmp 0x140131895
xor ecx, ecx
call fcn.14019bb60
mov r15b, 2
test rax, rax
mov r13, qword [rsp + 0x108]
je 0x1401317d3
movzx r15d, byte [rax + 0x4c]
movzx ecx, byte [rax + 0x4d]
mov byte [rsp + 0x48], cl
mov byte [rax + 0x4c], 0
mov r14, qword [rsp + 0x58]
mov r12, qword [r14]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140131ad7
movzx r13d, byte [rax + 0x4c]
movzx r14d, byte [rax + 0x4d]
test r13b, r13b
je 0x140131b01
test r14b, r14b
jne 0x140131b01
mov rax, qword [r12]
mov rcx, qword [r12 + 8]
call qword [rax + 0x10]
mov r13, qword [rsp + 0x108]
movzx r12d, byte [rsp + 0x48]
jmp 0x140131b5a
mov rcx, qword [rsp + 0x50]
mov rdx, r14
call fcn.1401d9550
test al, al
jne 0x140131f27
mov rcx, qword [rsp + 0x50]
call fcn.140132880
jmp 0x14013192f
call sub.ws2_32.dll_WSAGetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
lea rcx, [rsi + 0x2c8]
call fcn.140131ff0
mov byte [rdi], 1
mov r14d, 2
mov rcx, r12
call fcn.1401327b0
mov byte [rsi + 0x300], 1
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
cmp r14, 2
je 0x140131972
mov byte [rsi + 0x280], 1
mov rcx, qword [rsp + 0x120]
call fcn.140131f80
mov r8, qword [rsi + 0x20]
test r8, r8
jne 0x140131dd8
jmp 0x140131eed
call sub.ws2_32.dll_WSAGetLastError
mov r12d, eax
shl r12, 0x20
or r12, 2
lea rcx, [rsi + 0x338]
call fcn.140131ff0
mov byte [r14], 1
mov r14d, 2
mov byte [rsi + 0x370], 1
mov rdi, rax
mov rbx, rcx
mov r13, rdx
mov qword [rsp + 0x1b8], rcx
mov qword [rsp + 0x1b0], rax
mov r15, r12
mov rbp, rdx
cmp r14, 4
je 0x140131f41
mov rcx, qword [rsp + 0x50]
call fcn.140132880
cmp r14, 2
mov qword [rsp + 0x118], r15
je 0x14013193f
cmp r14, 3
jne 0x140131945
mov r14d, 2
call fcn.14016d350
mov r15, rax
jmp 0x140131945
mov r14d, 2
mov rax, rdi
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x108], r13
mov rbp, r13
mov r13, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x1b0]
cmp r14, 2
jne 0x140131895
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x48], rax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401319aa
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x11
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r12, rax
movups xmm0, xmmword [0x14029e974]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x72
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401319fc
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r13, rax
mov qword [rax], r15
mov byte [rsi + 0x280], 1
mov rcx, qword [rsp + 0x120]
call fcn.140131f80
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x140131a7f
cmp qword [rsi + 0x28], 0
je 0x140131a4a
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r14, qword [rsi + 0x30]
test r14, r14
je 0x140131a7f
mov rdi, qword [rsi + 0x38]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140131a7f
cmp qword [rdi + 0x10], 0x11
jb 0x140131a6e
mov r14, qword [r14 - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov qword [rsi + 0x20], r12
mov qword [rsi + 0x28], 0x11
mov qword [rsi + 0x30], r13
lea rax, [0x1402a0310]
mov qword [rsi + 0x38], rax
mov rax, qword [rsi + 0x40]
jmp 0x140130709
mov byte [rsp + 0x60], 1
lea rax, [rsp + 0x60]
mov qword [rsp + 0x80], rax
lea rcx, [0x1402d9068]
lea r9, method..virtual_0
lea r8, [rsp + 0x80]
xor edx, edx
call fcn.1401c2570
jmp 0x140130797
mov rcx, qword [rsp + 0x50]
mov rdx, r14
call fcn.1401d9550
movzx r12d, byte [rsp + 0x48]
mov r14d, 3
test al, al
je 0x140131b60
movzx eax, al
cmp eax, 4
je 0x140131b5a
jmp case.0x140130c93.1
xor ecx, ecx
mov edx, r14d
sub dl, 1
movzx edx, dl
cmovb edx, ecx
test r13b, r13b
movzx ecx, r14b
cmovne ecx, edx
mov byte [rax + 0x4d], cl
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.1401d9550
test r13b, r13b
je 0x140131f1a
cmp al, 4
mov r13, qword [rsp + 0x108]
movzx r12d, byte [rsp + 0x48]
jne 0x140131aea
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140131b5a
mov byte [rax + 0x4c], 1
mov byte [rax + 0x4d], r14b
mov r14d, 4
cmp r15b, 2
je 0x140131b7a
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140131b7a
mov byte [rax + 0x4c], r15b
mov byte [rax + 0x4d], r12b
mov r15, qword [rsp + 0x118]
cmp r14, 4
jne 0x140131911
jmp 0x140131f41
mov r15, qword [rsi + 0x20]
test r15, r15
je 0x140131e33
mov rdi, qword [rsi + 0x28]
mov r13, qword [rsi + 0x30]
mov rbp, qword [rsi + 0x38]
jmp 0x140131ee7
call sub.kernel32.dll_GetLastError
mov ebx, eax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131be1
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0xe
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r15, rax
movabs rax, 0x726f727265206e65
mov qword [r15 + 6], rax
movabs rax, 0x6e65706f20706374
mov qword [r15], rax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131c40
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r13, rax
shl rbx, 0x20
or rbx, 2
mov qword [rax], rbx
mov edi, 0xe
jmp 0x140131d9e
call sub.kernel32.dll_GetLastError
mov r12d, eax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131ca1
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov edi, 0x19
mov r8d, 0x19
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r15, rax
shl r12, 0x20
or r12, 2
movups xmm0, xmmword [0x14023658f]
movups xmmword [rax + 9], xmm0
movups xmm0, xmmword [0x140236586]
movups xmmword [rax], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131d7a
jmp 0x140131d62
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131d20
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov edi, 0x14
mov r8d, 0x14
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r15, rax
movups xmm0, xmmword [0x14023659f]
movups xmmword [rax], xmm0
mov dword [rax + 0x10], 0x726f7272
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131d7a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r13, rax
mov qword [rax], r12
mov rcx, r14
call fcn.1401f2a3c
mov qword [rsi + 0x78], r15
mov qword [rsi + 0x80], rdi
mov qword [rsi + 0x88], r13
lea rbp, [0x140237168]
mov qword [rsi + 0x90], rbp
mov dword [rsi + 0x70], 0x3b9aca01
mov r14d, 2
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x140131eed
cmp qword [rsi + 0x28], 0
je 0x140131ded
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rbx, qword [rsi + 0x30]
test rbx, rbx
je 0x140131eed
mov r12, qword [rsi + 0x38]
mov rcx, rbx
call qword [r12]
cmp qword [r12 + 8], 0
je 0x140131eed
cmp qword [r12 + 0x10], 0x11
jb 0x140131e1d
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
jmp 0x140131eed
lea rdx, [0x14029e961]
mov r8d, 0x13
mov cl, 7
call fcn.14016d3b0
mov rbx, rax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131e75
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x11
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r15, rax
movups xmm0, xmmword [0x14029e974]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x72
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140131ec3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140130c93.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140130c93.1
mov r13, rax
mov qword [rax], rbx
lea rbp, [0x1402a0310]
mov edi, 0x11
mov r14d, 2
mov rax, qword [rsp + 0x128]
mov qword [rax], r14
mov qword [rax + 8], r15
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], rbp
mov al, 1
jmp 0x140131f5a
mov byte [rdi], 3
mov byte [rsi + 0x300], 3
mov cl, 4
jmp 0x140131f43
mov r13, qword [rsp + 0x108]
jmp 0x140131ae4
movzx eax, al
mov cl, 3
cmp eax, 4
je 0x140131f43
ud2
ud2
mov rax, qword [r12]
mov rcx, qword [r12 + 8]
call qword [rax + 0x10]
mov cl, 3
mov byte [rsi + 0x280], cl
mov rax, qword [rsp + 0x128]
mov qword [rax], 3
mov al, 3
mov byte [rsi + 0x378], al
add rsp, 0x2e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.kernel32.dll_GetLastError
ud2
add byte [rax - 0x77], cl
invalid
lock dec qword [rax]
jne 0x140132458
call fcn.14014d110
jmp 0x140132458
mov edi, dword [rdi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
jmp 0x14013241f
or al, 0x48
lea ecx, [rsi + 0x9f8]
call fcn.140131ff0
mov byte [rsi + 0x9f1], 0
lea rcx, [rsi + 0x950]
call fcn.1401d9770
lea rcx, [rsi + 0x958]
cmp qword [rsi + 0x950], 0
je 0x1401322f9
mov rax, qword [rcx]
lock dec qword [rax]
jne 0x140132307
call fcn.14014d110
jmp 0x140132307
mov rax, qword [rcx]
lock dec qword [rax]
jne 0x140132307
call fcn.140062fd0
mov rax, qword [rsi + 0x998]
test rax, rax
je 0x14013231d
mov rcx, qword [rsi + 0x9a0]
call qword [rax + 0x18]
cmp byte [rsi + 0x948], 3
jne 0x140132391
lea rcx, [rsi + 0x7c0]
call fcn.140131f80
mov r8, qword [rsi + 0x5f0]
test r8, r8
je 0x140132391
cmp qword [rsi + 0x5f8], 0
je 0x140132356
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsi + 0x600]
test rdi, rdi
je 0x140132391
mov rbx, qword [rsi + 0x608]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140132391
cmp qword [rbx + 0x10], 0x11
jb 0x140132380
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
cmp byte [rsi + 0x5c8], 3
jne 0x140132405
lea rcx, [rsi + 0x440]
call fcn.140131f80
mov r8, qword [rsi + 0x270]
test r8, r8
je 0x140132405
cmp qword [rsi + 0x278], 0
je 0x1401323ca
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsi + 0x280]
test rdi, rdi
je 0x140132405
mov rbx, qword [rsi + 0x288]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140132405
cmp qword [rbx + 0x10], 0x11
jb 0x1401323f4
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
cmp qword [rsi + 0x228], 0
je 0x140132424
mov r8, qword [rsi + 0x220]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
add rsi, 0x178
cmp qword [rsi + 8], 0
je case.0x140132179.1
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp sub.kernel32.dll_HeapFree
mov rax, qword [rsi + 0x48]
test rax, rax
je 0x140132468
mov rcx, qword [rsi + 0x50]
call qword [rax + 0x18]
add rsi, 0x70
cmp qword [rsi + 8], 0
jne 0x140132432
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
mov rdi, qword [r15 + 8]
cmp qword [rdi + 0x18], 0
je 0x1401344e9
mov rsi, qword [rdi + 0x20]
test rsi, rsi
je 0x1401344e9
mov rbx, qword [rdi + 0x28]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1401344e9
cmp qword [rbx + 0x10], 0x11
jb 0x1401344d8
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov qword [rdi + 0x18], 1
mov qword [rdi + 0x20], 0
mov rax, qword [r15 + 8]
mov qword [rsp + 0x450], rax
lock dec qword [rax]
jne 0x140134518
lea rcx, [rsp + 0x450]
call fcn.140062830
movaps xmm6, xmmword [rsp + 0xe40]
add rsp, 0xe58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r14, qword [rsi + 0x68]
test r14, r14
je 0x1401370bf
mov r15, qword [rsi + 0x60]
add rsi, 0x130
shl r14, 4
xor r12d, r12d
lea r13, [0x1401fcea4]
or al, 0
or al, 0
jmp 0x140136c51
add byte [rcx - 0x7d], cl
invalid
mov rdi, qword [r15 + r12 + 8]
mov eax, 3
xchg qword [rdi + 0x18], rax
cmp rax, 3
ja 0x14013844e
movsxd rax, dword [r13 + rax*4]
add rax, r13
jmp rax
cmp qword [rsp + 0x450], 0
mov r15, qword [rsp + 0x90]
jne 0x1401371bc
xor esi, esi
xchg qword [rsp + 0x458], rsi
test rsi, rsi
je 0x1401371bc
mov r14, qword [rsi + 0x58]
test r14, r14
je 0x140137185
mov rax, qword [rsi + 0x50]
mov rdi, qword [rsi + 0x40]
mov rcx, qword [rsi + 0x48]
xor edx, edx
cmp rax, rcx
mov r8, rcx
cmovb r8, rdx
sub rax, r8
mov r15, rcx
sub r15, rax
lea r12, [rax + r14]
cmp r15, r14
cmovb r12, rcx
mov rbx, r14
sub rbx, r15
cmovb rbx, rdx
sub r12, rax
jne 0x140137868
cmp r15, r14
mov r15, qword [rsp + 0x90]
jae 0x140137185
xor r14d, r14d
jmp 0x140137158
inc r14
cmp rbx, r14
je 0x140137185
mov rcx, qword [rdi + r14*8]
mov rax, 0xffffffffffffffc0
lock xadd qword [rcx], rax
cmp rax, 0x3f
jbe 0x14013844e
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x140137150
mov rax, qword [rcx + 0x10]
call qword [rax + 0x10]
jmp 0x140137150
cmp qword [rsi + 0x48], 0
je 0x14013719e
mov r8, qword [rsi + 0x40]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp dword [rsi], 2
je 0x1401371ab
mov rcx, rsi
call fcn.14014b8c0
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x488], 0
lea rcx, [rsp + 0x490]
je 0x1401371e4
mov rax, qword [rsp + 0x490]
lock dec qword [rax]
jne 0x1401371f7
call fcn.14014d110
jmp 0x1401371f7
mov rax, qword [rsp + 0x490]
lock dec qword [rax]
jne 0x1401371f7
call fcn.140062fd0
mov rdi, qword [rsp + 0x498]
lea rsi, [rdi + 0x40]
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x48]
cmp byte [rdi + 0xcc], 0
je 0x140137225
mov rcx, rsi
call fcn.1401f2d54
jmp 0x140138319
mov byte [rdi + 0xcc], 1
mov rax, qword [rdi + 0xa0]
test rax, rax
je 0x14013724a
lock dec qword [rax]
jne 0x14013724a
lea rcx, [rdi + 0xa0]
call fcn.1401db7c0
mov qword [rdi + 0xa0], 0
mov ecx, 0xd0
add rcx, qword [rsp + 0x498]
call sub.kernel32.dll_WakeAllConditionVariable
mov rax, qword [rdi + 0xa8]
mov qword [rsp + 0x30], rax
movups xmm0, xmmword [rdi + 0xb0]
movaps xmmword [rsp + 0xb0], xmm0
mov qword [rdi + 0xa8], 0
xor ecx, ecx
call fcn.1401c8bf0
test rax, rax
je 0x14013844e
movdqu xmm0, xmmword [rax]
inc qword [rax]
mov rbx, qword [rdi + 0x70]
mov rax, qword [rdi + 0x78]
mov qword [rsp + 0x28], rax
mov r12, qword [rdi + 0x88]
movups xmm1, xmmword [str._._]
movups xmmword [rdi + 0x70], xmm1
movups xmm1, xmmword [0x1402a2e40]
movups xmmword [rdi + 0x80], xmm1
movdqu xmmword [rdi + 0x90], xmm0
mov rcx, rsi
call fcn.1401f2d54
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x1401372f7
cmp byte [rax + 0x4e], 2
jne 0x14013844e
call fcn.1401d9020
test rax, rax
je 0x14013757e
mov qword [rsp + 0x40], r12
mov rsi, qword [rax]
lock inc qword [rsi]
jle 0x14013844e
add rsi, 0x10
xor r12d, r12d
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
jne 0x140137341
jmp 0x140137370
call fcn.1401de930
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140137370
movzx ebp, byte [rax + 0x4c]
movzx r13d, byte [rax + 0x4d]
mov word [rax + 0x4c], 0x8001
mov r15, qword [rsp + 0x4a0]
test r15, r15
jne 0x140137384
jmp 0x14013844e
mov bpl, 2
mov r15, qword [rsp + 0x4a0]
test r15, r15
je 0x14013844e
xor edi, edi
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x1401373c0
movzx edi, byte [rax + 0x4c]
movzx r14d, byte [rax + 0x4d]
test dil, dil
je 0x1401373d0
test r14b, r14b
jne 0x1401373d0
mov rcx, rsi
call fcn.1401de8c0
mov r15b, 1
cmp bpl, 2
jne 0x140137509
jmp 0x140137560
xor r14d, r14d
mov rax, qword [r15 + 0x30]
test al, 2
je 0x1401373f6
jmp 0x1401374f0
mov ecx, r14d
sub cl, 1
movzx ecx, cl
cmovb ecx, r12d
test dil, dil
movzx edx, r14b
cmovne edx, ecx
mov byte [rax + 0x4d], dl
mov rax, qword [r15 + 0x30]
test al, 2
jne 0x1401374f0
test al, 4
jne 0x1401374d0
test al, 1
je 0x14013746e
cmp rsi, qword [r15 + 0x28]
jne 0x14013743f
mov rax, qword [r15 + 0x20]
lea rcx, [fcn.1401de830]
cmp qword [rax], rcx
jne 0x14013743f
lea rcx, [0x1401de850]
cmp qword [rax + 8], rcx
jne 0x14013743f
lea rcx, [fcn.1401de8c0]
cmp qword [rax + 0x10], rcx
jne 0x14013743f
lea rcx, [fcn.1401de910]
cmp qword [rax + 0x18], rcx
je 0x1401374a3
mov rax, qword [r15 + 0x30]
nop word cs:[rax + rax]
mov rcx, rax
and rcx, 0xfffffffffffffffe
lock cmpxchg qword [r15 + 0x30], rcx
jne 0x140137450
test al, 2
jne 0x1401374de
mov rax, qword [r15 + 0x20]
mov rcx, qword [r15 + 0x28]
call qword [rax + 0x18]
mov rcx, rsi
call fcn.1401de830
mov qword [r15 + 0x20], rax
mov qword [r15 + 0x28], rdx
mov rax, qword [r15 + 0x30]
nop word cs:[rax + rax]
mov rcx, rax
or rcx, 1
lock cmpxchg qword [r15 + 0x30], rcx
jne 0x140137490
test al, 2
jne 0x1401374f0
mov r15b, 1
test dil, dil
je 0x140137503
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140137503
mov byte [rax + 0x4c], 1
mov byte [rax + 0x4d], r14b
cmp bpl, 2
jne 0x140137509
jmp 0x140137560
xor r15d, r15d
cmp bpl, 2
jne 0x140137509
jmp 0x140137560
lock or qword [r15 + 0x30], 1
nop word cs:[rax + rax]
movzx eax, byte [r15 + 0x38]
mov byte [r15 + 0x38], 0
xor al, 1
test al, al
je 0x140137520
xor r15d, r15d
cmp bpl, 2
je 0x140137560
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140137560
mov byte [rax + 0x4c], bpl
mov byte [rax + 0x4d], r13b
jmp 0x140137560
mov rax, qword [rsp + 0x4a0]
test rax, rax
je 0x140137540
lock dec qword [rax]
jne 0x140137540
mov rcx, qword [rsp + 0x4a0]
call fcn.1401db860
mov qword [rsp + 0x4a0], 0
xor r15d, r15d
cmp bpl, 2
jne 0x140137509
nop word cs:[rax + rax]
test r15b, r15b
jne 0x140137330
mov rcx, rsi
call fcn.1401de910
mov r15, qword [rsp + 0x90]
mov r12, qword [rsp + 0x40]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1401376a4
movdqa xmm0, xmmword [rsp + 0xb0]
movdqu xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0xf0], rax
mov rsi, qword [rsp + 0x100]
mov rcx, rsi
mov edx, 0xffffffff
call sub.kernel32.dll_WaitForSingleObject
cmp eax, 0xffffffff
je 0x140138463
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rsp + 0xf8]
mov rdx, 0xffffffffffffffff
mov eax, 1
lock cmpxchg qword [rcx + 8], rdx
jne 0x14013844e
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rax]
mov qword [rax + 8], 1
cmp rcx, 1
jne 0x14013844e
mov rax, qword [rsp + 0xf8]
mov rsi, qword [rax + 0x20]
mov rdi, qword [rax + 0x28]
cmp qword [rax + 0x18], 0
mov qword [rax + 0x18], 0
je 0x14013844e
mov rax, qword [rsp + 0xf0]
lock dec qword [rax]
jne 0x14013765c
mov rcx, qword [rsp + 0xf0]
call fcn.1401db090
mov rax, qword [rsp + 0xf8]
lock dec qword [rax]
je 0x14013766a
test rsi, rsi
jne 0x14013767c
jmp 0x1401376a4
mov rax, qword [rsp + 0xf8]
lock dec qword [rax]
jne 0x140137655
lea rcx, [rsp + 0xf8]
call fcn.140062830
test rsi, rsi
je 0x1401376a4
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1401376a4
cmp qword [rdi + 0x10], 0x11
jb 0x140137693
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [rbx]
mov r11, qword [rsp + 0x28]
test r11, r11
je 0x1401376f9
lea rax, [r11 + 1]
movabs rcx, 0x800000000000000
dec rcx
cmp rax, rcx
ja 0x1401376ef
mov rcx, rax
shl rcx, 5
add r11, 0x11
add r11, rcx
jb 0x1401376ef
movabs rdx, 0x8000000000000001
add rdx, 0xffffffffffffffef
cmp r11, rdx
jbe 0x14013839f
xor edx, edx
mov r9, rbx
sub r9, rcx
jmp 0x140137700
mov eax, 1
xor edx, edx
lea r8, [rbx + 0x10]
pmovmskb r10d, xmm0
mov ecx, r10d
not ecx
add rax, rbx
mov qword [rsp + 0x358], rbx
mov qword [rsp + 0x360], r8
mov qword [rsp + 0x368], rax
mov word [rsp + 0x370], cx
mov qword [rsp + 0x378], r12
mov qword [rsp + 0x340], rdx
mov qword [rsp + 0x348], r11
mov qword [rsp + 0x350], r9
test r12, r12
je 0x140137856
cmp r10w, 0xffff
je 0x140137770
mov edx, 0xfffffffe
sub edx, r10d
jmp 0x1401377a5
movdqa xmm0, xmmword [r8]
pmovmskb ecx, xmm0
add rbx, 0xfffffffffffffe00
add r8, 0x10
cmp ecx, 0xffff
je 0x140137770
mov qword [rsp + 0x360], r8
mov qword [rsp + 0x358], rbx
mov edx, 0xfffffffe
sub edx, ecx
not ecx
mov eax, ecx
and eax, edx
mov word [rsp + 0x370], ax
dec r12
mov qword [rsp + 0x378], r12
tzcnt eax, ecx
shl rax, 5
sub rbx, rax
mov rdi, qword [rbx - 0x20]
mov r14, qword [rbx - 0x18]
movdqu xmm0, xmmword [rbx - 0x10]
movdqa xmmword [rsp + 0xf0], xmm0
test r14, r14
je 0x140137856
inc r12
mov rax, 0xffffffffffffffff
cmovne rax, r12
cmp rax, 5
mov ebx, 4
cmovae rbx, rax
mov rax, rbx
shr rax, 0x3a
jne 0x14013844e
mov rsi, rbx
shl rsi, 5
je 0x1401378aa
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140137842
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14013844e
mov rcx, rax
mov qword [0x1402d9150], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
test rax, rax
jne 0x1401378af
jmp 0x14013844e
lea rcx, [rsp + 0x340]
call fcn.1401d74c0
jmp 0x140138319
lea r13, [rdi + rax*8]
xor ebp, ebp
jmp 0x14013787c
inc rbp
cmp r12, rbp
je 0x140137135
mov rcx, qword [r13 + rbp*8]
mov rax, 0xffffffffffffffc0
lock xadd qword [rcx], rax
cmp rax, 0x3f
jbe 0x14013844e
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x140137870
mov rax, qword [rcx + 0x10]
call qword [rax + 0x10]
jmp 0x140137870
mov eax, 8
mov qword [rax], rdi
mov qword [rax + 8], r14
movaps xmm0, xmmword [rsp + 0xf0]
movups xmmword [rax + 0x10], xmm0
mov qword [rsp + 0x6f0], rax
mov qword [rsp + 0x6f8], rbx
mov qword [rsp + 0x700], 1
movdqu xmm0, xmmword [rsp + 0x340]
movups xmm1, xmmword [rsp + 0x350]
movups xmm2, xmmword [rsp + 0x360]
movups xmm3, xmmword [rsp + 0x370]
movaps xmmword [rsp + 0x120], xmm3
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0x110], xmm2
movdqa xmmword [rsp + 0xf0], xmm0
mov rdi, qword [rsp + 0x128]
movzx ecx, word [rsp + 0x120]
mov r14, qword [rsp + 0x108]
mov r15d, 1
mov rbx, qword [rsp + 0x110]
mov r10, 0xffffffffffffffff
lea rsi, [rsp + 0x6f0]
mov edx, 1
jmp 0x14013798c
mov rcx, rdx
shl rcx, 5
mov qword [rax + rcx], r12
mov qword [rax + rcx + 8], r13
movdqa xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rax + rcx + 0x10], xmm0
inc rdx
mov qword [rsp + 0x700], rdx
dec r15
mov ecx, ebp
test rdi, rdi
mov qword [rsp + 0x38], rdx
je 0x140137a4e
test cx, cx
je 0x1401379c0
lea ebp, [rcx - 1]
and ebp, ecx
dec rdi
test r14, r14
jne 0x1401379ee
jmp 0x140137a64
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
add r14, 0xfffffffffffffe00
add rbx, 0x10
cmp ecx, 0xffff
je 0x1401379c0
mov r8d, 0xfffffffe
sub r8d, ecx
not ecx
mov ebp, ecx
and ebp, r8d
dec rdi
tzcnt ecx, ecx
shl rcx, 5
mov r8, r14
sub r8, rcx
mov r12, qword [r8 - 0x20]
mov r13, qword [r8 - 0x18]
movdqu xmm0, xmmword [r8 - 0x10]
movdqa xmmword [rsp + 0x50], xmm0
test r13, r13
je 0x140137a5a
cmp rdx, qword [rsp + 0x6f8]
jne 0x140137960
mov r8, rdi
inc r8
cmove r8, r10
mov rcx, rsi
call fcn.140089620
mov r10, 0xffffffffffffffff
mov rdx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x6f0]
jmp 0x140137960
mov qword [rsp + 0xc8], r15
xor edi, edi
jmp 0x140137a71
mov qword [rsp + 0xc8], r15
jmp 0x140137a6f
mov qword [rsp + 0xc8], r15
xor r14d, r14d
mov ecx, ebp
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], rbx
mov word [rsp + 0x120], cx
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0xf0]
call fcn.1401d74c0
mov rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x48], rax
mov rsi, qword [rsp + 0x6f8]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x15
mov qword [rsp + 0x338], rsi
jae 0x140137af2
cmp rdx, 1
jbe 0x140138202
mov r8d, 1
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov r15, rdx
call fcn.1401d7ff0
shl r15, 5
add r15, rsi
jmp 0x14013821a
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140137b22
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14013844e
mov rcx, rax
mov qword [0x1402d9150], rax
mov rdx, qword [rsp + 0x38]
mov rax, rdx
shl rax, 4
movabs r8, 0x8000000000000001
add r8, 0xffffffffffffffdf
and r8, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14013844e
mov r12, rax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140137b78
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14013844e
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x100
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14013844e
mov r13, rax
mov rax, qword [rsp + 0x48]
lea rcx, [rax + 0x40]
mov qword [rsp + 0x2d8], rcx
add rax, 0xffffffffffffffe0
mov qword [rsp + 0xe0], rax
mov eax, 0x10
mov qword [rsp + 0xd0], rax
xor ebx, ebx
xor ebp, ebp
mov r10, qword [rsp + 0x38]
mov qword [rsp + 0x70], r12
jmp 0x140137be1
mov ebp, 1
mov rbx, qword [rsp + 0xd8]
cmp rbx, r10
jae 0x1401381db
mov r8, r10
sub r8, rbx
mov r9, rbx
shl r9, 5
mov rax, qword [rsp + 0x48]
lea rcx, [rax + r9]
cmp r8, 2
jae 0x140137c60
mov rax, r10
mov r14, rax
sub r14, rbx
jb 0x14013844e
cmp rax, r10
ja 0x14013844e
jae 0x140137c90
cmp r8, 0xa
jae 0x140137c90
lea r14, [rbx + 0xa]
cmp r14, r10
cmovae r14, r10
mov qword [rsp + 0xd8], r14
sub r14, rbx
jb 0x14013844e
cmp r8, 1
adc r8, 0
mov rdx, r14
call fcn.1401d7ff0
mov r10, qword [rsp + 0x38]
cmp rbp, qword [rsp + 0xd0]
je 0x140137ca6
jmp 0x140137d2b
mov rax, qword [rcx]
mov rdx, qword [rcx + 0x20]
cmp rdx, rax
jae 0x140138075
cmp r8, 2
jne 0x14013808a
lea rax, [rbx + 2]
mov r8d, 2
jmp 0x14013812a
mov qword [rsp + 0xd8], rax
cmp rbp, qword [rsp + 0xd0]
jne 0x140137d2b
movzx eax, byte [0x1402d9160]
mov rax, qword [0x1402d9150]
test rax, rax
jne 0x140137cce
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14013844e
mov qword [0x1402d9150], rax
mov r8, rbp
shl r8, 5
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14013844e
mov r12, rax
lea rax, [rbp*2]
mov qword [rsp + 0xd0], rax
mov r8, rbp
shl r8, 4
mov rcx, r12
mov rdx, r13
call sub.msvcrt.dll_memcpy
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapFree
mov r13, r12
mov r10, qword [rsp + 0x38]
mov r12, qword [rsp + 0x70]
mov rax, rbp
shl rax, 4
mov qword [r13 + rax], r14
mov qword [r13 + rax + 8], rbx
inc rbp
mov rax, rbp
cmp rbp, 2
mov qword [rsp + 0x2d0], r13
jae 0x140137dcd
jmp 0x140137bd0
mov r12, qword [rsp + 0x70]
mov rdx, r12
mov rdi, qword [rsp + 0x28]
sub rbp, rdx
mov rcx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x80]
add rax, rsi
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x98]
mov qword [rcx], rax
lea rdx, [rdi + 0x10]
not rbx
mov r8, qword [rsp + 0x30]
add r8, rbx
shl r8, 4
mov rcx, rdi
call sub.msvcrt.dll_memmove
mov rax, qword [rsp + 0x40]
cmp rax, 1
mov r10, qword [rsp + 0x38]
mov r13, qword [rsp + 0x2d0]
jbe 0x140137bcb
mov rbp, rax
lea r11, [rax - 1]
mov rcx, r11
shl rcx, 4
mov rax, qword [r13 + rcx]
mov rcx, qword [r13 + rcx + 8]
add rcx, rax
cmp rcx, r10
je 0x140137e40
mov rdx, rbp
shl rdx, 4
mov r8, qword [rdx + r13 - 0x20]
cmp r8, rax
jbe 0x140137e40
cmp rbp, 2
jbe 0x1401381c7
lea rdi, [rbp - 3]
mov rcx, rdi
shl rcx, 4
mov rcx, qword [r13 + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x140137e56
cmp rbp, 3
jbe 0x1401381d1
add r8, rcx
cmp qword [rdx + r13 - 0x40], r8
jbe 0x140137e56
jmp 0x140137bd0
cmp rbp, 3
jb 0x140137e5b
lea rdi, [rbp - 3]
mov rcx, rdi
shl rcx, 4
mov rcx, qword [r13 + rcx]
cmp rcx, rax
jb 0x140137e5f
lea rdi, [rbp - 2]
cmp rbp, rdi
jbe 0x14013844e
lea rax, [rdi + 1]
cmp rbp, rax
jbe 0x14013844e
mov rcx, rdi
shl rcx, 4
mov r14, qword [r13 + rcx + 8]
shl rax, 4
mov rdx, qword [r13 + rax]
mov r15, qword [r13 + rax + 8]
add r15, rdx
mov r12, r15
sub r12, r14
jb 0x14013844e
mov qword [rsp + 0x30], rbp
cmp r15, r10
ja 0x14013844e
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x40], r11
lea rdx, [rcx + r13]
mov qword [rsp + 0x28], rdx
mov rsi, qword [r13 + rcx]
lea rcx, [r13 + rax]
mov qword [rsp + 0x78], rcx
add rax, r13
add rax, 8
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x88], r14
shl r14, 5
add r14, qword [rsp + 0x48]
mov rbp, rsi
shl rbp, 5
lea r13, [r14 + rbp]
shl r15, 5
mov rbx, r12
sub rbx, rsi
cmp rbx, rsi
jae 0x140137fc0
mov rbp, rbx
shl rbp, 5
mov r12, qword [rsp + 0x70]
mov rcx, r12
mov rdx, r13
mov r8, rbp
call sub.msvcrt.dll_memcpy
add rbp, r12
test rsi, rsi
jle 0x140138060
test rbx, rbx
jle 0x140138060
add r15, qword [rsp + 0xe0]
mov rbx, rdi
mov rdi, qword [rsp + 0x28]
nop
mov rax, r13
mov rcx, rbp
mov rdx, qword [rbp - 0x20]
mov r8, qword [r13 - 0x20]
cmp rdx, r8
mov r13d, 0
sbb r13, r13
cmp rdx, r8
mov ebp, 0
adc rbp, 0xffffffffffffffff
shl r13, 5
add r13, rax
shl rbp, 5
add rbp, rcx
cmp rdx, r8
mov rax, rbp
cmovb rax, r13
movdqu xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
cmp r13, r14
jbe 0x140137fae
add r15, 0xffffffffffffffe0
cmp rbp, r12
ja 0x140137f50
mov r14, r13
mov rdx, r12
jmp 0x140137d62
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
mov rdx, r14
mov r8, rbp
call sub.msvcrt.dll_memcpy
add rbp, rbx
test rsi, rsi
jle 0x140138065
cmp r12, rsi
mov rbx, rdi
jle 0x140137d55
add r15, qword [rsp + 0x48]
mov r12, qword [rsp + 0x70]
mov rdx, r12
mov rdi, qword [rsp + 0x28]
nop dword [rax]
mov r8, rdx
mov rcx, qword [r13]
xor edx, edx
xor eax, eax
cmp rcx, qword [r8]
setae dl
setb cl
mov r9, r8
cmovb r9, r13
movdqu xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movdqu xmmword [r14], xmm0
add r14, 0x20
shl rdx, 5
add rdx, r8
cmp rdx, rbp
jae 0x140137d62
mov al, cl
shl rax, 5
add r13, rax
cmp r13, r15
jb 0x140138000
jmp 0x140137d62
mov r14, r13
jmp 0x14013806a
mov r12, qword [rsp + 0x70]
mov rdx, r12
mov rbx, rdi
jmp 0x140137d5d
cmp r8, 2
jne 0x1401380d1
lea rax, [rbx + 2]
mov r8d, 2
jmp 0x140137c00
mov r10, qword [rsp + 0xc8]
lea r11, [r10 + rbx]
add r9, qword [rsp + 0x2d8]
mov r10d, 2
mov rsi, rdx
nop word [rax + rax]
mov rdi, rsi
mov rsi, qword [r9]
cmp rsi, rdi
jae 0x140138112
lea rdi, [r11 + r10]
inc rdi
inc r10
add r9, 0x20
cmp rdi, 2
jne 0x1401380b0
jmp 0x14013810f
mov r10, qword [rsp + 0xc8]
lea r11, [r10 + rbx]
add r9, qword [rsp + 0x2d8]
mov r10d, 2
mov rsi, rdx
nop
mov rdi, rsi
mov rsi, qword [r9]
cmp rsi, rdi
jb 0x140138112
lea rdi, [r11 + r10]
inc rdi
inc r10
add r9, 0x20
cmp rdi, 2
jne 0x1401380f0
mov r10, r8
lea r9, [r10 + rbx]
mov r8, r10
cmp rdx, rax
mov rax, r9
mov r10, qword [rsp + 0x38]
jae 0x140137c00
cmp rbx, rax
ja 0x14013844e
cmp rax, r10
ja 0x14013844e
cmp r8, 2
jb 0x140137c00
mov r11, rax
mov rax, r8
shr rax, 1
lea rdx, [rbx + r8]
shl rdx, 5
add rdx, qword [rsp + 0xe0]
mov r9, rcx
nop word cs:[rax + rax]
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r9 + 0x10], xmm1
movups xmmword [r9], xmm0
movdqa xmm0, xmmword [rsp + 0xf0]
movaps xmm1, xmmword [rsp + 0x100]
movups xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx], xmm0
add r9, 0x20
add rdx, 0xffffffffffffffe0
dec rax
jne 0x140138170
mov rax, r11
jmp 0x140137c00
mov ebp, 2
jmp 0x140137bd0
mov ebp, 3
jmp 0x140137bd0
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r12
call sub.kernel32.dll_HeapFree
mov rdx, qword [rsp + 0x38]
mov r15, rdx
shl r15, 5
mov rsi, qword [rsp + 0x48]
add r15, rsi
test rdx, rdx
je 0x14013829b
lea r12, [rsp + 0xf8]
lea rdi, [rsp + 0xf0]
mov rsi, qword [rsp + 0x48]
jmp 0x14013824f
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
add rsi, 0x20
cmp rsi, r15
je 0x1401382f3
mov rax, qword [rsi + 8]
test rax, rax
je 0x140138297
movdqu xmm0, xmmword [rsi + 0x10]
movdqu xmmword [r12], xmm0
mov qword [rsp + 0xf0], rax
mov rcx, rdi
call fcn.1401dd3e0
test rax, rax
je 0x140138242
mov rbx, rax
mov r14, rdx
mov rcx, rax
call qword [rdx]
cmp qword [r14 + 8], 0
je 0x140138242
cmp qword [r14 + 0x10], 0x11
jb 0x140138231
mov rbx, qword [rbx - 8]
jmp 0x140138231
add rsi, 0x20
sub r15, rsi
je 0x1401382f3
shr r15, 5
add rsi, 0x10
jmp 0x1401382b9
add rsi, 0x20
dec r15
je 0x1401382f3
mov rcx, qword [rsi + 8]
call sub.kernel32.dll_CloseHandle
mov rax, qword [rsi - 8]
lock dec qword [rax]
jne 0x1401382e0
mov rcx, qword [rsi - 8]
call fcn.1401db090
mov rax, qword [rsi]
lock dec qword [rax]
jne 0x1401382b0
jmp 0x1401382e9
mov rax, qword [rsi]
lock dec qword [rax]
jne 0x1401382b0
mov rcx, rsi
call fcn.140062830
jmp 0x1401382b0
cmp qword [rsp + 0x338], 0
mov r15, qword [rsp + 0x90]
je 0x140138319
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x498]
lock dec qword [rax]
jne 0x140138334
lea rcx, [rsp + 0x498]
call fcn.14014d430
mov rcx, qword [rsp + 0x4a0]
test rcx, rcx
je 0x1401344a9
mov rax, qword [rcx + 0x30]
nop dword [rax]
mov rdx, rax
or rdx, 4
lock cmpxchg qword [rcx + 0x30], rdx
jne 0x140138350
and eax, 0xa
cmp eax, 8
jne 0x140138372
mov rax, qword [rcx + 0x10]
mov rcx, qword [rcx + 0x18]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x4a0]
test rax, rax
je 0x1401344a9
lock dec qword [rax]
jne 0x1401344a9
mov rcx, qword [rsp + 0x4a0]
call fcn.1400779e0
jmp 0x1401344a9
mov edx, 0x10
jmp 0x1401376f1
ud2
call fcn.1401ca810
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je 0x14013a698
test al, 4
je 0x14013a900
test al, 3
je 0x14013a650
cmp rax, 0x3f
jbe 0x14013a900
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013a66a
lea rax, [0x1401fceb4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
lea r14, [rsp + 0x58]
lea esi, [rsp + 0x58]
lea esi, [rsp + 0x58]
mov qword [rsp + 0x68], r14
mov eax, dword [rsi + 0x38]
and eax, 0xfffffffe
cmp eax, 0x3b9aca00
je 0x14013a900
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013a743
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013a746
lea rdi, [rsi + 0x20]
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.1401642d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
mov rcx, rdi
jmp 0x14013a8e0
xorps xmm6, xmm6
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1401853a0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013a765
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013a880
mov rax, qword [rsi]
jmp 0x14013a796
test rcx, rcx
js 0x14013a900
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013a7cf
test al, 1
je 0x14013a900
test al, 0x20
jne 0x14013a8a0
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013a780
cmp rcx, 0x3f
jbe 0x14013a900
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013a796
cmp dl, 2
je case.0x14013a6a6.3
movzx eax, dl
cmp eax, 1
jne case.0x14013a6a6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x58], 1
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x28]
sub al, ch
push 0x1b
or al, byte [rax]
sub al, ch
push 0x1b
or al, byte [rax]
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013a900
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013a6a6.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14013a83b
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013a857
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013a853
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.14014ed60
mov rax, qword [rsi + 0x70]
test rax, rax
je 0x14013a86c
mov rcx, qword [rsi + 0x78]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013a6a6.2
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1401642d0
mov qword [rsp + 0x38], 0
jmp 0x14013a8d0
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1401642d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1401642d0
mov rcx, rsi
call fcn.140152150
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013a6a6.4
test al, 4
je 0x14013abec
test al, 3
je 0x14013a930
cmp rax, 0x3f
jbe 0x14013abec
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013a94a
lea rax, [0x1401fcec4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rsi
lea r14, [rsp + 0x20]
mov qword [rsp + 0x30], r14
mov rax, qword [rsi + 0x30]
cmp rax, 5
je 0x14013a9b9
and eax, 0xfffffffe
cmp eax, 6
je 0x14013abec
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013aa2a
movups xmm6, xmmword [rax + 0x20]
jo 0x14013a9f1
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013aa2d
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1401616b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14013abc9
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140177bd0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013aa4c
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013ab66
mov rax, qword [rsi]
jmp 0x14013aa76
test rcx, rcx
js 0x14013abec
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013aaaf
test al, 1
je 0x14013abec
test al, 0x20
jne 0x14013ab87
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013aa60
cmp rcx, 0x3f
jbe 0x14013abec
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013aa76
cmp dl, 2
je case.0x14013a986.3
movzx eax, dl
cmp eax, 1
jne case.0x14013a986.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
and al, 0x38
and al, 0x38
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
call fcn.1401dc370
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013abec
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013a986.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013ab37
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013ab33
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.14014f7d0
mov rax, qword [rsi + 0x228]
test rax, rax
je 0x14013ab52
mov rcx, qword [rsi + 0x230]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013a986.2
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1401616b0
mov qword [rsp + 0x40], 0
jmp 0x14013abb8
invalid
xor dword [rax - 0x39], ecx
and al, 0x38
invalid
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1401616b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1401616b0
mov rcx, rsi
call fcn.140152440
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x230
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
add ebx, ebp
invalid
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013a986.4
test al, 4
je 0x14013aeaf
test al, 3
je 0x14013ac10
cmp rax, 0x3f
jbe 0x14013aeaf
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
cmpxchg dword [rsi], edx
cmpxchg dword [rsi], edx
jne 0x14013ac2a
lea rax, [0x1401fced4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 3
jae 0x14013aeaf
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013acfe
movups xmm6, xmmword [rax + 0x20]
jo 0x14013acc5
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013ad01
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140163f10
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14013ae8e
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.140163170
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013ad20
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013ae2b
mov rax, qword [rsi]
jmp 0x14013ad56
test rcx, rcx
js 0x14013aeaf
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013ad8f
test al, 1
je 0x14013aeaf
test al, 0x20
jne 0x14013ae4c
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013ad40
cmp rcx, 0x3f
jbe 0x14013aeaf
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14013ad56
ret 0xd200
cmp dl, 2
je case.0x14013ac66.3
movzx eax, dl
cmp eax, 1
jne case.0x14013ac66.2
mov rcx, rbx
mov rdx, rsi
call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013aeaf
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013ac66.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013adfc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013adf8
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
call fcn.140150890
mov rax, qword [rsi + 0xfc0]
test rax, rax
je 0x14013ae17
mov rcx, qword [rsi + 0xfc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013ac66.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
iretd
nop
add al, byte [rax]
mov qword [rsp + 0x48], 0
jmp 0x14013ae7d
fld1
iretd
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140163f10
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
and al, 0x60
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140163f10
mov rcx, rsi
call fcn.140151e60
movaps xmm6, xmmword [rsp + 0xfc0]
add rsp, 0xfd8
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
in al, dx
lock add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x2e0], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013aefa
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013ac66.4
test al, 4
je 0x14013b19c
test al, 3
je 0x14013aee0
cmp rax, 0x3f
jbe 0x14013b19c
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013aefa
lea rax, [0x1401fcee4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea r14, [rsp + 0x28]
mov qword [rsp + 0x38], r14
cmp dword [rsi + 0x30], 3
jae 0x14013b19c
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013afce
movups xmm6, xmmword [rax + 0x20]
jo 0x14013af95
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013afd1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140162c90
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14013b179
xorps xmm6, xmm6
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1401625e0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013aff0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x140130c93.30
mov rax, qword [rsi]
jmp 0x14013b026
test rcx, rcx
js 0x14013b19c
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013b05f
test al, 1
je 0x14013b19c
test al, 0x20
jne 0x14013b137
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013b010
cmp rcx, 0x3f
jbe 0x14013b19c
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013b026
cmp dl, 2
je case.0x14013af36.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14013af36.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.1401dc370
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013b19c
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013af36.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14013b0cb
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013b0e7
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013b0e3
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.14014eee0
mov rax, qword [rsi + 0x2e0]
test rax, rax
je 0x14013b102
mov rcx, qword [rsi + 0x2e8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013af36.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140162c90
mov qword [rsp + 0x48], 0
jmp 0x14013b168
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140162c90
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
and al, 0x60
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140162c90
mov rcx, rsi
call fcn.140152540
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013af36.4
test al, 4
je 0x14013b45f
test al, 3
je 0x14013b1c0
add esi, dword [rdx + rbx*8 + 0x48]
cmp eax, 0x3f
clc
invalid
cmp rax, 0x3f
clc
invalid
jbe 0x14013b45f
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013b1da
lea rax, [0x1401fcef4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
sub byte [rax - 0x77], cl
je 0x14013b24c
xor byte [rax - 0x73], cl
and al, 0x28
sub byte [rax - 0x77], cl
je 0x14013b24c
xor byte [rax - 0x73], cl
and al, 0x28
mov qword [rsp + 0x20], rax
cmp dword [rsi + 0x30], 0xb
jae 0x14013b45f
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b2ae
movups xmm6, xmmword [rax + 0x20]
jo 0x14013b275
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b2b1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140162e80
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14013b43e
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1401776b0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b2d0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013b3db
mov rax, qword [rsi]
jmp 0x14013b306
test rcx, rcx
js 0x14013b45f
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013b33f
test al, 1
je 0x14013b45f
test al, 0x20
jne 0x14013b3fc
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013b2f0
cmp rcx, 0x3f
jbe 0x14013b45f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013b306
cmp dl, 2
je case.0x14013b216.3
movzx eax, dl
cmp eax, 1
jne case.0x14013b216.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401dbaa0
bnd call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013b45f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013b216.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013b3ac
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013b3a8
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
call fcn.14014fff0
mov rax, qword [rsi + 0x1f8]
test rax, rax
je 0x14013b3c7
mov rcx, qword [rsi + 0x200]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013b216.2
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140162e80
mov qword [rsp + 0x40], 0
jmp 0x14013b42d
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140162e80
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140162e80
mov rcx, rsi
call fcn.140151c70
movaps xmm6, xmmword [rsp + 0x1f0]
add rsp, 0x208
add byte [rax], al
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
mov cl, 0x16
mov cl, 0x16
je case.0x14013b216.4
test al, 4
je 0x14013b7ce
test al, 3
je 0x14013b490
cmp rax, 0x3f
jbe 0x14013b7ce
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013b4aa
lea rax, [0x1401fcf04]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
je 0x14013b51c
cmp byte [rax - 0x73], cl
and al, 0x30
je 0x14013b51c
cmp byte [rax - 0x73], cl
and al, 0x30
mov qword [rsp + 0x28], rax
cmp byte [rsi + 0xa8], 3
jae 0x14013b7ce
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013b55f
fmul qword [rcx]
add byte [rax - 0x7b], cl
sal byte [rbx + rdi + 0xf], 0x10
movups xmm6, xmmword [rax + 0x20]
jo 0x14013b548
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b562
mov rdi, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b6ae
add byte [rax], al
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
jmp 0x14013b6b1
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.140177de0
mov ebx, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b581
movups xmmword [rax + 0x20], xmm6
test bl, bl
je 0x14013b685
lea rbx, [rsi + 0x20]
mov rax, qword [rsi]
test al, 1
je 0x14013b7ce
test al, 0x20
jne 0x14013b71a
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013b5d0
cmp rcx, 0x3f
cmp ecx, 0x3f
jbe 0x14013b7ce
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013b590
jmp 0x14013b5e6
test rcx, rcx
js 0x14013b7ce
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
jne 0x14013b590
cmp dl, 2
je case.0x14013b4e6.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14013b4e6.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401dbaa0
bnd call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013b7ce
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013b4e6.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013b653
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013b64f
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
call fcn.14014f350
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x14013b66e
mov rcx, qword [rsi + 0xc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013b4e6.2
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b743
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b746
xorps xmm6, xmm6
lea rdi, [rsi + 0x30]
mov rcx, rdi
call fcn.14014f350
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b6d4
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b6f6
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b6f9
xorps xmm6, xmm6
mov rcx, rdi
call fcn.14014f350
mov qword [rsi + 0x30], 1
mov qword [rsi + 0x38], 0
mov qword [rsi + 0x48], rbx
jmp 0x14013b79a
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b7c6
invalid
cwde
add byte [rax], al
invalid
test byte [rax + 0xf000000], bl
adc byte [rax + 0x20], dh
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b6b5
xorps xmm6, xmm6
mov rcx, rdi
call fcn.14014f350
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b765
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b787
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b78a
xorps xmm6, xmm6
mov rcx, rdi
call fcn.14014f350
mov qword [rsi + 0x30], 0
invalid
add dh, al
xchg byte [rax + 0x3000000], ch
mov byte [rsi + 0xa8], 3
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
test eax, eax
test eax, eax
je 0x14013b7b1
movups xmmword [rax + 0x20], xmm6
mov rcx, rsi
call fcn.140151640
invalid
add byte [rdi], cl
sub byte [rsp + 0x40], dh
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
xorps xmm6, xmm6
jmp 0x14013b6b5
ud2
mov rax, qword [rcx]
jmp 0x14013b81a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013b4e6.4
test al, 4
je 0x14013babc
test al, 3
je 0x14013b800
cmp rax, 0x3f
jbe 0x14013babc
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
cmpxchg dword [rsi], edx
cmpxchg dword [rsi], edx
jne 0x14013b81a
lea rax, [0x1401fcf14]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rsi
lea r14, [rsp + 0x20]
mov qword [rsp + 0x30], r14
cmp dword [rsi + 0x30], 0xb
jae 0x14013babc
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013b8ee
movups xmm6, xmmword [rax + 0x20]
jo 0x14013b8b5
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013b8f1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140162e80
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14013ba99
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.1401776b0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013b910
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013ba36
mov rax, qword [rsi]
jmp 0x14013b946
test rcx, rcx
js 0x14013babc
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013b97f
test al, 1
je 0x14013babc
test al, 0x20
jne 0x14013ba57
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013b930
cmp rcx, 0x3f
jbe 0x14013babc
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013b946
cmp dl, 2
je case.0x14013b856.3
movzx eax, dl
cmp eax, 1
jne case.0x14013b856.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
and al, 0x38
and al, 0x38
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
call fcn.1401dc370
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013babc
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013b856.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013ba07
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013ba03
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
xor al, ch
in al, 0x45
add dword [rax], eax
call fcn.14014fff0
mov rax, qword [rsi + 0x1f8]
test rax, rax
je 0x14013ba22
mov rcx, qword [rsi + 0x200]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013b856.2
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
fld1
xor al, 0x74
add al, byte [rax]
fld1
xor al, 0x74
add al, byte [rax]
mov qword [rsp + 0x40], 0
jmp case.0x140130c93.44
invalid
xor dword [rax - 0x39], ecx
and al, 0x38
or al, 0
add byte [rax], al
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140162e80
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
and al, 0x58
and al, 0x58
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140162e80
mov rcx, rsi
call fcn.140152050
movaps xmm6, xmmword [rsp + 0x1f0]
add rsp, 0x200
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
enter 0, 0
movaps xmmword [rsp + 0xb0], xmm6
mov rsi, rcx
invalid
mov rax, qword [rcx]
mov eax, dword [rcx]
invalid
mov eax, dword [rcx]
jmp 0x14013bafa
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013b856.4
test al, 4
je 0x14013bcfc
test al, 3
je 0x14013bae0
cmp rax, 0x3f
jbe 0x14013bcfc
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
cli
invalid
cli
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013bafa
lea rax, [0x1401fcf24]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rsi
je 0x14013bb6c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
je 0x14013bb6c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
mov qword [rsp + 0x30], r14
cmp byte [rsi + 0xa0], 3
add byte [rax], al
add byte [rbx], al
add byte [rax], al
add byte [rbx], al
jae 0x14013bcfc
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013bbbf
invalid
movups xmm6, xmmword [rax + 0x20]
jo 0x14013bb98
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013bbc2
lea rdi, [rsi + 0x20]
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov ecx, edi
call fcn.140163ff0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
jmp 0x14013bcca
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140177a80
mov ebx, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013bbe1
movups xmmword [rax + 0x20], xmm6
lea rdi, [rsi + 0x20]
test bl, bl
je 0x14013bcac
mov rax, qword [rsi]
jmp 0x14013bc16
nop word cs:[rax + rax]
test rcx, rcx
js 0x14013bcfc
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013bc4f
test al, 1
je 0x14013bcfc
test al, 0x20
jne 0x14013bb8a
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013bc00
cmp rcx, 0x3f
cmp ecx, 0x3f
jbe 0x14013bcfc
rol dword [rax], 0
add byte [rax - 0x7d], cl
rol eax, 0x48
cmp ecx, 0x40
invalid
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
invalid
setb dl
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013bc16
cmp dl, 2
je case.0x14013bb36.3
movzx eax, dl
cmp eax, 1
jne case.0x14013bb36.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
and byte [rax - 0x7d], r9b
rcl byte [rax], 0xc6
and al, 0x20
add dword [rax - 0x77], ecx
and al, 0x38
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
call fcn.1401dc370
invalid
invalid
or al, byte [rax]
mov rax, 0xffffffffffffffc0
mov eax, 0xffffffc0
invalid
mov eax, 0xffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013bcfc
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013bb36.2
mov rcx, rsi
call fcn.140151320
push rsi
add dword [rax], eax
push rsi
add dword [rax], eax
jmp case.0x14013bb36.2
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
and al, 0x38
and al, 0x38
cmp byte [rax - 0x77], cl
stc
mov rcx, rdi
call fcn.140163ff0
mov qword [rsp + 0x38], 0
add byte [rax], al
invalid
add byte [rax], al
add dh, al
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rbx], al
mov byte [rsp + 0xa8], 3
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140163ff0
mov rcx, rsi
call fcn.140152740
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r14
ret
ud2
push rbx
sub rsp, 0x148
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013bd3a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013bb36.4
test al, 4
je 0x14013c079
test al, 3
je 0x14013bd20
cmp rax, 0x3f
jbe 0x14013c079
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013bd3a
lea rax, [0x1401fcf34]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 1
ja 0x14013c079
mov rdi, qword [rsi + 0x28]
xor r15d, r15d
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013beb1
mov r15, qword [rax + 0x20]
mov r12, qword [rax + 0x28]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
and byte [rbx + rcx*4 + 0x60], cl
sub byte [rax - 0x39], cl
and byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
js 0x14013bdf0
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
jne 0x14013bec4
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x48]
movups xmm2, xmmword [rsi + 0x58]
movups xmm3, xmmword [rsi + 0x68]
push 0x244c110f
pop rax
push 0x244c110f
pop rax
mov rax, qword [rsi + 0x78]
mov qword [rsp + 0x88], rax
add byte [rax], al
add byte [rax], al
movups xmmword [rsp + 0x78], xmm3
movups xmmword [rsp + 0x68], xmm2
movaps xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x130], xmm1
movaps xmm2, xmmword [rsp + 0x70]
jo 0x14013be38
sub dword [rsp + 0x120], edx
jo 0x14013be38
sub dword [rsp + 0x120], edx
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x110], xmm3
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
movaps xmmword [rsp + 0x100], xmm4
movaps xmmword [rsp + 0xf0], xmm0
add dword [rax], eax
add byte [rdi], cl
sub dword [rsp + 0xf0], eax
movups xmmword [rsi + 0xc0], xmm1
add byte [rax], al
movups xmmword [rsi + 0xb0], xmm2
movups xmmword [rsi + 0xa0], xmm3
movups xmmword [rsi + 0x90], xmm4
movups xmmword [rsi + 0x80], xmm0
jmp 0x14013becd
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140164200
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
jmp 0x14013c049
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
je 0x14013bddb
cmp eax, 3
jne 0x14013c079
lea rdi, [rsi + 0x20]
lea r14, [rsi + 0x80]
lea rdx, [rsp + 0x28]
mov rcx, r14
call fcn.140148cf0
test al, al
je 0x14013bffb
mov byte [rsi + 0xd0], 3
xor ecx, ecx
leave
leave
call fcn.1401d91c0
test rax, rax
je 0x14013bf08
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov rax, qword [rsi]
jmp 0x14013bf26
test rcx, rcx
js 0x14013c079
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013bf5f
test al, 1
je 0x14013c079
test al, 0x20
jne 0x14013be7b
invalid
dec dword [rax - 0x77]
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013bf10
cmp rcx, 0x3f
jbe 0x14013c079
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013bf26
cmp dl, 2
je case.0x14013bd76.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14013bd76.2
mov rcx, rdi
mov rdx, rsi
bnd call fcn.1401dbaa0
bnd call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013c079
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013bd76.2
mov rax, qword [rdi]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
or byte [rax - 0x77], cl
stc
mov rcx, rdi
call fcn.140062fd0
mov rcx, rbx
jmp 0x14013bfcc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013bfc8
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
call fcn.1401513e0
mov rax, qword [rsi + 0xe8]
test rax, rax
je case.0x14013a6a6.34
mov rcx, qword [rsi + 0xf0]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
or eax, dword [rax]
or eax, dword [rax]
jmp case.0x14013bd76.2
lea rcx, [rsi + 0x98]
call fcn.1401515b0
mov rcx, r14
call fcn.14014fee0
mov byte [rsi + 0xd0], 1
xor ecx, ecx
leave
leave
call fcn.1401d91c0
test rax, rax
je 0x14013c02a
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov dword [rax + 0x28], esp
mov dword [rax + 0x28], esp
invalid
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
mov rcx, rdi
call fcn.140164200
mov qword [rsp + 0x48], 0
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x40], 2
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140164200
mov rcx, rsi
call fcn.140152340
nop
add rsp, 0x148
pop rbx
pop rdi
pop rsi
pop r12
pop rsp
pop rsp
pop r14
pop r15
ret
ud2
add ebx, ebp
invalid
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013bd76.4
test al, 4
je 0x14013c33f
test al, 3
je 0x14013c0a0
add esi, dword [rdx + rbx*8 + 0x48]
cmp eax, 0x3f
clc
invalid
cmp rax, 0x3f
clc
invalid
jbe 0x14013c33f
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
cmpxchg dword [rsi], edx
cmpxchg dword [rsi], edx
jne 0x14013c0ba
lea rax, [0x1401fcf44]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x30], rax
xor byte [rax - 0x77], cl
je 0x14013c12c
cmp byte [rax - 0x73], cl
and al, 0x30
xor byte [rax - 0x77], cl
je 0x14013c12c
cmp byte [rax - 0x73], cl
and al, 0x30
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 3
jae 0x14013c33f
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013c18e
movups xmm6, xmmword [rax + 0x20]
jo 0x14013c155
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013c191
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140162c90
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14013c31e
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.1401625e0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
or dword [rax], eax
or dword [rax], eax
test rax, rax
je 0x14013c1b0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013c2bb
mov rax, qword [rsi]
jmp 0x14013c1e6
test rcx, rcx
js 0x14013c33f
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013c21f
invalid
cmp dword [rax + 0x51840f01], ebp
add dword [rax], eax
add byte [rax - 0x197af0e0], ch
add byte [rax], al
test al, 1
je 0x14013c33f
test al, 0x20
jne 0x14013c2dc
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013c1d0
cmp rcx, 0x3f
jbe 0x14013c33f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14013c1e6
ret 0xd200
cmp dl, 2
je case.0x14013c0f6.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14013c0f6.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401dbaa0
bnd call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013c33f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013c0f6.2
int3
add byte [rax], al
invalid
int3
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013c28c
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013c288
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
call fcn.14014eee0
mov rax, qword [rsi + 0x2e0]
test rax, rax
je 0x14013c2a7
mov rcx, qword [rsi + 0x2e8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013c0f6.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
mov edi, 0x48000269
mov dword [rsp + 0x48], 0
fld1
mov edi, 0x48000269
mov dword [rsp + 0x48], 0
jmp 0x14013c30d
xor dword [rax - 0x39], ecx
and al, 0x40
add al, 0
add byte [rax], al
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
and al, 0x40
mov rcx, rbx
mov ecx, ebx
call fcn.140162c90
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
and al, 0x60
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140162c90
mov rcx, rsi
call fcn.140151a70
push rdi
add dword [rax], eax
push rdi
add dword [rax], eax
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f8
clc
add al, byte [rax]
add byte [rax], al
clc
add al, byte [rax]
add byte [rax], al
pop rbx
pop rbp
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
add byte [rax], al
movaps xmmword [rsp + 0xb0], xmm6
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013c38a
mov rdx, rax
and rdx, 0xfffffffffffffffa
cli
cli
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
mov cl, 0x16
mov cl, 0x16
je 0x14013c3b8
test al, 4
je 0x14013c56b
test al, 3
je 0x14013c370
cmp rax, 0x3f
jbe 0x14013c56b
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
cli
invalid
cli
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013c38a
lea rax, [0x1401fcf54]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
je 0x14013c3fc
xor byte [rax - 0x73], cl
and al, 0x28
je 0x14013c3fc
xor byte [rax - 0x73], cl
and al, 0x28
mov qword [rsp + 0x20], rax
cmp byte [rsi + 0xa0], 3
add byte [rax], al
add byte [rbx], al
add byte [rax], al
add byte [rbx], al
jae 0x14013c56b
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013c44f
int 9
add byte [rax - 0x7b], cl
sal byte [rbx + rcx*2 + 0xf], 0x10
jo 0x14013c428
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013c452
lea rdi, [rsi + 0x20]
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov ecx, edi
call fcn.140163ff0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
jmp 0x14013c53b
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.140177a80
mov ebx, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013c471
movups xmmword [rax + 0x20], xmm6
lea rdi, [rsi + 0x20]
jle 0x14013c495
test bl, bl
je 0x14013c51d
invalid
invalid
add byte [rax], al
invalid
test byte [rax + 0x48000000], ah
mov eax, dword [rsi]
mov rax, qword [rsi]
jmp 0x14013c4a6
nop word cs:[rax + rax]
test rcx, rcx
js 0x14013c56b
rol byte [rax], cl
add byte [rax], al
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
invalid
je 0x14013c4df
invalid
test al, 1
je 0x14013c56b
test al, 0x20
jne 0x14013c41a
invalid
invalid
invalid
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013c490
ror dword [rax - 0x7d], 0xe1
invalid
cmp rcx, 0x3f
jbe 0x14013c56b
add byte [rax], al
invalid
stc
invalid
add byte [rax], al
add byte [rax - 0x7d], cl
rol eax, 0x48
cmp ecx, 0x40
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013c4a6
cmp dl, 2
je case.0x14013c3c6.3
invalid
invalid
movzx eax, dl
cmp eax, 1
clc
add dword [rbp + 0x6c], esi
clc
add dword [rbp + 0x6c], esi
mov rcx, rdi
mov rdx, rsi
call fcn.1401dbaa0
test eax, 0x480009f5
mov eax, 0xffffffc0
test eax, 0x480009f5
mov eax, 0xffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013c56b
invalid
invalid
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013c3c6.2
mov rcx, rsi
call fcn.140151260
add qword [r8], r8
add qword [r8], r8
jmp case.0x14013c3c6.2
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
and al, 0x38
and al, 0x38
mov rcx, rdi
call fcn.140163ff0
mov qword [rsp + 0x38], 0
add byte [rax], al
invalid
add byte [rax], al
add dh, al
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rbx], al
mov byte [rsp + 0xa8], 3
lea rdx, [rsp + 0x38]
cmp byte [rax - 0x77], cl
stc
mov rcx, rdi
call fcn.140163ff0
mov rcx, rsi
call fcn.1401519b0
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc0
pop rbx
pop rdi
pop rsi
ret
ud2
in al, dx
jo 0x14013c58a
sub dword [rsp + 0x60], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013c5aa
nop word [rax + rax]
nop dword [rax + rax]
test byte [rax], al
add byte [rax], al
add byte [rax], al
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013c3c6.4
test al, 4
je 0x14013c824
test al, 3
je 0x14013c590
cmp rax, 0x3f
cmp eax, 0x3f
clc
invalid
jbe 0x14013c824
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013c5aa
invalid
ror byte [rax - 0x73], cl
add eax, 0xc0985
lea rax, [0x1401fcf64]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
invalid
loope 0x14013c631
lea rax, [0x1402a2e50]
lea eax, [0x1402a2e50]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rsi
and al, 0x50
and al, 0x50
lea r14, [rsp + 0x48]
mov qword [rsp + 0x58], r14
movzx eax, byte [rsi + 0x50]
and al, 6
cmp al, 4
je 0x14013c824
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013c67a
movups xmm6, xmmword [rax + 0x20]
jo 0x14013c649
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013c67d
lea rdi, [rsi + 0x20]
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.140162f60
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
adc ebp, dword [rcx + 2]
add byte [rax - 0x75], cl
sub byte [rax - 0x39], r9b
and al, 0x20
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x14013c807
xorps xmm6, xmm6
lea rdx, [rsp + 0x58]
and al, 0x58
mov rcx, rdi
call fcn.140177c80
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013c69c
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013c7b0
mov rax, qword [rsi]
jmp 0x14013c6c6
test rcx, rcx
js 0x14013c824
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
je 0x14013c6ff
test al, 1
je 0x14013c824
test al, 0x20
jne 0x14013c7cd
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013c6b0
cmp rcx, 0x3f
jbe 0x14013c824
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013c6c6
cmp dl, 2
je case.0x14013d846.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14013d846.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x20], rax
and al, 0x20
and al, 0x20
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r14
je 0x14013c74a
sub byte [rcx + rcx*4 + 0x74], cl
and al, 0x30
lea rcx, [rsp + 0x20]
call fcn.1401dc370
and al, ch
cmp bh, ah
or dword [rax], eax
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013c824
add byte [rax], al
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013d846.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
mov ecx, ebx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013c787
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013c783
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.14014f570
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14013c79c
invalid
invalid
mov rcx, qword [rsi + 0x70]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
leave
sbb dword [rax], eax
leave
sbb dword [rax], eax
xor edx, edx
call sub.kernel32.dll_HeapFree
shr al, cl
or eax, dword gs:[rax]
jmp case.0x14013d846.2
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140162f60
add eax, 0x24548d48
and byte [rax - 0x77], cl
fld1
sahf
add al, byte [eax]
mov qword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
jmp 0x14013c7fa
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
push rsp
and al, 0x20
push rsp
and al, 0x20
mov rcx, rbx
call fcn.140162f60
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
and al, 0x38
and al, 0x38
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140162f60
mov rcx, rsi
call fcn.1401518c0
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x70
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
invalid
ud2
nop dword [rax + rax]
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x140
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013c86a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013d846.4
test al, 4
je 0x14013cbc6
test al, 3
je 0x14013c850
cmp rax, 0x3f
jbe 0x14013cbc6
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013c86a
lea rax, [0x1401fcf74]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
invalid
loope 0x14013c8f1
lea rax, [0x1402a2e50]
lea eax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea r15, [rsp + 0x28]
mov qword [rsp + 0x38], r15
cmp dword [rsi + 0x30], 1
ja 0x14013cbc6
mov rdi, qword [rsi + 0x28]
xor r12d, r12d
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013c9e1
mov r12, qword [rax + 0x20]
mov r13, qword [rax + 0x28]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
invalid
and byte [rbx + rcx*4 + 0x68], cl
sub byte [rax - 0x39], cl
and byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
js 0x14013c920
invalid
sub byte [rax - 0x73], cl
pop rsi
xor byte [rdi], cl
mov dh, 0x86
rol byte [rax], 1
add byte [rax], al
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
jne 0x14013c9f4
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x48]
movups xmm2, xmmword [rsi + 0x58]
movups xmm3, xmmword [rsi + 0x68]
push 0x244c110f
pop rax
push 0x244c110f
pop rax
mov rax, qword [rsi + 0x78]
mov qword [rsp + 0x88], rax
add byte [rax], al
add byte [rax], al
movups xmmword [rsp + 0x78], xmm3
movups xmmword [rsp + 0x68], xmm2
movaps xmm1, xmmword [rsp + 0x80]
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
movaps xmm2, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x120], xmm2
jo 0x14013c968
sub dword [rsp + 0x120], edx
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x110], xmm3
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
movaps xmmword [rsp + 0x100], xmm4
movaps xmmword [rsp + 0xf0], xmm0
movups xmmword [rsi + 0xc0], xmm1
add byte [rax], al
add byte [rax], al
movups xmmword [rsi + 0xb0], xmm2
movups xmmword [rsi + 0xa0], xmm3
movups xmmword [rsi + 0x90], xmm4
movups xmmword [rsi + 0x80], xmm0
jmp 0x14013c9fd
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140164200
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
jmp 0x14013cb94
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
je 0x14013c90b
cmp eax, 3
jne 0x14013cbc6
lea rdi, [rsi + 0x20]
lea r14, [rsi + 0x80]
lea rdx, [rsp + 0x38]
and byte [rbp + rcx*4 - 0x4a], cl
add byte [rax], 0
add byte [rax - 0x73], cl
push rsp
and al, 0x38
mov rcx, r14
call fcn.140148cf0
test al, al
je 0x14013cb46
mov byte [rsi + 0xd0], 3
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013ca38
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov rax, qword [rsi]
jmp 0x14013ca56
test rcx, rcx
js 0x14013cbc6
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
je 0x14013ca8f
test al, 1
je 0x14013cbc6
test al, 0x20
jne 0x14013c9ab
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne case.0x14013a6a6.51
iretd
iretd
cmp rcx, 0x3f
jbe 0x14013cbc6
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013ca56
cmp dl, 2
je case.0x14013c8a6.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14013c8a6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
and al, 0x40
and al, 0x40
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r15
lea rcx, [rsp + 0x40]
call fcn.1401dc370
call fcn.1401dc370
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013cbc6
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013c8a6.2
mov rax, qword [rdi]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
or byte [rax - 0x77], cl
stc
mov rcx, rdi
call fcn.14014d110
mov rcx, rbx
jmp 0x14013cb17
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
and al, r14b
dec qword [rax]
jne 0x14013cb13
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.1401513e0
mov rax, qword [rsi + 0xe8]
add byte [rax - 0x7b], cl
invalid
je case.0x14013b216.34
add byte [rax - 0x7b], cl
sal byte [rdx + rcx + 0x48], 0x8b
invalid
mov rcx, qword [rsi + 0xf0]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
or eax, 0x19c613
or eax, 0x19c613
xor edx, edx
call sub.kernel32.dll_HeapFree
or eax, dword [rax]
or eax, dword [rax]
jmp case.0x14013c8a6.2
lea rcx, [rsi + 0x98]
call fcn.1401515b0
mov rcx, r14
call fcn.14014fee0
mov byte [rsi + 0xd0], 1
xor ecx, ecx
leave
leave
call fcn.1401d91c0
test rax, rax
je 0x14013cb75
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov dword [rax + 0x28], ebp
mov dword [rax + 0x28], ebp
mov qword [rsp + 0x40], 3
and al, 0x40
add eax, dword [rax]
add byte [rax], al
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140164200
jbe 0x14013cb8c
add byte [rax - 0x39], cl
and al, 0x48
add byte [rax], al
add byte [rax], al
jbe 0x14013cb8c
add byte [rax - 0x39], cl
and al, 0x48
add byte [rax], al
mov dword [rsp + 0x48], 0
add byte [rax], al
mov qword [rsp + 0x40], 2
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140164200
add al, byte [rax]
add al, byte [rax]
mov rcx, rsi
call fcn.140152640
nop
add rsp, 0x140
add byte [rax], al
add byte [rax], al
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
ud2
nop word [rax + rax]
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
add byte [rax], al
add byte [rdi], cl
sub dword [rsp + 0x70], esi
add byte [rax], al
add byte [rdi], cl
sub dword [rsp + 0x70], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp case.0x14013b216.37
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
add dword [rcx + 0x5e9c1c1], ecx
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013c8a6.4
test al, 4
je 0x14013ce83
test al, 3
je 0x14013cbf0
cmp rax, 0x3f
clc
invalid
jbe 0x14013ce83
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
add byte [rax], al
add byte [rax - 0x7d], cl
rol dword [rdx], 1
lock cmpxchg qword [rsi], rdx
jne case.0x14013b216.37
lea rax, [0x1401fcf84]
add eax, 0xc0345
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
add eax, 0x166201
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
mov eax, dword [rsi + 0x38]
and eax, 0xfffffffe
cmp eax, 0x3b9aca00
add dl, cl
invalid
cmp ecx, dword [rdi]
test byte [rdi], cl
add al, byte [rax]
invalid
add dl, cl
invalid
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013cce3
movups xmm6, xmmword [rax + 0x20]
jo 0x14013ccac
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013cce6
lea rdi, [rsi + 0x20]
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rdi
mov ecx, edi
call fcn.1401642d0
mov rax, qword [rsi + 0x28]
sub byte [rax - 0x39], r9b
and al, 0x38
add dword [rax], eax
add byte [rax], al
sub byte [rax - 0x39], r9b
and al, 0x38
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
mov rcx, rdi
jmp 0x14013ce65
xorps xmm6, xmm6
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.1401853a0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je case.0x14013a986.51
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013ce05
mov rax, qword [rsi]
jmp 0x14013cd36
test rcx, rcx
js 0x14013ce83
pop rdx
add dword [rax], eax
invalid
pop rdx
add dword [rax], eax
add byte [rax - 0x7d], cl
rol dword [rax - 0x4e], 1
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013cd6f
invalid
cmp dword [rax + 0x45840f01], ebp
add dword [rax], eax
add byte [rax - 0x207af0e0], ch
add byte [rax], al
test al, 1
je 0x14013ce83
test al, 0x20
jne 0x14013ce25
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013cd20
cmp rcx, 0x3f
jbe 0x14013ce83
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
setb dl
ret 0xd200
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013cd36
cmp dl, 2
je 0x14013cdc5
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne 0x14013ce72
mov rcx, rbx
mov rdx, rsi
call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013ce83
and rax, 0xffffffffffffffc0
and eax, 0xffffffc0
cmp rax, 0x40
jne 0x14013ce72
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14013cdc0
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013cddc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013cdd8
lea rcx, [rsi + 0x20]
call fcn.140062fd0
and al, ch
clc
invalid
lea rcx, [rsi + 0x30]
call fcn.14014ed60
mov rax, qword [rsi + 0x70]
mov eax, dword [rsi + 0x70]
mov eax, dword [rsi + 0x70]
test rax, rax
je 0x14013cdf1
mov rcx, qword [rsi + 0x78]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov eax, dword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
add bl, ch
insd dword [rdi], dx
add bl, ch
insd dword [rdi], dx
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1401642d0
mov qword [rsp + 0x38], 0
add bl, ch
invalid
add bl, ch
xor bh, al
and al, 0x30
xor byte [rcx], al
invalid
invalid
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.1401642d0
add al, byte [rax]
xor byte [rcx], al
retf 0x3b9a
add al, byte [rax]
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x38], 1
cmp byte [rcx], al
add byte [rax], al
add byte [rax - 0x39], cl
and al, 0x40
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
and al, 0x50
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
xor byte [rax], al
retf 0x3b9a
mov rcx, rbx
call fcn.1401642d0
add al, byte [rax]
mov rcx, rsi
call fcn.140151d70
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
add esp, 0x88
add esp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop dword [rax + rax]
push rsi
push rdi
add byte [rsi + 0x57], dl
push rbp
push rbx
sub rsp, 0x238
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x220], esi
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x220], esi
mov rsi, rcx
mov rax, qword [rcx]
add ebx, ebp
invalid
add ebx, ebp
invalid
add byte [rax - 0x77], cl
ret 0x8348
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
add eax, 0xf001e183
cmpxchg qword [rsi], rdx
add eax, 0xf001e183
cmpxchg qword [rsi], rdx
je 0x14013cef8
test al, 4
je 0x14013d14f
add al, byte [rax]
invalid
add al, byte [rax]
add byte [rax + 0x48da7403], ch
cmp eax, 0x3f
clc
invalid
test al, 3
je 0x14013ceb0
cmp rax, 0x3f
clc
invalid
jbe 0x14013d14f
add byte [rax - 0x73], cl
push rax
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
mov ecx, 0
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
rol dword [rdx], 1
lock cmpxchg qword [rsi], rdx
jne 0x14013ceca
lea rax, [0x1401fcf94]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
mov rax, qword [rsi + 0x30]
cmp rax, 5
je 0x14013cf39
and eax, 0xfffffffe
cmp eax, 6
je 0x14013d14f
inc byte [rbx - 0x7bf0f908]
invalid
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013cfaa
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013cfad
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 7
and al, 0x38
invalid
add byte [rax], al
add byte [rax - 0x73], cl
push rsp
and al, 0x38
mov rcx, rdi
call fcn.1401616b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rdi
and al, 0x38
invalid
jmp 0x14013d12e
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.140177bd0
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013cfcc
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x14013cc46.30
add byte [rax], al
invalid
add byte [rax], al
add byte [rax - 0x75], cl
invalid
mov rax, qword [rsi]
jmp 0x14013cff6
test rcx, rcx
js 0x14013d14f
add word [rax], ax
invalid
add word [rax], ax
add byte [rax - 0x7d], cl
rol dword [rax - 0x4e], 1
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013d02f
invalid
cmp dword [rax + 0x51840f01], ebp
add dword [rax], eax
add byte [rax - 0x197af0e0], ch
add byte [rax], al
test al, 1
je 0x14013d14f
test al, 0x20
jne 0x14013d0ec
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013cfe0
cmp rcx, 0x3f
jbe 0x14013d14f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14013cff6
ret 0xd200
cmp dl, 2
je case.0x14013cf06.3
movzx eax, dl
cmp eax, 1
jne case.0x14013cf06.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401dbaa0
bnd call fcn.1401dbaa0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013d14f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013cf06.2
int3
add byte [rax], al
invalid
int3
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14013d080
mov rcx, rbx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013d09c
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
dec dword [rax]
dec dword [rax]
jne 0x14013d098
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
xor al, ch
invalid
call fcn.14014f7d0
mov rax, qword [rsi + 0x228]
test rax, rax
je 0x14013d0b7
mov rcx, qword [rsi + 0x230]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013cf06.2
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
fld1
iretd
add r8b, byte [r8]
mov qword [rsp + 0x40], 0
add byte [rax], al
fld1
iretd
add byte [rax], al
jmp 0x14013d11d
mov qword [rsp + 0x38], 7
add byte [rax], al
lea rdx, [rsp + 0x38]
and al, 0x38
mov rcx, rbx
mov ecx, ebx
call fcn.1401616b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
and al, 0x58
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
push rsp
and al, 0x38
push rsp
and al, 0x38
mov rcx, rbx
call fcn.1401616b0
mov rcx, rsi
call fcn.140152240
push rcx
add dword [rax], eax
push rcx
add dword [rax], eax
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop dword [rax + rax]
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xfd0
in al, dx
ror byte [rdi], 1
add byte [rax], al
in al, dx
ror byte [rdi], 1
add byte [rax], al
movaps xmmword [rsp + 0xfc0], xmm6
add byte [rax], al
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013d19a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14013cf06.4
test al, 4
je 0x14013d43c
test al, 3
je 0x14013d180
add esi, dword [rdx + rbx*8 + 0x48]
cmp eax, 0x3f
clc
invalid
cmp rax, 0x3f
clc
invalid
jbe 0x14013d43c
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013d19a
lea rax, [0x1401fcfa4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
sub byte [rax - 0x77], cl
je 0x14013d20c
xor byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
sub byte [rax - 0x77], cl
je 0x14013d20c
xor byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
mov qword [rsp + 0x38], r14
cmp dword [rsi + 0x30], 3
jae 0x14013d43c
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d26e
movups xmm6, xmmword [rax + 0x20]
jo 0x14013d235
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013d271
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140163f10
mov rax, qword [rsi + 0x28]
sub byte [rax - 0x39], cl
and al, 0x48
add dword [rax], eax
add byte [rax], al
sub byte [rax - 0x39], cl
and al, 0x48
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14013d419
xorps xmm6, xmm6
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140163170
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je case.0x14013a986.59
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x14013bd76.30
mov rax, qword [rsi]
jmp 0x14013d2c6
test rcx, rcx
js 0x14013d43c
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
je 0x14013d2ff
test al, 1
je 0x14013d43c
test al, 0x20
jne 0x14013d3d7
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne case.0x14013af36.51
iretd
iretd
cmp rcx, 0x3f
jbe 0x14013d43c
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013d2c6
cmp dl, 2
je case.0x14013d1d6.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14013d1d6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
and al, 0x40
and al, 0x40
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.1401dc370
call fcn.1401dc370
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14013d43c
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013d1d6.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013d387
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
dec dword [rax]
dec dword [rax]
jne 0x14013d383
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
xor al, ch
add al, 0x35
add dword [rax], eax
call fcn.140150890
mov rax, qword [rsi + 0xfc0]
test rax, rax
je 0x14013d3a2
mov rcx, qword [rsi + 0xfc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013d1d6.2
mov qword [rsp + 0x40], 4
and al, 0x40
add al, 0
add byte [rax], al
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
imul r8d, dword [rdx], 0
fld1
imul r8d, dword [rdx], 0
mov qword [rsp + 0x48], 0
jmp case.0x14013c5e6.44
invalid
xor dword [rax - 0x39], ecx
and al, 0x40
add al, 0
add byte [rax], al
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140163f10
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
and al, 0x60
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
push 2
add byte [rax - 0x77], cl
int1
call fcn.140163f10
mov rcx, rsi
call fcn.140151b70
movaps xmm6, xmmword [rsp + 0xfc0]
add rsp, 0xfd0
pop rbx
mov ah, 0x24
ror byte [rdi], 0
add byte [rax - 0x7f], cl
invalid
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
sub esp, 0x58
movaps xmmword [rsp + 0x40], xmm6
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013d47a
nop word cs:[rax + rax]
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
cli
cli
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
mov cl, 0x16
mov cl, 0x16
je case.0x14013d1d6.4
test al, 4
je 0x14013d7cb
test al, 3
je 0x14013d460
cmp rax, 0x3f
jbe 0x14013d7cb
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013d47a
lea rax, [0x1401fcfb4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x1402a2e50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
je 0x14013d4ec
xor byte [rax - 0x73], cl
and al, 0x28
je 0x14013d4ec
xor byte [rax - 0x73], cl
and al, 0x28
mov qword [rsp + 0x20], rax
cmp byte [rsi + 0xa8], 3
jae 0x14013d7cb
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.1401d91c0
test rax, rax
je 0x14013d52f
mov esp, 0x85480009
sal byte [rbx + rdi + 0xf], 0x10
movups xmm6, xmmword [rax + 0x20]
jo 0x14013d518
and byte [rax - 0x39], cl
and byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
pop rax
sub bl, ch
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013d532
sub al, 0x48
mov edi, dword [rsi + 0x28]
mov rdi, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d6a9
add byte [rax], al
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
jmp 0x14013d6ac
xorps xmm6, xmm6
lea r14, [rsp + 0x20]
mov rcx, rdi
mov rdx, r14
call fcn.140177de0
mov ebx, eax
xor ecx, ecx
call fcn.1401d91c0
jne 0x14013d505
or dword [rax], eax
jne 0x14013d505
or dword [rax], eax
test rax, rax
je 0x14013d554
movups xmmword [rax + 0x20], xmm6
test bl, bl
je 0x14013d680
lea rbx, [rsi + 0x20]
mov rax, qword [rsi]
nop word cs:[rax + rax]
nop dword cs:[rax + rax]
nop dword cs:[rax + rax]
test al, 1
je 0x14013d7cb
invalid
add byte [rax - 0x6a7af0e0], ch
add dword [rax], eax
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
test al, 0x20
jne 0x14013d715
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013d5b0
cmp rcx, 0x3f
jbe 0x14013d7cb
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
rol eax, 0x48
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14013d570
jmp 0x14013d5c6
test rcx, rcx
js 0x14013d7cb
add byte [rax], al
add byte [rax], al
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
jne 0x14013d570
cmp dl, 2
je case.0x14013d4b6.3
movzx eax, dl
cmp eax, 1
jne case.0x14013d4b6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x28], rax
and al, 0x28
and al, 0x28
sub byte [rax - 0x77], cl
je 0x14013d611
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r14
xor byte [rcx + rcx*4 + 0x74], cl
and al, 0x38
lea rcx, [rsp + 0x28]
call fcn.1401dc370
sub al, ch
jae 0x14013d5e8
or dword [rax], eax
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14013d7cb
add byte [rax], al
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14013d4b6.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14013d632
mov rcx, rbx
call fcn.14014d110
mov rcx, rdi
jmp 0x14013d64e
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013d64a
lea rcx, [rsi + 0x20]
call fcn.14014d110
lea rcx, [rsi + 0x30]
call fcn.14014f350
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x14013d669
mov rcx, qword [rsi + 0xc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x14013d4b6.2
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d73e
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013d741
xorps xmm6, xmm6
lea rdi, [rsi + 0x30]
mov rcx, rdi
call fcn.14014f350
cwde
sbb al, 1
add dh, al
xchg byte [rax + 0x4000000], ch
cwde
sbb al, 1
add dh, al
xchg byte [rax + 0x4000000], ch
xor ecx, ecx
call fcn.1401d91c0
or dword [rax], eax
or dword [rax], eax
test rax, rax
je 0x14013d6cf
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d6f1
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov dword [rax + 0x20], 1
mov dword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp case.0x14013b216.50
xorps xmm6, xmm6
mov rcx, rdi
call fcn.14014f350
push rsp
sbb al, 1
add byte [rax - 0x39], cl
xor byte [rcx], r8b
add byte [rax], al
invalid
push rsp
sbb al, 1
add byte [rax - 0x39], cl
xor byte [rcx], r8b
add byte [rax], al
add byte [rax - 0x39], cl
mov qword [rsi + 0x38], 0
mov qword [rsi + 0x48], rbx
jmp 0x14013d795
invalid
mov qword [rsi + 0x38], 0
mov qword [rsi + 0x48], rbx
jmp 0x14013d795
invalid
add byte [rax - 0x75], cl
pop rsi
sub byte [rcx], dh
leave
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d7c3
invalid
invalid
add byte [rax], al
invalid
test byte [rdx + 0xf000000], bl
adc byte [rax + 0x20], dh
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
sub cl, ch
jb 0x14013d73b
invalid
invalid
add byte [rax - 0x77], cl
pop rax
sub cl, ch
jb 0x14013d73b
invalid
invalid
xorps xmm6, xmm6
mov rcx, rdi
call fcn.14014f350
add dword [rax], eax
add dword [rax], eax
add dh, al
xchg byte [rax + 0x4000000], ch
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.1401d91c0
mov edx, 0x85480009
invalid
je 0x14013d760
mov edx, 0x85480009
sal byte [rsp + rax + 0xf], 0x11
jo 0x14013d780
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
mov edx, 0x85480009
invalid
je 0x14013d782
mov edx, 0x85480009
sal byte [rdx + rdx + 0xf], 0x10
jo case.0x14013cf06.10
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
add dword [rax], eax
add byte [rax], al
mov qword [rax + 0x28], rbx
jmp 0x14013d785
xorps xmm6, xmm6
mov rcx, rdi
stc
call fcn.14014f350
mov qword [rsi + 0x30], 0
invalid
add dh, al
xchg byte [rax + 0x3000000], ch
add byte [rax], al
add byte [rbx], al
mov byte [rsi + 0xa8], 3
add byte [rax], al
add byte [rbx], al
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
test eax, eax
test eax, eax
je 0x14013d7ac
movups xmmword [rax + 0x20], xmm6
mov rcx, rsi
call fcn.140151780
movaps xmm6, xmmword [rsp + 0x40]
and al, 0x40
add rsp, 0x58
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r14
ret
xorps xmm6, xmm6
jmp 0x14013d6b0
in eax, 0xfe
invalid
invalid
in eax, 0xfe
invalid
ud2
js case.0x14013d846.24
movaps xmmword [rsp + 0x60], xmm6
sub dword [rsp + 0x60], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14013d80a
nop dword cs:[rax + rax]
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
invalid
je case.0x14013d4b6.4
invalid
test al, 4
je 0x14013da67
test al, 3
je 0x14013d7f0
cmp rax, 0x3f
jbe 0x14013da67
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14013d80a
invalid
ror byte [rax - 0x73], cl
add eax, 0xbf785
lea rax, [0x1401fcfc4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
invalid
loope 0x14013d891
lea rax, [0x1402a2e50]
lea eax, [0x1402a2e50]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
movzx eax, byte [rsi + 0x50]
push rax
push rax
and al, 6
cmp al, 4
je 0x14013da67
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x14013d8da
movups xmm6, xmmword [rax + 0x20]
jo 0x14013d8a9
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14013d8dd
lea rdi, [rsi + 0x20]
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.140162f60
mov bl, 0x56
add al, byte [rax]
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x14013da4c
xorps xmm6, xmm6
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.140177c80
mov ebp, eax
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
invalid
je 0x14013d8fc
sal byte [rsp + rax + 0xf], 0x11
jo 0x14013d91c
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14013d9f5
in al, dx
add byte [rax], al
invalid
in al, dx
add byte [rax], al
add byte [rax - 0x75], cl
mov rax, qword [rsi]
mov rax, qword [rsi]
jmp 0x14013d926
test rcx, rcx
js 0x14013da67
add qword [rax], r8
invalid
add qword [rax], r8
add byte [rax - 0x7d], cl
rol dword [rax - 0x4e], 1
add rcx, 0x40
mov dl, 1
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14013d95f
invalid
cmp dword [rax + 0x39840f01], ebp
add dword [rax], eax
add byte [rax - 0x237af0e0], ch
add byte [rax], al
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
test al, 1
je 0x14013da67
test al, 0x20
jne 0x14013da12
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14013d910
cmp rcx, 0x3f
jbe 0x14013da67
add byte [rax], al
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14013d926
ret 0xd200
cmp dl, 2
je 0x14013d9b5
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne 0x14013da59
mov rcx, rbx
mov rdx, rsi
call fcn.1401dbaa0
or dword [rax], eax
or dword [rax], eax
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
clc
invalid
rol dword [rsi], 0x48
cmp eax, 0x3f
clc
invalid
clc
invalid
jbe 0x14013da67
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x14013da59
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
mov ecx, ebx
call fcn.140062fd0
mov rcx, rdi
jmp 0x14013d9cc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14013d9c8
lea rcx, [rsi + 0x20]
call fcn.140062fd0
lea rcx, [rsi + 0x30]
lea ecx, [rsi + 0x30]
call fcn.14014f570
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14013d9e1
mov rcx, qword [rsi + 0x70]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
mov bh, 0x19
add byte [rcx], dh
shr al, cl
loope 0x14013da43
or eax, dword [rax]
mov bh, 0x19
add byte [rcx], dh
shr al, cl
loope 0x14013da43
or eax, dword [rax]
jmp 0x14013da59
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140162f60
add eax, 0x24548d48
and byte [rax - 0x77], cl
fld1
pop rcx
push rbp
add al, byte [rax]
mov qword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
jmp 0x14013da3f
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140162f60
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
add al, 0x48
lea edx, [rsp + 0x20]
mov rcx, rbx
call fcn.140162f60
mov rcx, rsi
call fcn.140151f60
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
invalid
jmp 0x14013fbba
add byte [rax], al
add dword [rcx - 0x73], ecx
invalid
add byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
nop word [rax + rax]
mov rcx, r14
mov ecx, esi
mov rdx, rbx
mov r8, rdi
call fcn.1401a72f0
cmp dword [rsp + 0x28], 1
sub byte [rcx], al
sub byte [rcx], al
ja 0x14013fb7a
lock sub qword [r15 + 0x1c8], 2
add byte [rdx], al
jb 0x14013fbd1
mov rcx, r14
mov ecx, esi
call fcn.1401ab3e0
jmp 0x14013fb50
lea rcx, [rsp + 0x28]
call fcn.1401ab3e0
mov eax, 0x8b480006
xchg byte [rax - 0xfffffff], dh
dec qword [rax]
mov eax, 0x8b480006
xchg byte [rax - 0xfffffff], dh
dec qword [rax]
jne 0x14013fb9d
mov rcx, qword [rsi + 0x1b0]
call fcn.14014e130
invalid
add byte [rax - 0x75], cl
xchg byte [rax - 0xfffffff], ch
add dword [rax], eax
add al, dh
mov rax, qword [rsi + 0x1a8]
lock dec qword [rax]
add dword [rax], eax
add al, dh
dec qword [rax]
mov bl, 1
jne 0x14013fbb8
lea rcx, [rsi + 0x1a8]
add byte [rax], al
call fcn.14014c190
xor eax, eax
mov byte [rsi + 0x1d0], bl
rol byte [rcx], 1
add byte [rax], al
add rsp, 0x5e8
add esp, 0x5e8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov ecx, 7
int 0x29
ud2
invalid
push rdi
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x33c8
call fcn.1401ece10
sub rsp, rax
movaps xmmword [rsp + 0x33b0], xmm6
mov r15, r8
mov rsi, rdx
mov r12, rcx
movzx eax, byte [rdx + 0x111]
invalid
adc dword [rcx], eax
add byte [rax], al
invalid
lea rcx, [0x1401fcfd4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0xa40], rax
or al, byte [rax]
add bl, dh
movq mm0, qword [rsi + 0x88]
or al, byte [rax]
add bl, dh
movq mm0, qword [rsi + 0x88]
movdqa xmmword [rsp + 0xa30], xmm0
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14013fd3c
add byte [rax], al
push 0xfc08548
test dh, ch
add byte [rax], al
add byte [rax], al
mov rcx, qword [rsi + 0x70]
invalid
add byte [rax], al
mov rcx, qword [rsi + 0x70]
lock inc qword [rax]
jo 0x14013fc43
inc qword [rax]
jg 0x14013fd3c
jmp case.0x14013fc1f.1
lea rdi, [rsi + 0x148]
lea r13, [rsi + 0x118]
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x86
add qword [rax], rax
add byte [rbp - 0x457bf040], al
add dword [rax], 0
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x86
add qword [rax], rax
add byte [rbp - 0x457bf040], al
add dword [rax], 0
add byte [rax], al
cmp eax, 3
je 0x140148051
jmp case.0x14013fc1f.1
lea r13, [rsi + 0x118]
lea rax, [rsi + 0x408]
mov qword [rsp + 0xb0], rax
movzx eax, byte [rsi + 0x408]
test eax, eax
je 0x14013fe38
cmp eax, 3
jne case.0x14013fc1f.1
lea rdi, [rsi + 0x400]
movzx eax, byte [rsi + 0x400]
lea r11, [rsi + 0x1d0]
test eax, eax
je 0x14014025a
cmp eax, 3
jne case.0x14013fc1f.1
lea rdx, [rsi + 0x348]
movzx eax, byte [rsi + 0x348]
test eax, eax
mov qword [rsp + 0x178], r11
mov qword [rsp + 0x58], rdi
je 0x140140468
cmp eax, 3
jne case.0x14013fc1f.1
lea rdi, [rsi + 0x340]
movzx eax, byte [rsi + 0x340]
test eax, eax
je 0x14014287d
cmp eax, 3
jne case.0x14013fc1f.1
mov qword [rsp + 0x40], rdx
mov rax, qword [rsi + 0x338]
jmp 0x14014053e
movzx edx, word [rsi + 0x64]
mov r8d, dword [rsi + 0x60]
mov r9d, dword [rsi + 0x48]
mov r10, qword [rsi + 0x40]
mov r11, qword [rsi + 0x30]
mov edi, dword [rsi + 0x38]
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
mov rbx, qword [rsi + 0x50]
movzx ebp, word [rsi + 0x80]
movaps xmm3, xmmword [rsp + 0xa30]
movups xmmword [rsp + 0xa16], xmm3
mov r14, qword [rsp + 0xa40]
mov qword [rsp + 0xa26], r14
lea r13, [rsi + 0x118]
movups xmmword [rsi + 0x118], xmm0
movups xmmword [rsi + 0x128], xmm1
movups xmmword [rsi + 0x138], xmm2
mov qword [rsi + 0x148], r11
mov dword [rsi + 0x150], edi
mov qword [rsi + 0x158], r10
mov dword [rsi + 0x160], r9d
mov qword [rsi + 0x168], rbx
mov r9, qword [rsi + 0x58]
mov r10, qword [rsi + 0x78]
mov qword [rsi + 0x170], r9
mov dword [rsi + 0x178], r8d
mov word [rsi + 0x17c], dx
mov qword [rsi + 0x180], rax
mov qword [rsi + 0x188], rcx
mov qword [rsi + 0x190], r10
mov word [rsi + 0x198], bp
movdqu xmm0, xmmword [rsp + 0xa10]
movdqu xmm1, xmmword [rsp + 0xa1e]
movdqu xmmword [rsi + 0x1a8], xmm1
movdqu xmmword [rsi + 0x19a], xmm0
lea rax, [rsi + 0x408]
mov qword [rsp + 0xb0], rax
mov byte [rsi + 0x408], 0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14013fe63
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x2320
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov r14, rax
pxor xmm0, xmm0
movdqu xmmword [rax + 0x2310], xmm0
movdqu xmmword [rax + 0x2300], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14013febb
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x280
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rbx, rax
and rbx, 0xffffffffffffff80
mov qword [rbx + 0x78], rax
mov qword [rbx + 0x80], 1
mov qword [rbx + 0x88], 1
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmm1, xmmword [rsp + 0xa40]
movaps xmm2, xmmword [rsp + 0xa50]
movaps xmm3, xmmword [rsp + 0xa60]
movaps xmmword [rbx + 0x90], xmm0
movaps xmmword [rbx + 0xa0], xmm1
movaps xmmword [rbx + 0xb0], xmm2
movaps xmmword [rbx + 0xc0], xmm3
movaps xmm0, xmmword [rsp + 0xa70]
movaps xmmword [rbx + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xa80]
movaps xmmword [rbx + 0xe0], xmm0
movaps xmm0, xmmword [rsp + 0xa90]
movaps xmmword [rbx + 0xf0], xmm0
mov qword [rbx + 0x100], r14
mov qword [rbx + 0x108], 0
movaps xmm0, xmmword [rsp + 0x19c0]
movdqa xmm1, xmmword [rsp + 0x19d0]
movaps xmm2, xmmword [rsp + 0x19e0]
movaps xmm3, xmmword [rsp + 0x19f0]
movaps xmmword [rbx + 0x110], xmm0
movdqa xmmword [rbx + 0x120], xmm1
movaps xmmword [rbx + 0x130], xmm2
movaps xmmword [rbx + 0x140], xmm3
movaps xmm0, xmmword [rsp + 0x1a00]
movaps xmmword [rbx + 0x150], xmm0
movaps xmm0, xmmword [rsp + 0x1a10]
movaps xmmword [rbx + 0x160], xmm0
movdqa xmm0, xmmword [rsp + 0x1a20]
movdqa xmmword [rbx + 0x170], xmm0
mov qword [rbx + 0x180], 0
mov qword [rbx + 0x190], 0
mov qword [rbx + 0x200], r14
mov qword [rbx + 0x208], r14
mov qword [rbx + 0x210], 0
mov byte [rbx + 0x218], 0
mov qword [rbx + 0x220], 0
mov byte [rbx + 0x228], 0
pxor xmm0, xmm0
movdqa xmmword [rbx + 0x240], xmm0
movdqa xmmword [rbx + 0x230], xmm0
mov qword [rbx + 0x250], 1
lock inc qword [rbx + 0x80]
jle case.0x14013fc1f.1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14014007a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x30
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rbp, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x28], 0
pxor xmm0, xmm0
movdqu xmmword [rax + 0x10], xmm0
lock inc qword [rax]
jle case.0x14013fc1f.1
sub rbx, 0xffffffffffffff80
mov qword [rsi + 0x1b8], rbp
mov qword [rsi + 0x1c0], rbx
mov byte [rsi + 0x1c8], 0
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsi + 0x1c9], eax
mov dword [rsi + 0x1cc], ecx
cmp byte [rsi + 0x198], 0
je 0x1401401c6
lea rax, [rsi + 0x1a0]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xa40], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0xa30], xmm0
mov rcx, qword [rsi + 0x180]
mov rdx, qword [rsi + 0x188]
test rcx, rcx
je 0x140140136
lock inc qword [rcx]
jle case.0x14013fc1f.1
lea rax, [rsi + 0x138]
mov r8, qword [rsp + 0xa40]
mov qword [rsp + 0x810], r8
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmmword [rsp + 0x800], xmm0
lea r11, [rsi + 0x1d0]
mov qword [rsi + 0x1d0], rcx
mov qword [rsi + 0x1d8], rdx
mov qword [rsi + 0x350], rbx
mov qword [rsi + 0x358], rbp
mov qword [rsi + 0x3e0], rax
movaps xmm0, xmmword [rsp + 0x800]
movups xmmword [rsi + 0x3e8], xmm0
mov r8, qword [rsp + 0x810]
mov qword [rsi + 0x3f8], r8
lea rdi, [rsi + 0x400]
mov byte [rsi + 0x400], 0
movq xmm1, rbp
movq xmm0, rbx
punpcklqdq xmm0, xmm1
jmp 0x140140277
mov rcx, qword [rsi + 0x1a0]
mov rdx, qword [rsi + 0x1a8]
mov rax, qword [rsi + 0x1b0]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdx
call qword [rdx + 0x40]
mov r14d, eax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140140224
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x2000
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
movzx ecx, byte [rsi + 0x199]
test ecx, ecx
je 0x1401423aa
cmp ecx, 2
jne 0x1401423a8
mov ecx, r14d
jmp 0x1401423aa
movdqu xmm0, xmmword [rsi + 0x350]
mov rax, qword [rsi + 0x3e0]
mov rcx, qword [rsi + 0x1d0]
mov rdx, qword [rsi + 0x1d8]
movdqu xmmword [rsi + 0x1e0], xmm0
mov qword [rsi + 0x360], rax
mov qword [rsi + 0x1f0], rcx
mov qword [rsi + 0x1f8], rdx
mov ecx, dword [rax + 0x40]
lea edx, [rcx - 0x4000]
cmp edx, 0xffc000
jae case.0x14013fc1f.1
mov r8, qword [rax + 0x30]
mov rdx, r8
shr rdx, 0x20
jne case.0x14013fc1f.1
lea rdx, [rsi + 0x3e8]
mov r10d, dword [rax + 0x38]
mov r9d, dword [rax + 0x3c]
cmp qword [rax], 0
je 0x1401402d5
mov rax, qword [rax + 8]
jmp 0x1401402da
mov eax, 0xa
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x178], r11
mov dword [rsi + 0x368], 1
mov dword [rsi + 0x36c], r10d
mov qword [rsi + 0x370], 0x1e
mov dword [rsi + 0x378], 0
mov qword [rsi + 0x380], 0xffffffffffffffff
mov qword [rsi + 0x388], r8
mov qword [rsi + 0x390], rax
mov qword [rsi + 0x398], 0x14
mov dword [rsi + 0x3a0], 0
mov qword [rsi + 0x3a8], 1
mov dword [rsi + 0x3b0], 0
mov dword [rsi + 0x3b8], 1
mov dword [rsi + 0x3bc], r9d
mov dword [rsi + 0x3c0], 1
mov dword [rsi + 0x3c4], ecx
mov dword [rsi + 0x3c8], 0
mov dword [rsi + 0x3d0], 0
mov byte [rsi + 0x3d8], 0
mov dword [rsi + 0x3dc], 1
mov dword [rsi + 0x200], 1
mov dword [rsi + 0x204], r10d
mov qword [rsi + 0x208], 0x1e
mov dword [rsi + 0x210], 0
mov qword [rsi + 0x218], 0xffffffffffffffff
mov qword [rsi + 0x220], r8
mov qword [rsi + 0x228], rax
mov qword [rsi + 0x230], 0x14
mov dword [rsi + 0x238], 0
mov qword [rsi + 0x240], 1
mov dword [rsi + 0x248], 0
mov dword [rsi + 0x250], 1
mov dword [rsi + 0x254], r9d
mov dword [rsi + 0x258], 1
mov dword [rsi + 0x25c], ecx
mov dword [rsi + 0x260], 0
mov dword [rsi + 0x268], 0
mov byte [rsi + 0x270], 0
mov dword [rsi + 0x274], 1
mov rax, qword [rdx + 0x10]
mov qword [rsi + 0x288], rax
movups xmm0, xmmword [rdx]
movups xmmword [rsi + 0x278], xmm0
lea rdx, [rsi + 0x348]
mov byte [rsi + 0x348], 0
lea rax, [rsi + 0x290]
mov rcx, qword [rsi + 0x288]
mov qword [rsi + 0x2a0], rcx
movups xmm0, xmmword [rsi + 0x278]
movups xmmword [rsi + 0x290], xmm0
movups xmm0, xmmword [rsi + 0x200]
movdqu xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movups xmmword [rsi + 0x2a8], xmm0
movdqu xmmword [rsi + 0x2b8], xmm1
movups xmmword [rsi + 0x2c8], xmm2
movups xmmword [rsi + 0x2d8], xmm3
movups xmm0, xmmword [rsi + 0x240]
movups xmmword [rsi + 0x2e8], xmm0
movups xmm0, xmmword [rsi + 0x250]
movups xmmword [rsi + 0x2f8], xmm0
movdqu xmm0, xmmword [rsi + 0x260]
movdqu xmmword [rsi + 0x308], xmm0
mov rcx, qword [rsi + 0x270]
mov qword [rsi + 0x318], rcx
mov qword [rsi + 0x320], rax
lea rdi, [rsi + 0x340]
mov byte [rsi + 0x340], 0
mov qword [rsp + 0x40], rdx
mov qword [rsi + 0x328], rax
lea rax, [0x1402a05db]
mov qword [rsi + 0x330], rax
mov qword [rsi + 0x338], 0x18
mov eax, 0x18
lea rbx, [rsp + 0xa30]
lea r14, str.combase.dll
movabs rbp, 0x1700000003
nop word [rax + rax]
test rax, rax
je 0x140140692
mov rcx, qword [rsi + 0x328]
mov r9, qword [rsi + 0x330]
mov rdx, qword [rcx]
mov r10, qword [rcx + 8]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r8, r15
call qword [r10 + 0x20]
mov rax, qword [rsp + 0xa30]
cmp rax, 2
je 0x1401405ed
mov rcx, qword [rsp + 0xa38]
test rax, rax
jne 0x1401405fa
mov rdx, qword [rsi + 0x330]
mov rax, qword [rsi + 0x338]
mov qword [rsi + 0x330], r14
mov qword [rsi + 0x338], 0
sub rax, rcx
jb case.0x14013fc1f.1
add rdx, rcx
mov qword [rsi + 0x330], rdx
mov qword [rsi + 0x338], rax
test rcx, rcx
jne 0x140140560
jmp 0x140140606
mov byte [rdi], 3
mov rax, qword [rsp + 0x40]
mov byte [rax], 3
jmp 0x140140672
mov rbp, rcx
test rcx, rcx
je 0x140140692
mov qword [rsp + 0x90], rbp
mov byte [rsi + 0x340], 1
mov rbx, qword [rsi + 0x290]
mov rdi, qword [rsi + 0x298]
mov rcx, rbx
call qword [rdi]
mov byte [rsp + 0x98], 4
mov ebp, 2
cmp qword [rdi + 8], 0
je 0x140140658
cmp qword [rdi + 0x10], 0x11
jb 0x140140647
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x40]
mov byte [rax], 1
cmp rbp, 3
jne 0x1401418c2
mov rax, qword [rsp + 0x58]
mov byte [rax], 3
mov rax, qword [rsp + 0xb0]
mov byte [rax], 3
mov byte [r12 + 0x70], 3
mov al, 3
jmp 0x140148be1
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x130], r12
mov byte [rsi + 0x340], 1
mov rbx, qword [rsi + 0x290]
mov rdi, qword [rsi + 0x298]
mov r15, qword [rsi + 0x2a0]
mov rcx, rbx
call qword [rdi + 0x40]
test al, al
mov eax, 0x100
mov r12d, 0x400
cmovne r12, rax
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
mov qword [rsp + 0x2ea0], 0
movdqa xmmword [rsp + 0x540], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140140728
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x4000
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov r14, rax
mov qword [rsp + 0xa30], 1
mov qword [rsp + 0xa38], 0
mov qword [rsp + 0xa48], 3
mov qword [rsp + 0xa50], 0
mov qword [rsp + 0xa58], 9
mov byte [rsp + 0xa60], 1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401407b0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x2000
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov word [rsp + 0xbf0], 0
mov qword [rsp + 0xbd0], rax
mov qword [rsp + 0xbd8], 0
mov qword [rsp + 0xbe0], 0x2000
mov qword [rsp + 0xbe8], 0x11
mov byte [rsp + 0xbf2], 0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14014082f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x1000
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rcx, r12
or rcx, 9
mov qword [rsp + 0xbf8], 0
mov qword [rsp + 0xc58], 0x1000
mov qword [rsp + 0xc08], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xc10], xmm0
movdqu xmmword [rsp + 0xc20], xmm0
mov qword [rsp + 0xc30], 0x1000
mov qword [rsp + 0xc38], rax
mov qword [rsp + 0xc40], 0
mov qword [rsp + 0xc48], 0x1000
mov qword [rsp + 0xc50], 0xd
mov qword [rsp + 0xa78], 2
movups xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rsp + 0xa80], xmm0
mov qword [rsp + 0xa90], 8
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0xa98], xmm0
mov qword [rsp + 0xaa8], 8
mov rax, qword [rsp + 0x2ea0]
mov qword [rsp + 0xac0], rax
movaps xmm0, xmmword [rsp + 0x2e90]
movups xmmword [rsp + 0xab0], xmm0
mov qword [rsp + 0xac8], 0
movaps xmm0, xmmword [rsp + 0x540]
movups xmmword [rsp + 0xad0], xmm0
mov qword [rsp + 0xae0], 0x1000
mov qword [rsp + 0xae8], 3
movups xmm0, xmmword [rsp + 0x19c0]
movups xmm1, xmmword [rsp + 0x19d0]
movups xmm2, xmmword [rsp + 0x19e0]
movups xmm3, xmmword [rsp + 0x19f0]
movups xmmword [rsp + 0xaf0], xmm0
movups xmmword [rsp + 0xb00], xmm1
movups xmmword [rsp + 0xb10], xmm2
movups xmmword [rsp + 0xb20], xmm3
mov qword [rsp + 0xb30], 4
movdqu xmm0, xmmword [rsp + 0x2950]
movdqu xmm1, xmmword [rsp + 0x2960]
movups xmm2, xmmword [rsp + 0x2970]
movups xmm3, xmmword [rsp + 0x2980]
movdqu xmmword [rsp + 0xb38], xmm0
movdqu xmmword [rsp + 0xb48], xmm1
movups xmmword [rsp + 0xb58], xmm2
movups xmmword [rsp + 0xb68], xmm3
mov qword [rsp + 0xb78], r14
mov qword [rsp + 0xb80], 0
mov qword [rsp + 0xb88], 0x4000
mov qword [rsp + 0xb90], 0x15
mov qword [rsp + 0xb98], 0
mov qword [rsp + 0xba0], r12
mov qword [rsp + 0xba8], rcx
mov dword [rsp + 0xbb0], 0x4000
mov qword [rsp + 0xbb8], rbx
mov qword [rsp + 0xbc0], rdi
mov qword [rsp + 0xbc8], r15
mov qword [rsp + 0xa40], 0x4000
mov qword [rsp + 0xa68], 0
mov qword [rsp + 0xc60], 2
mov qword [rsp + 0xda0], 0x1000000
mov eax, dword [rsi + 0x300]
test eax, eax
je 0x140140aad
mov ecx, dword [rsi + 0x304]
lea rdx, [rcx - 0x4000]
cmp rdx, 0xffc000
jae case.0x14013fc1f.1
mov qword [rsp + 0xa40], rcx
mov ecx, dword [rsi + 0x308]
test ecx, ecx
je 0x140140ac7
mov edx, dword [rsi + 0x30c]
mov qword [rsp + 0xda0], rdx
jmp 0x140140ac7
mov qword [rsp + 0x48], r13
movzx r8d, byte [rsi + 0x318]
movdqu xmm0, xmmword [rsi + 0x2e0]
movdqu xmm1, xmmword [rsi + 0x2f0]
mov r9d, dword [rsi + 0x304]
mov r10, qword [rsi + 0x310]
movdqu xmmword [rsp + 0x19c4], xmm0
movdqu xmmword [rsp + 0x19d4], xmm1
mov dword [rsp + 0x19e4], eax
mov dword [rsp + 0x19e8], r9d
mov dword [rsp + 0x19ec], ecx
mov dword [rsp + 0x19f0], edx
mov qword [rsp + 0x19f4], r10
mov byte [rsp + 0x19fc], r8b
mov byte [rsp + 0x19c0], 4
lea rcx, [rsp + 0xa78]
lea rdx, [rsp + 0x19c0]
call fcn.14016f7c0
cmp al, 0xc
jne case.0x14013fc1f.1
mov rax, qword [rsp + 0xa30]
mov qword [rsp + 0x110], rax
movzx eax, byte [rsp + 0xa38]
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0xa3f]
mov dword [rsp + 0x158], eax
movzx eax, word [rsp + 0xa3d]
mov qword [rsp + 0x128], rax
mov eax, dword [rsp + 0xa39]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0xa40]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa48]
mov qword [rsp + 0x170], rax
mov eax, dword [rsi + 0x2e8]
mov qword [rsp + 0x78], rax
test rax, rax
sete bl
mov edx, dword [rsi + 0x2ec]
mov ecx, dword [rsi + 0x2f8]
mov eax, dword [rsi + 0x310]
mov qword [rsp + 0x50], rax
test rax, rax
setne bpl
mov qword [rsp + 0x60], rcx
test rcx, rcx
mov eax, dword [rsi + 0x2fc]
mov edi, 0xffff
mov dword [rsp + 0x1a0], eax
cmovne edi, eax
mov eax, dword [rsi + 0x314]
mov dword [rsp + 0xc0], edx
test edx, edx
setne byte [rsp + 0x120]
mov dword [rsp + 0xc4], eax
test eax, eax
setne byte [rsp + 0xe8]
mov rax, qword [rsp + 0xa50]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xa60]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0xa68]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0xa88]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0xa90]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0xa98]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0xaa0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0xaa8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0xab0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0xac0]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0xac8]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0xad0]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0xae8]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0xaf8]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xb08]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xb10]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0xb18]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0xb20]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xb28]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0xb30]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xb38]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xb40]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xb48]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xb50]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0xb58]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xb60]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0xb68]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0xb88]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xb98]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0xba0]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0xba8]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0xbb0]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xbb8]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0xbc0]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0xbc8]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0xbd0]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0xbd8]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xbe0]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0xbe8]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0xbf0]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0xbf8]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0xc00]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0xc08]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0xc18]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0xc20]
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0xc28]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0xc30]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0xc38]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0xc40]
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0xc48]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0xc60]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0xc88]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0xc90]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0xca8]
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0xcb8]
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0xcc0]
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0xcd0]
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0xcd8]
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0xce0]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0xce8]
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0xcf0]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0xd00]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0xd08]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0xd10]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0xd18]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0xd20]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0xd28]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0xd38]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0xd40]
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0xd48]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0xd58]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0xd60]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0xd68]
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0xd78]
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0xd80]
mov qword [rsp + 0x4b8], rax
mov rax, qword [rsp + 0xd88]
mov qword [rsp + 0x4e0], rax
mov rax, qword [rsp + 0xd90]
mov qword [rsp + 0x4c0], rax
mov rax, qword [rsp + 0xd98]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xda0]
mov qword [rsp + 0x4c8], rax
mov r12d, dword [rsi + 0x31c]
mov rax, qword [rsi + 0x2c0]
mov qword [rsp + 0x160], rax
mov r14, qword [rsi + 0x2c8]
mov r15, qword [rsi + 0x2b0]
mov r13d, dword [rsi + 0x2b8]
mov rax, qword [rsi + 0x2d0]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsi + 0x2d8]
mov qword [rsp + 0x80], rax
movzx eax, byte [rsi + 0x318]
mov qword [rsp + 0x68], rax
mov eax, dword [rsi + 0x2e0]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsi + 0x2e4]
mov dword [rsp + 0x148], eax
mov eax, dword [rsi + 0x2f0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 0x2f4]
mov qword [rsp + 0x38], rax
mov eax, dword [rsi + 0x300]
mov qword [rsp + 0x70], rax
mov eax, dword [rsi + 0x304]
mov dword [rsp + 0x150], eax
mov eax, dword [rsi + 0x308]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsi + 0x30c]
mov dword [rsp + 0xbc], eax
xor ecx, ecx
call fcn.1401c8bf0
test rax, rax
je case.0x14013fc1f.1
movups xmm6, xmmword [rax]
inc qword [rax]
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
movdqa xmmword [rsp + 0x19c0], xmm0
movdqa xmmword [rsp + 0x19d0], xmm0
movdqa xmmword [rsp + 0x2950], xmm0
movdqa xmmword [rsp + 0x2960], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140141412
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x230
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
or bl, byte [rsp + 0x120]
and bpl, byte [rsp + 0xe8]
xor r8d, r8d
cmp qword [rsp + 0x28], 1
sbb r8, r8
or r8, qword [rsp + 0x38]
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov ecx, dword [rsp + 0xd8]
mov edx, dword [rsp + 0xdb]
mov dword [rax + 0x19], ecx
mov dword [rax + 0x1c], edx
movabs rcx, 0x200000000
mov qword [rax + 0x20], rcx
mov dword [rax + 0x28], 0
mov qword [rax + 0x30], r15
mov dword [rax + 0x38], r13d
mov qword [rax + 0x40], 8
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movups xmmword [rax + 0x48], xmm0
movups xmmword [rax + 0x58], xmm1
movabs rcx, 0xffff0000ffff
mov qword [rax + 0x68], rcx
mov dword [rax + 0x70], 0
movups xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rax + 0x74], xmm0
mov dword [rax + 0x84], 0
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rax + 0x88], xmm0
mov dword [rax + 0x98], 0
movups xmm0, xmmword [rsp + 0x540]
movups xmmword [rax + 0x9c], xmm0
mov dword [rax + 0xac], edi
mov qword [rax + 0xb0], 0
mov dword [rax + 0xb8], 0x7fffffff
mov byte [rax + 0xbc], bl
mov byte [rax + 0xbd], bpl
mov dword [rax + 0xc0], 0
mov dword [rax + 0xc4], r12d
mov qword [rax + 0xc8], rcx
mov qword [rax + 0xd0], r14
mov dword [rax + 0xd8], 0
movups xmm0, xmmword [rsp + 0x598]
movups xmmword [rax + 0xdc], xmm0
mov dword [rax + 0xec], 0
movups xmm0, xmmword [rsp + 0x138]
movups xmmword [rax + 0xf0], xmm0
mov dword [rax + 0x100], 0
movups xmm0, xmmword [rsp + 0x4e8]
movups xmmword [rax + 0x104], xmm0
mov dword [rax + 0x114], 0
mov dword [rax + 0x120], 0
movabs rcx, 0xffff7fffffff
mov qword [rax + 0x128], rcx
mov word [rax + 0x130], 1
movzx ecx, word [rsp + 0x81e]
mov word [rax + 0x136], cx
mov ecx, dword [rsp + 0x81a]
mov dword [rax + 0x132], ecx
mov byte [rax + 0x138], 3
mov qword [rax + 0x160], 0
mov rcx, qword [rsp + 0x160]
mov qword [rax + 0x170], rcx
mov qword [rax + 0x178], 0
mov qword [rax + 0x180], r8
mov qword [rax + 0x188], 0
mov rcx, qword [rsp + 0x1a8]
mov qword [rax + 0x190], rcx
mov qword [rax + 0x198], 0
mov rcx, qword [rsp + 0x80]
mov qword [rax + 0x1a0], rcx
mov qword [rax + 0x1a8], 0
mov byte [rax + 0x1b0], 0
mov qword [rax + 0x1b8], 8
movaps xmm0, xmmword [rsp + 0x19c0]
movdqa xmm1, xmmword [rsp + 0x19d0]
movdqu xmmword [rax + 0x1d0], xmm1
movups xmmword [rax + 0x1c0], xmm0
movups xmm0, xmmword [0x1402a2e40]
movups xmmword [rax + 0x1f0], xmm0
movups xmm0, xmmword [str._._]
movups xmmword [rax + 0x1e0], xmm0
mov qword [rax + 0x200], 8
movdqa xmm0, xmmword [rsp + 0x2e90]
movdqu xmmword [rax + 0x208], xmm0
movups xmmword [rax + 0x218], xmm6
mov qword [rax + 0x228], 1
movzx ecx, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
mov rdi, rax
je 0x140141703
mov r12, qword [rsp + 0x130]
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x110]
jmp 0x140141735
call sub.kernel32.dll_GetProcessHeap
test rax, rax
mov r12, qword [rsp + 0x130]
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x110]
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x48
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rbx, rdi
add rbx, 0x10
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], 8
pxor xmm0, xmm0
movdqu xmmword [rax + 0x28], xmm0
mov qword [rsp + 0x120], rax
movdqu xmmword [rax + 0x38], xmm0
mov rcx, rbx
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
jne case.0x14013fc1f.1
inc qword [rdi + 0x228]
mov rcx, rbx
call fcn.1401f2d54
lock inc qword [rdi]
jle case.0x14013fc1f.1
mov rax, qword [rsp + 0x120]
lock inc qword [rax]
mov rbx, qword [rsp + 0x88]
jle case.0x14013fc1f.1
cmp dword [rsi + 0x2a8], 0
je 0x1401417f1
mov edx, dword [rsi + 0x2ac]
test edx, edx
js case.0x14013fc1f.1
mov rcx, rdi
call fcn.14019ba90
mov ecx, dword [rsp + 0x158]
shl ecx, 0x10
mov rax, qword [rsp + 0x128]
or eax, ecx
shl rax, 0x20
or rbx, rax
mov eax, dword [rsp + 0x148]
mov rcx, qword [rsp + 0x78]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x78], rcx
mov eax, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x28]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x28], rcx
mov rax, qword [rsp + 0x60]
shl rax, 0x20
add rax, qword [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov eax, dword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x70]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x70], rcx
mov eax, dword [rsp + 0x150]
mov rcx, qword [rsp + 0xa8]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0xa8], rcx
mov eax, dword [rsp + 0xbc]
mov rcx, qword [rsp + 0x50]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x50], rcx
mov eax, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0x68]
shl rcx, 0x20
or rcx, rax
mov rax, qword [rsp + 0x40]
mov byte [rax], 1
cmp rbp, 3
je 0x140140672
cmp rbp, 2
jne 0x140141982
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0xa30], al
mov dword [rsp + 0xa31], ebx
mov rax, rbx
shr rax, 0x30
mov byte [rsp + 0xa37], al
shr rbx, 0x20
mov word [rsp + 0xa35], bx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0xa48], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xa50], rax
lea rcx, [rsp + 0xa30]
call fcn.140066ae0
mov rdi, rax
mov rax, qword [rsi + 0x1f0]
test rax, rax
je 0x140141971
lock dec qword [rax]
jne 0x140141971
mov rcx, qword [rsi + 0x1f0]
mov rdx, qword [rsi + 0x1f8]
call fcn.14014cf70
lea rcx, [rsi + 0x1e0]
call fcn.140133330
jmp 0x1401461b4
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x68], rcx
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401419ba
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rbx, rax
mov qword [rax], 0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140141a05
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x10
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov r14, rax
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140141a51
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x60
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
movabs rcx, 0x7fffffffffffffff
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], r14
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], 1
inc rcx
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], 1
mov qword [rax + 0x48], 0
mov qword [rax + 0x58], 0
mov qword [rsp + 0xe8], rax
lock inc qword [rax]
jle case.0x14013fc1f.1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
mov r14, qword [rsp + 0xa0]
jne 0x140141afc
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x38
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], 0
mov qword [rsp + 0x1a8], rax
mov byte [rax + 0x30], 0
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x10b], ecx
mov dword [rsp + 0x108], eax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140141b88
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x48
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov qword [rsp + 0x48], r13
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x20], 0
mov qword [rax + 0x28], 0
mov byte [rax + 0x38], 0
mov word [rax + 0x40], 0
lock inc qword [rax]
jle case.0x14013fc1f.1
mov qword [rsp + 0x40], rax
shl r14, 0x20
or r14, 1
mov rax, qword [rsi + 0x360]
movzx ebx, byte [rax + 0x44]
mov ecx, dword [rax + 0x3c]
mov dword [rsp + 0xbc], ecx
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x158], rcx
mov r13d, dword [rax + 0x28]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1a0], rcx
mov ecx, dword [rax + 0x18]
mov dword [rsp + 0xc0], ecx
movzx eax, byte [rax + 0x45]
mov byte [rsp + 0xc4], al
test bl, bl
mov rax, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x4e0]
mov r8, qword [rsp + 0x4b8]
mov r9, qword [rsp + 0x4d8]
mov r10, qword [rsp + 0x4d0]
mov r11, qword [rsp + 0x530]
mov dword [rsp + 0x160], r13d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x110], rbp
mov qword [rsp + 0xa0], r14
jne 0x140142762
mov cl, 1
mov qword [rsp + 0x48], r13
cmp qword [rsi + 0x118], 0
mov qword [rsp + 0x30], r15
mov r13, r12
je 0x1401423cf
mov r9, qword [rsi + 0x120]
mov edx, 1
jmp 0x1401423d7
mov r9d, 0x2000
xor edx, edx
movzx r14d, byte [rsi + 0x195]
mov r12d, dword [rsi + 0x191]
movzx r15d, byte [rsi + 0x196]
movzx edi, byte [rsi + 0x197]
movzx r8d, byte [rsi + 0x190]
cmp qword [rsi + 0x128], 0
mov dword [rsp + 0x58], ecx
mov qword [rsp + 0x90], rax
je 0x14014243b
mov rdx, qword [rsi + 0x130]
cmp rdx, 0x1fff
jbe case.0x14013fc1f.1
mov qword [rsp + 0x68], rdx
mov r9d, 0x2000
xor eax, eax
mov qword [rsp + 0x60], rax
jmp 0x14014244a
mov qword [rsp + 0x60], rdx
mov eax, 0x66000
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x88], r9
movups xmm0, xmmword [rsp + 0x19c0]
movdqu xmm1, xmmword [rsp + 0x19d0]
movups xmm2, xmmword [rsp + 0x19e0]
movups xmm3, xmmword [rsp + 0x19f0]
movaps xmmword [rsp + 0xa30], xmm0
movdqa xmmword [rsp + 0xa40], xmm1
movaps xmmword [rsp + 0xa50], xmm2
movaps xmmword [rsp + 0xa60], xmm3
movdqu xmm0, xmmword [rsp + 0x1a00]
movdqa xmmword [rsp + 0xa70], xmm0
mov rcx, qword [rsp + 0x1a10]
mov qword [rsp + 0xa80], rcx
mov ecx, dword [rsp + 0x6a0]
mov edx, dword [rsp + 0x6a3]
mov dword [rsp + 0x640], ecx
cmp r8b, 1
mov eax, 0x2010001
sbb rax, 0
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x643], edx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
movdqa xmmword [rsp + 0x2950], xmm0
mov qword [rsp + 0x2960], 0
mov eax, dword [rsp + 0x800]
mov ecx, dword [rsp + 0x803]
mov dword [rsp + 0x903], ecx
mov dword [rsp + 0x900], eax
movzx eax, word [rsp + 0x544]
mov word [rsp + 0x184], ax
mov eax, dword [rsp + 0x540]
mov dword [rsp + 0x180], eax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14014256b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x28
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
shl r14, 0x20
or r14, r12
shl r15, 0x38
shl rdi, 0x30
or rdi, r15
movabs rcx, 0xffffffffff
and rcx, r14
shl rcx, 8
or rcx, rdi
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x178], rax
mov qword [rax], 0
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x870], rax
movaps xmm0, xmmword [rsp + 0xa70]
movaps xmmword [rsp + 0x860], xmm0
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmm1, xmmword [rsp + 0xa40]
movaps xmm2, xmmword [rsp + 0xa50]
movaps xmm3, xmmword [rsp + 0xa60]
movaps xmmword [rsp + 0x850], xmm3
movaps xmmword [rsp + 0x840], xmm2
movaps xmmword [rsp + 0x830], xmm1
movaps xmmword [rsp + 0x820], xmm0
mov eax, dword [rsp + 0x640]
mov ecx, dword [rsp + 0x643]
mov dword [rsp + 0x538], eax
mov dword [rsp + 0x53b], ecx
movaps xmm0, xmmword [rsp + 0x2e90]
movaps xmmword [rsp + 0x720], xmm0
mov rax, qword [rsp + 0x2960]
mov qword [rsp + 0x710], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmmword [rsp + 0x700], xmm0
mov eax, dword [rsp + 0x900]
mov ecx, dword [rsp + 0x903]
mov dword [rsp + 0x5eb], ecx
mov dword [rsp + 0x5e8], eax
movzx eax, word [rsp + 0x184]
mov word [rsp + 0x574], ax
mov eax, dword [rsp + 0x180]
mov dword [rsp + 0x570], eax
movups xmm0, xmmword [rsp + 0x8d8]
movaps xmmword [rsp + 0x6f0], xmm0
mov eax, dword [rsp + 0x8eb]
mov ecx, dword [rsp + 0x8ee]
mov dword [rsp + 0x5e3], ecx
mov dword [rsp + 0x5e0], eax
movups xmm0, xmmword [rsp + 0x730]
movups xmm1, xmmword [rsp + 0x740]
movaps xmmword [rsp + 0x6d0], xmm1
movaps xmmword [rsp + 0x6c0], xmm0
mov eax, dword [rsp + 0x8f9]
mov ecx, dword [rsp + 0x8fc]
mov dword [rsp + 0x5db], ecx
mov dword [rsp + 0x5d8], eax
mov eax, dword [rsp + 0x8f2]
mov ecx, dword [rsp + 0x8f5]
mov dword [rsp + 0x5d3], ecx
mov dword [rsp + 0x5d0], eax
mov eax, 0xb
mov qword [rsp + 0x28], rax
mov eax, 2
mov qword [rsp + 0x40], rax
mov eax, 3
mov qword [rsp + 0x50], rax
xor eax, eax
mov qword [rsp + 0x70], rax
xor r14d, r14d
mov r12, r13
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
jmp 0x1401463cc
mov rax, qword [rsi + 0x320]
jmp 0x140140514
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x950], rax
movups xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x940], xmm0
movups xmm0, xmmword [rsp + 0x640]
movups xmm1, xmmword [rsp + 0x650]
movups xmm2, xmmword [rsp + 0x660]
movups xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x930], xmm3
movaps xmmword [rsp + 0x920], xmm2
movaps xmmword [rsp + 0x910], xmm1
movaps xmmword [rsp + 0x900], xmm0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd3]
mov dword [rsp + 0x5f0], eax
mov dword [rsp + 0x5f3], ecx
mov rax, qword [rsp + 0x58]
mov byte [rax], 1
movaps xmm0, xmmword [rsp + 0x900]
movaps xmm1, xmmword [rsp + 0x910]
movaps xmm2, xmmword [rsp + 0x920]
movaps xmm3, xmmword [rsp + 0x930]
movaps xmmword [rsp + 0x880], xmm0
movaps xmmword [rsp + 0x890], xmm1
movaps xmmword [rsp + 0x8a0], xmm2
movaps xmmword [rsp + 0x8b0], xmm3
movaps xmm0, xmmword [rsp + 0x940]
movaps xmmword [rsp + 0x8c0], xmm0
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x8d0], rax
mov eax, dword [rsp + 0x5f0]
mov ecx, dword [rsp + 0x5f3]
mov dword [rsp + 0x5f8], eax
mov dword [rsp + 0x5fb], ecx
mov rcx, qword [rsp + 0x178]
call fcn.140133200
cmp rbp, 2
jne 0x140146332
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
jne 0x1401462e0
mov rcx, qword [rsi + 0x1b8]
call fcn.14014c020
lea rbx, [rsi + 0x1c0]
mov rcx, rbx
call fcn.1401ab590
mov rax, qword [rsi + 0x1c0]
lock dec qword [rax]
jne 0x140146304
mov rcx, qword [rbx]
call fcn.14014d870
mov qword [rsp + 0x38], rdi
mov rax, qword [rsi + 0x180]
test rax, rax
je 0x140146578
lock dec qword [rax]
mov r14d, 4
mov dword [rsp + 0x58], eax
je 0x140146563
jmp 0x140146582
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x870], rax
movaps xmm0, xmmword [rsp + 0x8c0]
movaps xmmword [rsp + 0x860], xmm0
movaps xmm0, xmmword [rsp + 0x880]
movaps xmm1, xmmword [rsp + 0x890]
movaps xmm2, xmmword [rsp + 0x8a0]
movaps xmm3, xmmword [rsp + 0x8b0]
movaps xmmword [rsp + 0x850], xmm3
movaps xmmword [rsp + 0x840], xmm2
movaps xmmword [rsp + 0x830], xmm1
movaps xmmword [rsp + 0x820], xmm0
mov eax, dword [rsp + 0x5f8]
mov ecx, dword [rsp + 0x5fb]
mov dword [rsp + 0x538], eax
mov dword [rsp + 0x53b], ecx
mov r14d, 2
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x110], rdi
mov rax, qword [rsi + 0x1b8]
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rsi + 0x1c0]
movaps xmmword [rsp + 0x580], xmm0
movaps xmm0, xmmword [rsp + 0x820]
movaps xmm1, xmmword [rsp + 0x830]
movaps xmm2, xmmword [rsp + 0x840]
movaps xmm3, xmmword [rsp + 0x850]
movaps xmmword [rsp + 0x780], xmm0
movaps xmmword [rsp + 0x790], xmm1
movaps xmmword [rsp + 0x7a0], xmm2
movaps xmmword [rsp + 0x7b0], xmm3
movaps xmm0, xmmword [rsp + 0x860]
movaps xmmword [rsp + 0x7c0], xmm0
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0x7d0], rax
mov eax, dword [rsp + 0x538]
mov ecx, dword [rsp + 0x53b]
mov dword [rsp + 0x100], eax
mov dword [rsp + 0x103], ecx
movaps xmm0, xmmword [rsp + 0x720]
movaps xmmword [rsp + 0x760], xmm0
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x9f0], xmm0
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0xa00], rax
mov eax, dword [rsp + 0x5e8]
mov ecx, dword [rsp + 0x5eb]
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfb], ecx
mov eax, dword [rsp + 0x570]
mov dword [rsp + 0x578], eax
movzx eax, word [rsp + 0x574]
mov word [rsp + 0x57c], ax
movaps xmm0, xmmword [rsp + 0x6f0]
movaps xmmword [rsp + 0x750], xmm0
mov eax, dword [rsp + 0x5e0]
mov ecx, dword [rsp + 0x5e3]
mov dword [rsp + 0xcb], ecx
mov dword [rsp + 0xc8], eax
movaps xmm0, xmmword [rsp + 0x6c0]
movaps xmm1, xmmword [rsp + 0x6d0]
movaps xmmword [rsp + 0x620], xmm1
movaps xmmword [rsp + 0x610], xmm0
mov eax, dword [rsp + 0x5d8]
mov ecx, dword [rsp + 0x5db]
mov dword [rsp + 0x60b], ecx
mov dword [rsp + 0x608], eax
mov eax, dword [rsp + 0x5d0]
mov ecx, dword [rsp + 0x5d3]
mov dword [rsp + 0x603], ecx
mov dword [rsp + 0x600], eax
mov rax, qword [rsi + 0x180]
test rax, rax
je 0x140146582
lock dec qword [rax]
jne 0x140146582
mov rcx, qword [rsi + 0x180]
mov rdx, qword [rsi + 0x188]
call fcn.14014cf70
jmp 0x140146582
mov r14d, 4
mov dword [rsp + 0x58], eax
movaps xmm0, xmmword [rsp + 0x580]
movaps xmmword [rsp + 0x630], xmm0
movaps xmm0, xmmword [rsp + 0x780]
movaps xmm1, xmmword [rsp + 0x790]
movaps xmm2, xmmword [rsp + 0x7a0]
movaps xmm3, xmmword [rsp + 0x7b0]
movaps xmmword [rsp + 0x990], xmm0
movaps xmmword [rsp + 0x9a0], xmm1
movaps xmmword [rsp + 0x9b0], xmm2
movaps xmmword [rsp + 0x9c0], xmm3
movaps xmm0, xmmword [rsp + 0x7c0]
movaps xmmword [rsp + 0x9d0], xmm0
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x9e0], rax
mov eax, dword [rsp + 0x100]
mov ecx, dword [rsp + 0x103]
mov dword [rsp + 0x5c8], eax
mov dword [rsp + 0x5cb], ecx
movaps xmm0, xmmword [rsp + 0x760]
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmm0, xmmword [rsp + 0x9f0]
movaps xmmword [rsp + 0x970], xmm0
mov rax, qword [rsp + 0xa00]
mov qword [rsp + 0x980], rax
mov eax, dword [rsp + 0xf8]
mov ecx, dword [rsp + 0xfb]
mov dword [rsp + 0x5c0], eax
mov dword [rsp + 0x5c3], ecx
mov eax, dword [rsp + 0x578]
mov dword [rsp + 0x568], eax
movzx eax, word [rsp + 0x57c]
mov word [rsp + 0x56c], ax
movaps xmm0, xmmword [rsp + 0x750]
movaps xmmword [rsp + 0x960], xmm0
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xcb]
mov dword [rsp + 0x5bb], ecx
mov dword [rsp + 0x5b8], eax
movaps xmm0, xmmword [rsp + 0x610]
movaps xmm1, xmmword [rsp + 0x620]
movaps xmmword [rsp + 0x7f0], xmm1
movaps xmmword [rsp + 0x7e0], xmm0
mov eax, dword [rsp + 0x608]
mov ecx, dword [rsp + 0x60b]
mov dword [rsp + 0x5b3], ecx
mov dword [rsp + 0x5b0], eax
mov eax, dword [rsp + 0x600]
mov ecx, dword [rsp + 0x603]
mov dword [rsp + 0x5ab], ecx
mov dword [rsp + 0x5a8], eax
mov rax, qword [rsp + 0xb0]
mov byte [rax], 1
movaps xmm0, xmmword [rsp + 0x630]
movaps xmmword [rsp + 0x800], xmm0
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x690], rax
movaps xmm0, xmmword [rsp + 0x9d0]
movaps xmmword [rsp + 0x680], xmm0
movaps xmm0, xmmword [rsp + 0x990]
movaps xmm1, xmmword [rsp + 0x9a0]
movaps xmm2, xmmword [rsp + 0x9b0]
movaps xmm3, xmmword [rsp + 0x9c0]
movaps xmmword [rsp + 0x670], xmm3
movaps xmmword [rsp + 0x660], xmm2
movaps xmmword [rsp + 0x650], xmm1
movaps xmmword [rsp + 0x640], xmm0
mov eax, dword [rsp + 0x5c8]
mov ecx, dword [rsp + 0x5cb]
mov dword [rsp + 0xdb], ecx
mov dword [rsp + 0xd8], eax
movaps xmm0, xmmword [rsp + 0x6e0]
movaps xmmword [rsp + 0x700], xmm0
mov rax, qword [rsp + 0x980]
mov qword [rsp + 0x740], rax
movaps xmm0, xmmword [rsp + 0x970]
movaps xmmword [rsp + 0x730], xmm0
mov eax, dword [rsp + 0x5c0]
mov ecx, dword [rsp + 0x5c3]
mov dword [rsp + 0xd3], ecx
mov dword [rsp + 0xd0], eax
movzx eax, word [rsp + 0x56c]
mov word [rsp + 0xcc], ax
mov eax, dword [rsp + 0x568]
mov dword [rsp + 0xc8], eax
movaps xmm0, xmmword [rsp + 0x960]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [rsp + 0x5b8]
mov ecx, dword [rsp + 0x5bb]
mov dword [rsp + 0x10b], ecx
mov dword [rsp + 0x108], eax
movdqa xmm0, xmmword [rsp + 0x7e0]
movdqa xmm1, xmmword [rsp + 0x7f0]
movdqa xmmword [rsp + 0x910], xmm1
movdqa xmmword [rsp + 0x900], xmm0
mov eax, dword [rsp + 0x5b0]
mov ecx, dword [rsp + 0x5b3]
mov dword [rsp + 0x103], ecx
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x5a8]
mov ecx, dword [rsp + 0x5ab]
mov dword [rsp + 0xfb], ecx
mov dword [rsp + 0xf8], eax
mov rcx, r13
call fcn.140132f40
cmp r14d, 4
jne 0x1401468aa
mov r15, qword [rsp + 0x38]
mov rax, qword [rsi + 0x68]
test rax, rax
jne 0x1401481bb
jmp 0x1401481ce
mov qword [rsp + 0x30], r15
movaps xmm0, xmmword [rsp + 0x800]
movaps xmmword [rsp + 0x970], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x2ee0], rax
movaps xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x2ed0], xmm0
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x2ec0], xmm3
movaps xmmword [rsp + 0x2eb0], xmm2
movaps xmmword [rsp + 0x2ea0], xmm1
movaps xmmword [rsp + 0x2e90], xmm0
mov eax, dword [rsp + 0xd8]
mov ecx, dword [rsp + 0xdb]
mov dword [rsp + 0x763], ecx
mov dword [rsp + 0x760], eax
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x6a0], xmm0
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x620], rax
movaps xmm0, xmmword [rsp + 0x730]
movaps xmmword [rsp + 0x610], xmm0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd3]
mov dword [rsp + 0x753], ecx
mov dword [rsp + 0x750], eax
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x6e4], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x6e0], eax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x9f0], xmm0
mov eax, dword [rsp + 0x108]
mov ecx, dword [rsp + 0x10b]
mov dword [rsp + 0x8db], ecx
mov dword [rsp + 0x8d8], eax
movdqa xmm0, xmmword [rsp + 0x900]
movdqa xmm1, xmmword [rsp + 0x910]
movdqa xmmword [rsp + 0x890], xmm1
movdqa xmmword [rsp + 0x880], xmm0
mov eax, dword [rsp + 0x100]
mov ecx, dword [rsp + 0x103]
mov dword [rsp + 0x723], ecx
mov dword [rsp + 0x720], eax
mov eax, dword [rsp + 0xf8]
mov ecx, dword [rsp + 0xfb]
mov dword [rsp + 0x6f3], ecx
mov dword [rsp + 0x6f0], eax
mov r15, qword [rsi + 0xf8]
test r15, r15
mov qword [rsp + 0x130], r12
je 0x140146da4
mov rdi, qword [rsi + 0x100]
mov r12, qword [rdi + 0x10]
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140146a7b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x1e8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
dec r12
and r12, 0xfffffffffffffff0
lea rcx, [r12 + r15]
add rcx, 0x10
mov qword [rax], r14
mov qword [rax + 8], 2
mov rdx, qword [rsp + 0x50]
mov qword [rax + 0x10], rdx
movaps xmm0, xmmword [rsp + 0x2e90]
movaps xmm1, xmmword [rsp + 0x2ea0]
movaps xmm2, xmmword [rsp + 0x2eb0]
movaps xmm3, xmmword [rsp + 0x2ec0]
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm1
movups xmmword [rax + 0x38], xmm2
movups xmmword [rax + 0x48], xmm3
movaps xmm0, xmmword [rsp + 0x2ed0]
movups xmmword [rax + 0x58], xmm0
mov rdx, qword [rsp + 0x2ee0]
mov qword [rax + 0x68], rdx
mov qword [rax + 0x70], 0
mov rdx, qword [rsp + 0xe8]
mov qword [rax + 0x78], rdx
mov rdx, qword [rsp + 0x1a8]
mov qword [rax + 0x80], rdx
mov byte [rax + 0x88], 0
mov edx, dword [rsp + 0x760]
mov r8d, dword [rsp + 0x763]
mov dword [rax + 0x89], edx
mov dword [rax + 0x8c], r8d
mov rdx, qword [rsp + 0x40]
mov qword [rax + 0x90], rdx
mov rdx, qword [rsp + 0x110]
mov qword [rax + 0x98], rdx
mov rdx, qword [rsp + 0x120]
mov qword [rax + 0xa0], rdx
mov rdx, qword [rsp + 0x28]
mov qword [rax + 0xa8], rdx
mov rdx, qword [rsp + 0xe0]
mov qword [rax + 0xb8], rdx
mov rdx, qword [rsp + 0x70]
mov qword [rax + 0xc0], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0xc8], rdx
mov rdx, qword [rsp + 0x78]
mov qword [rax + 0xd0], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rax + 0xd8], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0xe0], rdx
mov r8, qword [rsp + 0x68]
mov qword [rax + 0xe8], r8
mov rdx, qword [rsp + 0x98]
mov qword [rax + 0xf0], rdx
mov rdx, qword [rsp + 0xa0]
mov qword [rax + 0xf8], rdx
mov rdx, qword [rsp + 0xa8]
mov qword [rax + 0x100], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rax + 0x108], rdx
mov qword [rax + 0x110], 0x2000
movaps xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rax + 0x118], xmm0
mov qword [rax + 0x128], 8
mov rdx, qword [rsp + 0x620]
mov qword [rax + 0x140], rdx
movaps xmm0, xmmword [rsp + 0x610]
movups xmmword [rax + 0x130], xmm0
mov qword [rax + 0x148], r8
mov edx, dword [rsp + 0x58]
mov byte [rax + 0x150], dl
mov edx, dword [rsp + 0x750]
mov r8d, dword [rsp + 0x753]
mov dword [rax + 0x151], edx
mov dword [rax + 0x154], r8d
mov qword [rax + 0x158], 1
xorps xmm0, xmm0
movups xmmword [rax + 0x160], xmm0
mov qword [rax + 0x170], 1
mov word [rax + 0x178], 0
movzx edx, word [rsp + 0x6e4]
mov word [rax + 0x17e], dx
mov edx, dword [rsp + 0x6e0]
mov dword [rax + 0x17a], edx
mov qword [rax + 0x180], 2
movaps xmm0, xmmword [rsp + 0x9f0]
movups xmmword [rax + 0x188], xmm0
mov qword [rax + 0x198], rbx
mov qword [rax + 0x1a0], rbp
mov byte [rax + 0x1a8], 0
mov edx, dword [rsp + 0x8d8]
mov r8d, dword [rsp + 0x8db]
mov dword [rax + 0x1ac], r8d
mov dword [rax + 0x1a9], edx
movdqa xmm0, xmmword [rsp + 0x880]
movdqa xmm1, xmmword [rsp + 0x890]
movdqu xmmword [rax + 0x1c0], xmm1
movdqu xmmword [rax + 0x1b0], xmm0
mov byte [rax + 0x1d0], 3
mov edx, dword [rsp + 0x720]
mov r8d, dword [rsp + 0x723]
mov dword [rax + 0x1d4], r8d
mov dword [rax + 0x1d1], edx
mov rdx, qword [rsp + 0x178]
mov qword [rax + 0x1d8], rdx
mov byte [rax + 0x1e0], 0
mov edx, dword [rsp + 0x6f0]
mov r8d, dword [rsp + 0x6f3]
mov dword [rax + 0x1e4], r8d
mov dword [rax + 0x1e1], edx
lea r8, [0x14029fdc0]
mov rdx, rax
call qword [rdi + 0x18]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jmp 0x14014800c
mov eax, 1
lock xadd qword [0x1401f5190], rax
mov qword [rsp + 0xa10], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x2950], xmm0
movaps xmmword [rsp + 0x2960], xmm1
movaps xmmword [rsp + 0x2970], xmm2
movaps xmmword [rsp + 0x2980], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x2990], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x29a0], rax
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0x543], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x540], eax
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x6c0], xmm0
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x9a0], rax
movaps xmm0, xmmword [rsp + 0x730]
movaps xmmword [rsp + 0x990], xmm0
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0x59b], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x598], eax
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x634], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x630], eax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x7e0], xmm0
mov eax, dword [rsp + 0x10b]
mov dword [rsp + 0x13b], eax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x138], eax
movaps xmm0, xmmword [rsp + 0x900]
movaps xmm1, xmmword [rsp + 0x910]
movaps xmmword [rsp + 0x790], xmm1
movaps xmmword [rsp + 0x780], xmm0
mov eax, dword [rsp + 0x103]
mov dword [rsp + 0x4eb], eax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0xfb]
mov dword [rsp + 0x583], eax
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x580], eax
mov qword [rsp + 0x19c0], r14
mov qword [rsp + 0x19c8], 2
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x19d0], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movups xmmword [rsp + 0x19d8], xmm0
movups xmmword [rsp + 0x19e8], xmm1
movups xmmword [rsp + 0x19f8], xmm2
movups xmmword [rsp + 0x1a08], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movups xmmword [rsp + 0x1a18], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x1a28], rax
mov qword [rsp + 0x1a30], 0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x1a38], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x1a40], rax
mov byte [rsp + 0x1a48], 0
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0x1a4c], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x1a49], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x1a50], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x1a58], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1a60], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x1a68], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x1a78], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x1a80], rax
mov r15, qword [rsp + 0x80]
mov qword [rsp + 0x1a88], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1a90], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x1aa0], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x1aa8], rcx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x1ab0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x1ac0], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x1ac8], rax
mov qword [rsp + 0x1ad0], 0x2000
movaps xmm0, xmmword [rsp + 0x700]
movups xmmword [rsp + 0x1ad8], xmm0
mov qword [rsp + 0x1ae8], 8
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x1b00], rax
movaps xmm0, xmmword [rsp + 0x730]
movups xmmword [rsp + 0x1af0], xmm0
mov qword [rsp + 0x1b08], rcx
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x1b10], al
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0x1b14], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x1b11], eax
mov qword [rsp + 0x1b18], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b20], xmm0
mov qword [rsp + 0x1b30], 1
mov word [rsp + 0x1b38], 0
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x1b3e], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x1b3a], eax
mov qword [rsp + 0x1b40], 2
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x1b48], xmm0
mov qword [rsp + 0x1b58], rbx
mov qword [rsp + 0x1b60], rbp
mov byte [rsp + 0x1b68], 0
mov eax, dword [rsp + 0x10b]
mov dword [rsp + 0x1b6c], eax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x1b69], eax
movdqa xmm0, xmmword [rsp + 0x900]
movdqa xmm1, xmmword [rsp + 0x910]
movdqu xmmword [rsp + 0x1b80], xmm1
movdqu xmmword [rsp + 0x1b70], xmm0
mov byte [rsp + 0x1b90], 3
mov eax, dword [rsp + 0x103]
mov dword [rsp + 0x1b94], eax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x1b91], eax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x1b98], rax
mov byte [rsp + 0x1ba0], 0
mov eax, dword [rsp + 0xfb]
mov dword [rsp + 0x1ba4], eax
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x1ba1], eax
lea rdi, [rsp + 0xa10]
mov qword [rsp + 0x1ba8], rdi
xor ecx, ecx
call fcn.14019bb60
test rax, rax
je 0x140148c10
mov rdx, rax
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jae case.0x14013fc1f.1
mov qword [rsp + 0x48], r13
inc rax
mov qword [rdx], rax
cmp dword [rdx + 8], 2
mov qword [rsp + 0xa30], r14
mov qword [rsp + 0xa38], 2
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa40], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movups xmmword [rsp + 0xa48], xmm0
movups xmmword [rsp + 0xa58], xmm1
movups xmmword [rsp + 0xa68], xmm2
movups xmmword [rsp + 0xa78], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movups xmmword [rsp + 0xa88], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0xa98], rax
mov qword [rsp + 0xaa0], 0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xaa8], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0xab0], rax
mov byte [rsp + 0xab8], 0
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0xabc], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0xab9], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xaf0], rax
mov qword [rsp + 0xaf8], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xb10], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0xb18], rcx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xb38], rax
mov qword [rsp + 0xb40], 0x2000
movaps xmm0, xmmword [rsp + 0x700]
movups xmmword [rsp + 0xb48], xmm0
mov qword [rsp + 0xb58], 8
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0xb70], rax
movaps xmm0, xmmword [rsp + 0x730]
movups xmmword [rsp + 0xb60], xmm0
mov qword [rsp + 0xb78], rcx
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0xb80], al
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0xb81], eax
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0xb84], eax
mov qword [rsp + 0xb88], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0xb90], xmm0
mov qword [rsp + 0xba0], 1
mov word [rsp + 0xba8], 0
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0xbae], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0xbaa], eax
mov qword [rsp + 0xbb0], 2
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0xbb8], xmm0
mov qword [rsp + 0xbc8], rbx
mov qword [rsp + 0xbd0], rbp
mov byte [rsp + 0xbd8], 0
mov eax, dword [rsp + 0x13b]
mov dword [rsp + 0xbdc], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0xbd9], eax
movdqa xmm0, xmmword [rsp + 0x780]
movdqa xmm1, xmmword [rsp + 0x790]
movdqu xmmword [rsp + 0xbf0], xmm1
movdqu xmmword [rsp + 0xbe0], xmm0
mov byte [rsp + 0xc00], 3
mov eax, dword [rsp + 0x4eb]
mov dword [rsp + 0xc04], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0xc01], eax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0xc08], rax
mov byte [rsp + 0xc10], 0
mov eax, dword [rsp + 0x583]
mov dword [rsp + 0xc14], eax
mov eax, dword [rsp + 0x580]
mov dword [rsp + 0xc11], eax
mov qword [rsp + 0xc18], rdi
je 0x140148c21
mov r12, qword [rsp + 0xa10]
mov r13, rdx
add r13, 0x10
cmp qword [rdx + 8], 0
mov qword [rsp + 0xb0], rdx
je 0x140147a59
mov rdi, qword [r13]
lock inc qword [rdi]
jle case.0x14013fc1f.1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140147647
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x300
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 0xcc
mov qword [rcx + 0x88], 0
lea rax, [0x14029efa0]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0
mov qword [rcx + 0xa0], rdi
mov qword [rcx + 0xa8], r12
mov qword [rcx + 0xb0], r14
mov qword [rcx + 0xb8], 2
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movaps xmm2, xmmword [rsp + 0x2970]
movaps xmm3, xmmword [rsp + 0x2980]
movups xmmword [rcx + 0xc8], xmm0
movups xmmword [rcx + 0xd8], xmm1
movups xmmword [rcx + 0xe8], xmm2
movups xmmword [rcx + 0xf8], xmm3
movaps xmm0, xmmword [rsp + 0x2990]
movups xmmword [rcx + 0x108], xmm0
mov rax, qword [rsp + 0x29a0]
mov qword [rcx + 0x118], rax
mov qword [rcx + 0x120], 0
mov rax, qword [rsp + 0xe8]
mov qword [rcx + 0x128], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x130], rax
mov byte [rcx + 0x138], 0
mov eax, dword [rsp + 0x540]
mov edx, dword [rsp + 0x543]
mov dword [rcx + 0x13c], edx
mov dword [rcx + 0x139], eax
mov rax, qword [rsp + 0x40]
mov qword [rcx + 0x140], rax
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x148], rax
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x150], rax
mov rax, qword [rsp + 0x28]
mov qword [rcx + 0x158], rax
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x168], rax
mov rax, qword [rsp + 0x70]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], r15
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x180], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x188], rax
mov rax, qword [rsp + 0x88]
mov qword [rcx + 0x190], rax
mov rdx, qword [rsp + 0x68]
mov qword [rcx + 0x198], rdx
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0x1a0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0x1a8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0x1b0], rax
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0x1b8], rax
mov qword [rcx + 0x1c0], 0x2000
movaps xmm0, xmmword [rsp + 0x6c0]
movups xmmword [rcx + 0x1c8], xmm0
mov qword [rcx + 0x1d8], 8
movdqa xmm0, xmmword [rsp + 0x990]
movdqu xmmword [rcx + 0x1e0], xmm0
mov rax, qword [rsp + 0x9a0]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], rdx
mov eax, dword [rsp + 0x58]
mov byte [rcx + 0x200], al
mov eax, dword [rsp + 0x598]
mov edx, dword [rsp + 0x59b]
mov dword [rcx + 0x204], edx
mov dword [rcx + 0x201], eax
mov qword [rcx + 0x208], 1
pxor xmm0, xmm0
movdqa xmmword [rcx + 0x210], xmm0
mov qword [rcx + 0x220], 1
mov word [rcx + 0x228], 0
mov eax, dword [rsp + 0x630]
mov dword [rcx + 0x22a], eax
movzx eax, word [rsp + 0x634]
mov word [rcx + 0x22e], ax
lea r12, [rcx + 0x80]
mov qword [rcx + 0x230], 2
movaps xmm1, xmmword [rsp + 0x7e0]
movups xmmword [rcx + 0x238], xmm1
mov qword [rcx + 0x248], rbx
mov qword [rcx + 0x250], rbp
mov byte [rcx + 0x258], 0
mov eax, dword [rsp + 0x138]
mov edx, dword [rsp + 0x13b]
mov dword [rcx + 0x25c], edx
mov dword [rcx + 0x259], eax
movdqa xmm1, xmmword [rsp + 0x780]
movaps xmm2, xmmword [rsp + 0x790]
movdqu xmmword [rcx + 0x260], xmm1
movups xmmword [rcx + 0x270], xmm2
mov byte [rcx + 0x280], 3
mov eax, dword [rsp + 0x4e8]
mov edx, dword [rsp + 0x4eb]
mov dword [rcx + 0x284], edx
mov dword [rcx + 0x281], eax
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x288], rax
mov byte [rcx + 0x290], 0
mov eax, dword [rsp + 0x580]
mov edx, dword [rsp + 0x583]
mov dword [rcx + 0x294], edx
mov dword [rcx + 0x291], eax
movdqu xmmword [rcx + 0x298], xmm0
mov qword [rcx + 0x2a8], 0
mov rax, qword [rdi + 0x90]
mov qword [rcx + 0x98], rax
mov rax, qword [rcx + 0x90]
mov rax, qword [rax + 0x48]
mov r14, qword [rcx + rax + 0x80]
mov r15, qword [rdi + 0x70]
mov r13, qword [rdi + 0x88]
and r13, r14
shl r13, 5
lea rbx, [r15 + r13]
mov rcx, rbx
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r15 + r13 + 8]
movzx eax, byte [rdi + 0x98]
test al, al
je 0x140147eac
mov rcx, rbx
call fcn.1401f2d54
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x30]
mov rax, 0xffffffffffffffc0
lock xadd qword [r12], rax
cmp rax, 0x3f
jbe case.0x14013fc1f.1
and rax, 0xffffffffffffffc0
cmp rax, 0x40
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
je 0x140147e9c
jmp 0x140147fe4
mov rdi, qword [r13]
lock inc qword [rdi]
jle case.0x14013fc1f.1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140147a92
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x300
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 0xcc
mov qword [rcx + 0x88], 0
lea rax, [0x14029ec30]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0
mov qword [rcx + 0xa0], rdi
mov qword [rcx + 0xa8], r12
mov qword [rcx + 0xb0], r14
mov qword [rcx + 0xb8], 2
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movaps xmm2, xmmword [rsp + 0x2970]
movaps xmm3, xmmword [rsp + 0x2980]
movups xmmword [rcx + 0xc8], xmm0
movups xmmword [rcx + 0xd8], xmm1
movups xmmword [rcx + 0xe8], xmm2
movups xmmword [rcx + 0xf8], xmm3
movaps xmm0, xmmword [rsp + 0x2990]
movups xmmword [rcx + 0x108], xmm0
mov rax, qword [rsp + 0x29a0]
mov qword [rcx + 0x118], rax
mov qword [rcx + 0x120], 0
mov rax, qword [rsp + 0xe8]
mov qword [rcx + 0x128], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x130], rax
mov byte [rcx + 0x138], 0
mov eax, dword [rsp + 0x540]
mov edx, dword [rsp + 0x543]
mov dword [rcx + 0x13c], edx
mov dword [rcx + 0x139], eax
mov rax, qword [rsp + 0x40]
mov qword [rcx + 0x140], rax
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x148], rax
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x150], rax
mov rax, qword [rsp + 0x28]
mov qword [rcx + 0x158], rax
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x168], rax
mov rax, qword [rsp + 0x70]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], r15
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x180], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x188], rax
mov rax, qword [rsp + 0x88]
mov qword [rcx + 0x190], rax
mov rdx, qword [rsp + 0x68]
mov qword [rcx + 0x198], rdx
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0x1a0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0x1a8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0x1b0], rax
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0x1b8], rax
mov qword [rcx + 0x1c0], 0x2000
movaps xmm0, xmmword [rsp + 0x6c0]
movups xmmword [rcx + 0x1c8], xmm0
mov qword [rcx + 0x1d8], 8
movdqa xmm0, xmmword [rsp + 0x990]
movdqu xmmword [rcx + 0x1e0], xmm0
mov rax, qword [rsp + 0x9a0]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], rdx
mov eax, dword [rsp + 0x58]
mov byte [rcx + 0x200], al
mov eax, dword [rsp + 0x598]
mov edx, dword [rsp + 0x59b]
mov dword [rcx + 0x204], edx
mov dword [rcx + 0x201], eax
mov qword [rcx + 0x208], 1
pxor xmm0, xmm0
movdqa xmmword [rcx + 0x210], xmm0
mov qword [rcx + 0x220], 1
mov word [rcx + 0x228], 0
mov eax, dword [rsp + 0x630]
mov dword [rcx + 0x22a], eax
movzx eax, word [rsp + 0x634]
mov word [rcx + 0x22e], ax
lea r12, [rcx + 0x80]
mov qword [rcx + 0x230], 2
movaps xmm1, xmmword [rsp + 0x7e0]
movups xmmword [rcx + 0x238], xmm1
mov qword [rcx + 0x248], rbx
mov qword [rcx + 0x250], rbp
mov byte [rcx + 0x258], 0
mov eax, dword [rsp + 0x138]
mov edx, dword [rsp + 0x13b]
mov dword [rcx + 0x25c], edx
mov dword [rcx + 0x259], eax
movdqa xmm1, xmmword [rsp + 0x780]
movaps xmm2, xmmword [rsp + 0x790]
movdqu xmmword [rcx + 0x260], xmm1
movups xmmword [rcx + 0x270], xmm2
mov byte [rcx + 0x280], 3
mov eax, dword [rsp + 0x4e8]
mov edx, dword [rsp + 0x4eb]
mov dword [rcx + 0x284], edx
mov dword [rcx + 0x281], eax
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x288], rax
mov byte [rcx + 0x290], 0
mov eax, dword [rsp + 0x580]
mov edx, dword [rsp + 0x583]
mov dword [rcx + 0x294], edx
mov dword [rcx + 0x291], eax
movdqu xmmword [rcx + 0x298], xmm0
mov qword [rcx + 0x2a8], 0
mov rax, qword [rdi + 0x80]
mov qword [rcx + 0x98], rax
mov rax, qword [rcx + 0x90]
mov rax, qword [rax + 0x48]
mov r14, qword [rcx + rax + 0x80]
mov r15, qword [rdi + 0x60]
mov rbp, qword [rdi + 0x78]
and rbp, r14
shl rbp, 5
lea rbx, [r15 + rbp]
mov rcx, rbx
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r15 + rbp + 8]
movzx eax, byte [rdi + 0x88]
test al, al
je 0x140147f63
mov rcx, rbx
call fcn.1401f2d54
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x30]
mov rax, 0xffffffffffffffc0
lock xadd qword [r12], rax
cmp rax, 0x3f
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jbe case.0x14013fc1f.1
and rax, 0xffffffffffffffc0
cmp rax, 0x40
mov r13, qword [rsp + 0x48]
jne 0x140147fe4
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x10]
jmp 0x140147fe4
mov rcx, qword [r12 + 0x10]
mov rax, qword [rcx + 0x48]
cmp qword [r12 + rax], r14
jne case.0x14013fc1f.1
mov rax, qword [rbx + 0x10]
cmp rax, r12
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
je case.0x14013fc1f.1
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx + 8], rax
mov rcx, qword [r12 + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx], 0
test rax, rax
je 0x140147f06
mov rcx, qword [rax + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [rax + rcx], r12
mov qword [rbx + 0x10], r12
cmp qword [rbx + 0x18], 0
jne 0x140147f15
mov qword [rbx + 0x18], r12
lock inc qword [rdi + 0x80]
mov rcx, rbx
call fcn.1401f2d54
add rdi, 0x10
mov byte [rsp + 0x960], 0
mov qword [rsp + 0x820], rdi
mov qword [rsp + 0x828], r12
lea rax, [rsp + 0x960]
mov qword [rsp + 0x830], rax
lea rcx, [rsp + 0x820]
call fcn.1401dc370
jmp 0x140147fe4
mov rcx, qword [r12 + 0x10]
mov rax, qword [rcx + 0x48]
cmp qword [r12 + rax], r14
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jne case.0x14013fc1f.1
mov rax, qword [rbx + 0x10]
cmp rax, r12
je case.0x14013fc1f.1
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx + 8], rax
mov rcx, qword [r12 + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx], 0
test rax, rax
je 0x140147fb8
mov rcx, qword [rax + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [rax + rcx], r12
mov qword [rbx + 0x10], r12
cmp qword [rbx + 0x18], 0
jne 0x140147fc7
mov qword [rbx + 0x18], r12
lock inc qword [rdi + 0x70]
mov rcx, rbx
call fcn.1401f2d54
mov rcx, r13
mov rdx, r12
call fcn.1401dbaa0
mov r13, qword [rsp + 0x48]
mov rax, qword [rsp + 0xb0]
dec qword [rax]
mov ecx, 0x84
mov eax, 0xcc
lock cmpxchg qword [r12], rcx
je 0x14014800c
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x20]
mov qword [rsi + 0x130], r14
movaps xmm0, xmmword [rsp + 0x970]
movups xmmword [rsi + 0x138], xmm0
lea rdi, [rsi + 0x148]
mov byte [rsi + 0x148], 0
mov r12, qword [rsp + 0x130]
mov rax, qword [rsi + 0x140]
mov qword [r13 + 0x10], rax
movdqu xmm0, xmmword [rsi + 0x130]
movdqu xmmword [r13], xmm0
cmp byte [rsi + 0x128], 2
je case.0x14013fc1f.1
mov rcx, r13
mov rdx, r15
call fcn.1401eac80
test al, al
je 0x140148115
movzx eax, al
cmp eax, 2
je 0x1401482f9
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401480a8
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x38
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov rbx, rax
mov qword [rax], 0
mov byte [rax + 0x29], 2
mov byte [rax + 0x30], 5
mov bpl, 2
cmp byte [rsi + 0x128], 2
je 0x140148113
mov rax, qword [r13]
lock dec qword [rax]
jne 0x1401480ef
mov rcx, qword [r13]
call fcn.14014c020
lea r14, [rsi + 0x120]
mov rcx, r14
call fcn.1401ab590
mov rax, qword [rsi + 0x120]
lock dec qword [rax]
jne 0x140148113
mov rcx, qword [r14]
call fcn.14014d870
jmp 0x140148162
movzx ebp, byte [rsi + 0x128]
mov byte [rsi + 0x128], 2
cmp ebp, 3
je 0x1401482f9
cmp ebp, 2
je case.0x14013fc1f.1
mov rbx, qword [rsi + 0x118]
mov rax, qword [rsi + 0x120]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 0x12c]
mov dword [rsp + 0xa33], eax
mov eax, dword [rsi + 0x129]
mov dword [rsp + 0xa30], eax
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x19c3], ecx
mov dword [rsp + 0x19c0], eax
mov byte [rdi], 1
mov eax, dword [rsp + 0x19c0]
mov ecx, dword [rsp + 0x19c3]
mov dword [rsp + 0x990], eax
mov dword [rsp + 0x993], ecx
mov rcx, r13
call fcn.140133030
cmp bpl, 2
jne 0x140148309
mov r15, rbx
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x1401481ce
lock dec qword [rax]
jne 0x1401481ce
mov rcx, qword [rsi + 0x68]
mov rdx, qword [rsi + 0x70]
call fcn.14014cf70
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x1401481f3
lock dec qword [rax]
jne 0x1401481f3
mov rcx, qword [rsi + 0xf8]
mov rdx, qword [rsi + 0x100]
call fcn.14014cf70
mov rax, qword [rsi + 0x108]
test rax, rax
je 0x140148211
lock dec qword [rax]
jne 0x140148211
lea rcx, [rsi + 0x108]
call fcn.14014c490
lea rcx, [rsi + 0xc0]
call fcn.140183b80
cmp byte [rsi + 0xc0], 2
jb 0x140148250
mov rbx, qword [rsi + 0xc8]
lea rcx, [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
lea rcx, [rsi + 0xe8]
mov rax, qword [rsi + 0xd0]
mov rdx, qword [rsi + 0xd8]
mov r8, qword [rsi + 0xe0]
call qword [rax + 0x10]
mov rax, qword [rsi + 0xf0]
test rax, rax
je 0x14014829d
cmp rax, 0xffffffffffffffff
je 0x14014829d
lock dec qword [rax + 8]
jne 0x14014829d
mov r8, qword [rsi + 0xf0]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rbx, qword [rsi + 0xa0]
test rbx, rbx
je 0x1401482d8
mov rdi, qword [rsi + 0xa8]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1401482d8
cmp qword [rdi + 0x10], 0x11
jb 0x1401482c7
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsi + 0xb0]
lock dec qword [rax]
mov dil, 2
jne 0x1401482f4
mov rcx, qword [rsi + 0xb0]
call fcn.140077a90
jmp 0x140148b32
mov byte [rdi], 3
mov byte [r12 + 0x70], 3
mov al, 4
jmp 0x140148be1
mov r8b, 2
cmp byte [rsi + 0x110], 0
jne 0x140148334
mov eax, dword [rsp + 0x990]
mov ecx, dword [rsp + 0x993]
mov dword [rsp + 0x823], ecx
mov dword [rsp + 0x820], eax
mov r8d, ebp
lea rdi, [rsi + 0x108]
mov rax, qword [rsi + 0xf0]
mov qword [rsp + 0x19f0], rax
movdqu xmm0, xmmword [rsi + 0xc0]
movdqu xmm1, xmmword [rsi + 0xd0]
movups xmm2, xmmword [rsi + 0xe0]
movaps xmmword [rsp + 0x19e0], xmm2
movdqa xmmword [rsp + 0x19d0], xmm1
movdqa xmmword [rsp + 0x19c0], xmm0
mov r9, qword [rsi + 0xa0]
mov r10, qword [rsi + 0xa8]
mov rax, qword [rsi + 0xb0]
mov qword [rsp + 0xb0], rax
movzx eax, byte [rsi + 0xb8]
mov byte [rsp + 0x48], al
movzx ebp, byte [rsi + 0xb9]
lea rax, [rsi + 0xba]
movzx ecx, word [rsi + 0xbe]
mov word [rsp + 0x6c4], cx
mov ecx, dword [rsi + 0xba]
mov dword [rsp + 0x6c0], ecx
mov r14, qword [rsi + 0x108]
test r14, r14
mov byte [rsp + 0x40], r8b
je 0x1401483f8
cmp r8b, 2
jne 0x140148431
test r9, r9
je 0x140148464
mov r15, r9
mov rcx, r9
mov r13, r10
call qword [r10 + 0x18]
jmp 0x14014846c
mov ecx, dword [rsp + 0x820]
mov edx, dword [rsp + 0x823]
mov dword [rsp + 0x2953], edx
mov dword [rsp + 0x2950], ecx
mov ecx, dword [rax]
mov dword [rsp + 0x880], ecx
movzx eax, word [rax + 4]
mov word [rsp + 0x884], ax
xor r14d, r14d
jmp 0x1401487ce
movzx ecx, word [rax + 4]
mov word [rsp + 0x784], cx
mov eax, dword [rax]
mov dword [rsp + 0x780], eax
mov eax, dword [rsp + 0x820]
mov ecx, dword [rsp + 0x823]
mov dword [rsp + 0xa30], eax
mov dword [rsp + 0xa33], ecx
jmp 0x1401484d3
mov r13, r10
mov r15, r9
xor eax, eax
mov rcx, qword [rsp + 0x28]
mov r11, qword [rsp + 0xb0]
lock inc qword [r11]
jle case.0x14013fc1f.1
lock inc qword [rbx]
jle case.0x14013fc1f.1
lock inc qword [rcx + 0x1d0]
lock inc qword [rcx]
jle case.0x14013fc1f.1
mov r9, r15
mov r10, r13
movzx r8d, word [rsp + 0x6c4]
mov word [rsp + 0x784], r8w
mov r8d, dword [rsp + 0x6c0]
mov dword [rsp + 0x780], r8d
cmp bpl, 2
jne 0x140148540
mov r14, qword [rdi]
mov bpl, 2
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x2953], ecx
mov dword [rsp + 0x2950], eax
mov eax, dword [rsp + 0x780]
mov dword [rsp + 0x880], eax
movzx eax, word [rsp + 0x784]
mov word [rsp + 0x884], ax
jmp 0x140148511
pause
mov rax, qword [r14 + 8]
nop word cs:[rax + rax]
cmp rax, 0xffffffffffffffff
je 0x14014850f
test rax, rax
js case.0x14013fc1f.1
lea rcx, [rax + 1]
lock cmpxchg qword [r14 + 8], rcx
jne 0x140148520
jmp 0x1401487ce
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xa30], rbx
mov qword [rsp + 0xa38], rcx
mov byte [rsp + 0xa40], 2
mov qword [rsp + 0xa48], r9
mov qword [rsp + 0xa50], r10
mov qword [rsp + 0xa58], r11
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0xa60], al
mov byte [rsp + 0xa61], bpl
mov eax, dword [rsp + 0x6c0]
mov dword [rsp + 0xa62], eax
movzx eax, word [rsp + 0x6c4]
mov word [rsp + 0xa66], ax
lea r13, [r14 + 0x10]
mov rcx, r13
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 0x18]
test al, al
jne case.0x14013fc1f.1
movzx eax, byte [rsp + 0x19c0]
test rax, rax
mov byte [rsp + 0x30], bpl
je 0x1401485eb
cmp eax, 1
jne 0x1401485f2
xor eax, eax
jmp 0x14014867b
mov eax, dword [rsp + 0x2950]
mov ecx, dword [rsp + 0x2953]
mov dword [rsp + 0x783], ecx
mov dword [rsp + 0x780], eax
mov eax, dword [rsp + 0x880]
mov dword [rsp + 0x610], eax
movzx eax, word [rsp + 0x884]
mov word [rsp + 0x614], ax
movzx eax, byte [rsp + 0x19c0]
test rax, rax
mov byte [rsp + 0x30], bpl
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x38], r10
je 0x140148838
cmp eax, 1
jne 0x14014883f
mov al, 1
movzx ecx, byte [rsp + 0x19c1]
jmp 0x1401488cd
xor eax, eax
jmp 0x1401488cd
mov qword [rsp + 0x50], rdi
mov rdi, qword [rsp + 0x19c8]
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x140148877
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14013fc1f.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14013fc1f.1
mov r15, rax
lea rdx, [rdi + 0x18]
mov rax, qword [rdi]
mov r8, qword [rdi + 8]
mov r9, qword [rdi + 0x10]
lea rcx, [rsp + 0x2950]
call qword [rax]
movdqu xmm0, xmmword [rsp + 0x2950]
movdqu xmm1, xmmword [rsp + 0x2960]
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
mov al, 2
mov rdi, qword [rsp + 0x50]
mov byte [rsp + 0x2950], al
mov byte [rsp + 0x2951], cl
mov qword [rsp + 0x2958], r15
lea rcx, [rsp + 0x2960]
lea r13, [rsp + 0x19e8]
mov rax, qword [rsp + 0x19d0]
mov r8, qword [rsp + 0x19d8]
mov r9, qword [rsp + 0x19e0]
mov rdx, r13
call qword [rax]
mov eax, dword [rsp + 0x780]
mov ecx, dword [rsp + 0x783]
mov dword [rsp + 0x883], ecx
mov dword [rsp + 0x880], eax
mov eax, dword [rsp + 0x610]
mov dword [rsp + 0x7e0], eax
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x7e4], ax
mov r15, qword [rsp + 0x2950]
movups xmm0, xmmword [rsp + 0x2958]
movaps xmmword [rsp + 0x2e90], xmm0
movups xmm0, xmmword [rsp + 0x2968]
movaps xmmword [rsp + 0x2ea0], xmm0
mov rax, qword [rsp + 0x2978]
mov qword [rsp + 0x2eb0], rax
lea rcx, [rsp + 0x19c0]
call fcn.140183b80
cmp byte [rsp + 0x19c0], 2
jb 0x1401489da
mov rbp, rbx
mov rbx, rdi
mov rdi, r12
mov r12, qword [rsp + 0x19c8]
lea rcx, [r12 + 0x18]
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r12
mov r12, rdi
mov rdi, rbx
mov rbx, rbp
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x19d0]
mov rdx, qword [rsp + 0x19d8]
mov r8, qword [rsp + 0x19e0]
mov rcx, r13
call qword [rax + 0x10]
mov rax, qword [rsp + 0x19f0]
test rax, rax
je 0x140148a28
cmp rax, 0xffffffffffffffff
je 0x140148a28
lock dec qword [rax + 8]
jne 0x140148a28
mov r8, qword [rsp + 0x19f0]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
movdqa xmm0, xmmword [rsp + 0x2e90]
movdqa xmm1, xmmword [rsp + 0x2ea0]
movdqa xmmword [rsp + 0xa30], xmm0
movdqa xmmword [rsp + 0xa40], xmm1
mov rax, qword [rsp + 0x2eb0]
mov qword [rsp + 0xa50], rax
mov eax, dword [rsp + 0x880]
mov ecx, dword [rsp + 0x883]
mov dword [rsp + 0x19c0], eax
mov dword [rsp + 0x19c3], ecx
mov eax, dword [rsp + 0x7e0]
mov dword [rsp + 0x610], eax
movzx eax, word [rsp + 0x7e4]
mov word [rsp + 0x614], ax
mov eax, dword [rsp + 0x780]
mov ecx, dword [rsp + 0x783]
add byte [rcx + 0x2953248c], cl
add byte [rax], al
add byte [rcx + 0x2953248c], cl
add byte [rax], al
mov dword [rsp + 0x2950], eax
mov rax, qword [rsi + 0x68]
test rax, rax
movzx r13d, byte [rsp + 0x30]
movzx ebp, byte [rsp + 0x48]
je 0x140148ad9
lock dec qword [rax]
jne 0x140148ad9
mov rcx, qword [rsi + 0x68]
mov rdx, qword [rsi + 0x70]
call fcn.14014cf70
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x140148afe
lock dec qword [rax]
jne 0x140148afe
mov rcx, qword [rsi + 0xf8]
mov rdx, qword [rsi + 0x100]
call fcn.14014cf70
add byte [rax], r8b
add byte [rax], r8b
mov rax, qword [rdi]
test rax, rax
je 0x140148b14
lock dec qword [rax]
jne 0x140148b14
add byte [rcx], dh
dec dword [rax - 0x75]
and al, 0x28
xor edi, edi
mov rcx, qword [rsp + 0x28]
movzx edx, byte [rsp + 0x40]
mov r8, qword [rsp + 0xb0]
and al, 0xb0
add byte [rax], al
add byte [rbx + rcx*4 + 0x4c], cl
and al, 0x58
and al, 0xb0
add byte [rax], al
add byte [rbx + rcx*4 + 0x4c], cl
and al, 0x58
mov r10, qword [rsp + 0x38]
mov qword [r12], r15
mov dword [rsp], edi
movdqa xmm0, xmmword [rsp + 0xa30]
xor byte [rdx], cl
add byte [rax], al
movdqa xmm1, xmmword [rsp + 0xa40]
movdqu xmmword [r12 + 8], xmm0
and al, 0x40
or al, byte [rax]
add bl, dh
movq qword [r12 + 8], mm0
movdqu xmmword [r12 + 0x18], xmm1
and al, 0x18
mov rax, qword [rsp + 0xa50]
mov qword [r12 + 0x28], rax
mov qword [r12 + 0x30], rbx
mov qword [r12 + 0x38], rcx
and al, 0x38
and al, 0x38
mov byte [r12 + 0x40], dl
mov eax, dword [rsp + 0x19c0]
mov ecx, dword [rsp + 0x19c3]
and al, 0xc3
sbb dword [rax], eax
add byte [rcx - 0x77], al
and al, 0x41
and al, 0x41
and al, 0xc3
sbb dword [rax], eax
add byte [rcx - 0x77], al
and al, 0x41
and al, 0x41
and al, 0x41
mov dword [r12 + 0x44], ecx
mov qword [r12 + 0x48], r9
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x48], ecx
mov qword [r12 + 0x50], r10
push rax
mov qword [r12 + 0x58], r8
mov byte [r12 + 0x60], bpl
insb byte [rdi], dx
and al, 0x60
insb byte [rdi], dx
and al, 0x60
mov byte [r12 + 0x61], r13b
mov eax, dword [rsp + 0x610]
mov dword [r12 + 0x62], eax
mov dword [rsp + 0x62], eax
mov dword [rsp + 0x62], eax
movzx eax, word [rsp + 0x614]
mov word [r12 + 0x66], ax
and al, 0x66
and al, 0x66
mov qword [r12 + 0x68], r14
mov byte [r12 + 0x70], dil
mov byte [rsp + 0x70], bh
mov byte [rsp + 0x70], bh
mov eax, dword [rsp + 0x2950]
mov ecx, dword [rsp + 0x2953]
mov dword [r12 + 0x74], ecx
mov dword [r12 + 0x71], eax
mov dword [rsp + 0x71], eax
mov dword [rsp + 0x71], eax
mov al, 1
mov byte [rsi + 0x111], al
adc dword [rcx], eax
add byte [rax], al
movaps xmm6, xmmword [rsp + 0x33b0]
mov al, 0x33
add byte [rax], al
add rsp, 0x33c8
pop rbx
pop rbp
xor eax, dword [rax]
add byte [rbx + 0x5d], bl
pop rdi
pop rsi
pop r12
pop rsp
pop rsp
pop r13
pop r14
pop r15
ret
ud2
lea rcx, [rsp + 0x19c0]
call fcn.140161790
add dword [rax], eax
add dword [rax], eax
ud2
lea rcx, [rsp + 0xa30]
mov rsi, rdx
call fcn.140161790
dec qword [rsi]
ud2
and al, 0xc0
sbb dword [rax], eax
add al, ch
sti
cmpsd dword [rsi], dword [rdi]
add dword [rax], eax
ud2
mov word [rax + rsi], fs
or al, byte [rax]
add al, ch
invalid
ud2
mov esi, ecx
mov esp, dword [rsi + 0x70]
invalid
sbb byte [rax], al
mov eax, dword [rsi + 0x18]
or byte [rbp + 9], dh
dec dword [rcx - 0x75]
jle case.0x14013c3c6.39
mov rbx, qword [r14 + 0x30]
invalid
inc edi
push qword [rsp + rsi + 0x4a]
mov eax, dword [rbx + rdi*8]
out dx, al
sti
jrcxz 0x14014ba2d
invalid
dec edi
invalid
dec qword [rax]
out dx, al
in al, 0x49
cmp dword [rsi + 0x38], 0
xlatb
sbb byte [rax], al
jg case.0x14014bade.2
or al, byte [rax]
push qword [rbp + riz - 0x10]
dec qword [r8 + 8]
sub byte [rbx + 0x5d], bl
pop rsi
pop rsi
nop dword [rax + rax]
add ebx, 8
dec dword [rax - 0x75]
add esi, eax
dec qword [rax]
invalid
test byte [rax], 0
or byte [rax], al
ret
clc
invalid
or eax, dword [rax]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
sbb byte [r8 - 0x7d], cl
clc
add dword [rbx + rsi + 0x48], esi
test eax, eax
jne case.0x14014bade.2
mov rax, qword [rcx + 0x20]
mov rdx, qword [rcx + 0x28]
mov rax, qword [rax + 0x10]
mov r8, qword [rcx + 0x30]
add rcx, 0x38
jmp rax
and byte [rax - 0x75], cl
push rcx
sub byte [rax - 0x75], cl
adc byte [rbx + rcx*4 + 0x41], cl
xor byte [rax - 0x7d], cl
sar dword [rax], 0x48
jmp rax
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
dec r14
je 0x14014cd34
test r13w, r13w
jne 0x14014ccb1
nop dword [rax]
movdqa xmm0, xmmword [r15]
pmovmskb r13d, xmm0
add r12, 0xfffffffffffffb00
add r15, 0x10
cmp r13d, 0xffff
je 0x14014cc90
not r13d
tzcnt eax, r13d
neg rax
lea rax, [rax + rax*4]
shl rax, 4
lea rbp, [r12 + rax]
cmp byte [r12 + rax - 0x50], 2
jb 0x14014ccf4
mov rbx, qword [rbp - 0x48]
lea rcx, [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
lea rcx, [rbp - 0x28]
mov rax, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x30]
call qword [rax + 0x10]
lea rbx, [rbp - 0x20]
mov rcx, rbx
enter 0xffffffffffff8b4c, 0x45
sar bh, 1
push rax
adc byte [rax - 0x73], cl
pop rbp
loopne 0x14014cd54
mov ecx, ebx
call fcn.1401675a0
cmp qword [rbp - 0x18], 0
je 0x14014cc70
test al, 1
add byte [rax - 0x7d], cl
jge 0x14014ccff
add byte [rdi], cl
test byte [rdx - 1], dl
invalid
mov r8, qword [rbx]
mov rcx, qword [0x1402d9150]
add ecx, dword [rax - 0x75]
or eax, 0x18c428
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14014cc70
lea rax, [rsi + 1]
mov ecx, 0x50
mul rcx
add rsi, rax
cmp rsi, 0xffffffffffffffef
invalid
out dx, eax
mov r14, qword [rsp + 0x20]
je 0x14014cd62
invalid
sub rdi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
or al, byte [rax]
invalid
clc
ret
or al, byte [rax]
mov rsi, qword [r14 + 0xc8]
enter 0, 0
test rsi, rsi
je 0x14014cdbf
mov bl, 1
mov al, 1
xchg byte [rsi + 0x40], al
mov al, 1
xchg byte [rsi + 0x20], al
test al, al
jne 0x14014cd9b
mov rax, qword [rsi + 0x10]
mov rcx, qword [rsi + 0x18]
sbb byte [rax - 0x39], cl
adc byte [rax], r8b
add byte [rax], al
add byte [rcx], dh
rol byte [rsi - 0x7ab7dfaa], cl
invalid
je 0x14014cd9b
sbb byte [rax - 0x39], cl
adc byte [rax], r8b
add byte [rax], al
add byte [rcx], dh
rol byte [rsi - 0x7ab7dfaa], cl
sal byte [rbx + rax - 1], 0x50
or byte [rsi - 0x247bc7a2], al
call qword [rax + 8]
xchg byte [rsi + 0x38], bl
test bl, bl
je 0x14014ce2f
add byte [rcx - 0x75], cl
xchg al, cl
add byte [rax], al
add al, dh
dec qword [rax]
invalid
mov rax, qword [r14 + 0xc8]
lock dec qword [rax]
invalid
or byte [rbp + 0xc], dh
jne 0x14014cdbf
mov rcx, qword [r14 + 0xc8]
call fcn.140062b30
mov rax, qword [r14 + 0x20]
mov eax, dword [rsi + 0x20]
test rax, rax
je 0x14014cddb
lock dec qword [rax]
jne 0x14014cddb
mov rcx, qword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
sub al, ch
xchg ebp, eax
add dword [rax], eax
invalid
and byte [rcx - 0x75], r9b
push rsi
sub al, ch
xchg ebp, eax
add dword [rax], eax
add byte [rax - 0x75], cl
and al, 0x50
mov rax, qword [rsp + 0x50]
mov r8, qword [rax]
cmp r8, 0xffffffffffffffff
clc
invalid
je 0x14014ce16
clc
push qword [rbp + rbp - 0x10]
dec qword [r8 + 8]
lock dec qword [r8 + 8]
jne 0x14014ce16
mov rcx, qword [0x1402d9150]
sbb byte [rax], al
xor edx, edx
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
invalid
mov byte [rax], al
add byte [rax], al
invalid
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rdi
pop rdi
jmp sub.kernel32.dll_HeapFree
add byte [rdi], cl
sub byte [rsp + 0x70], dh
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsi + 0x28]
mov eax, dword [rsi + 0x28]
mov rcx, qword [rsi + 0x30]
mov qword [rsi + 0x28], 0
test rax, rax
test eax, eax
xor byte [rax - 0x39], r9b
sub byte [rax], r8b
add byte [rax], al
add byte [rax - 0x7b], cl
test eax, eax
je 0x14014ce47
invalid
push rax
test eax, eax
je 0x14014ce47
call qword [rax + 0x18]
push rax
sbb byte [rcx], dh
rol byte [rsi - 0x74b6c7ba], 0x86
enter 0, 0
add byte [rax], al
invalid
xor eax, eax
xchg byte [rsi + 0x38], al
mov rax, qword [r14 + 0xc8]
add byte [rax], al
invalid
add byte [rax], al
add al, dh
dec qword [rax]
dec dword [rax]
lock dec qword [rax]
dec dword [rax]
je 0x14014cdb3
jmp 0x14014cdbf
invalid
or esp, dword [rsi + 0x2e]
nop dword [rax + rax]
test byte [rax], al
add byte [rax], al
add byte [rax], al
test byte [rax], al
add byte [rax], al
add byte [rax], al
test byte [rbx + 0x48000000], bl
mov edi, dword [rsi + 0x20]
wait
add byte [rax], al
add byte [rax - 0x75], cl
jle 0x14014cead
add dword [rbx], ecx
add bl, ch
and ah, byte [rsi + 0xf]
invalid
xchg ebp, ecx
add dword [rax], eax
nop dword [rax]
invalid
add byte [rax], al
add byte [rax - 0x7f], cl
invalid
xor byte [rcx], al
add byte [rax], al
loopne 0x14014cf0f
loopne 0x14014cf0f
cmp eax, 6
mov eax, dword [rdi - 0x10]
mov rdx, qword [rdi - 8]
mov r8, qword [rdi]
jmp 0x14014cf04
call qword [rax + 0x10]
jmp 0x14014ceb0
movabs al, byte [0x350d8b48f0478b4c]
ret 0x18
dec qword [rsi + 8]
sub byte [rbx + 0x5f], bl
add byte [rax + 0x28c48348], dl
sub esp, 0x20
xlatb
dec dword [rax - 0x7d]
loopne 0x14014cf79
add ecx, eax
cmp esi, 0xffffffff
dec qword [rsi + 8]
cmp ebx, 9
add byte [rax], al
add byte [rax + 0xf], cl
ret
add byte [rax], al
clc
adc dword [rdx + 4], esi
mov esi, dword [rsi - 8]
jbe case.0x14013d4b6.29
ror byte [rcx - 0x77], cl
invalid
push rdi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rbx, qword [rcx + 0x30]
test rbx, rbx
je 0x14014d07f
mov rdi, qword [rsi + 0x20]
add rdi, 0x18
lea r14, [0x1401fd020]
add bl, ch
invalid
add bl, ch
lea rcx, es:[rdi + 0x18]
mov rax, qword [rdi]
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
call qword [rax + 0x10]
nop dword [rax + rax]
add rdi, 0x130
dec rbx
je 0x14014d07f
cmp dword [rdi - 0x18], 2
je 0x14014d030
movzx eax, byte [rdi - 8]
cmp rax, 6
ja 0x14014d030
movsxd rax, dword [r14 + rax*4]
add rax, r14
jmp rax
cmp qword [rsi + 0x28], 0
je 0x14014d098
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp rsi, 0xffffffffffffffff
je 0x14014d0bf
lock dec qword [rsi + 8]
jne 0x14014d0bf
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sub.kernel32.dll_HeapFree
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
mov rax, qword [rsp + 0x8e8]
movzx eax, byte [rax]
cmp rax, 1
jne 0x140152d9e
mov r14d, edx
mov esi, dword [r12 + 0x3fc]
movzx ebx, byte [r12 + 0x3f9]
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x130]
call fcn.1401711d0
test rax, rax
jne 0x140160139
test rdx, rdx
jne 0x14015fe95
mov rcx, qword [r12 + 0x188]
mov rax, qword [r12 + 0x190]
mov rdx, qword [rsp + 0x130]
call qword [rax + 0x30]
test rax, rax
jne 0x140160139
test rdx, rdx
jne 0x14015fe95
mov byte [r12 + 0x3f8], 2
mov byte [r12 + 0x3f9], bl
mov dword [r12 + 0x3fc], esi
mov edx, r14d
jmp 0x140152d00
test rax, rax
jne 0x14015feb9
mov dword [rsp + 0x58], edx
mov qword [rsp + 0x3a0], rdi
mov rdi, qword [r12 + 0x400]
lea r14, [rdi + 0x10]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
jne 0x140160412
cmp dword [rdi + 0x98], 0
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0xa8]
je 0x14015319c
mov qword [rsp + 0x200], 0
lea rbx, [rsp + 0x200]
mov rcx, rbx
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x1401603d5
mov rsi, qword [rsp + 0x200]
mov r8, qword [0x1402d9130]
test r8, r8
jne 0x140152e59
mov qword [rsp + 0x200], 0
mov rcx, rbx
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1401603d5
mov r8, qword [rsp + 0x200]
mov qword [0x1402d9130], r8
test r8, r8
je 0x140160412
mov rax, rsi
or rax, r8
shr rax, 0x20
je 0x140152e72
mov rax, rsi
xor edx, edx
div r8
mov rcx, rax
jmp 0x140152e7b
mov eax, esi
xor edx, edx
div r8d
mov ecx, eax
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, r8
shr rdx, 0x20
mov qword [rsp + 0x70], r15
mov qword [rsp + 0xc8], r14
je 0x140152ea2
xor edx, edx
div r8
jmp 0x140152ea7
xor edx, edx
div r8d
lea rdx, [rdi + 0x1b8]
mov qword [rsp + 0x1c8], rdx
lea rdx, [rdi + 0x170]
mov qword [rsp + 0x78], rdx
imul rsi, rcx, 0x3b9aca00
add rsi, rax
mov rax, rsi
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
mov rbp, rdx
lea r15, [rdi + 0x98]
shr rbp, 0xb
imul eax, ebp, 0x3b9aca00
sub esi, eax
mov rax, qword [rdi + 0x30]
mov qword [rsp + 0x38], rax
mov eax, dword [rdi + 0x38]
mov dword [rsp + 0x50], eax
lea eax, [rsi + 0x3b9aca00]
mov dword [rsp + 0x128], eax
mov r12d, dword [rsp + 0x68]
mov ebx, dword [rsp + 0x15c]
cmp dword [r15], 0
je 0x140153171
nop dword [rax]
mov ecx, dword [rdi + 0x9c]
cmp qword [rdi + 0x1c8], rcx
jbe 0x140160412
mov dword [rsp + 0x15c], ebx
mov dword [rsp + 0x68], r12d
mov r12, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xa8]
mov r14, qword [rsp + 0xc8]
mov rcx, r14
call fcn.1401f2d54
mov edx, dword [rsp + 0x58]
mov dword [rsp + 0x58], edx
mov rax, qword [rsp + 0x688]
mov rdi, qword [rax]
mov rcx, qword [rsp + 0x988]
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqa xmmword [rsp + 0x6a0], xmm1
movdqa xmmword [rsp + 0x690], xmm0
mov qword [rax], 0
test rdi, rdi
je 0x140153310
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x500], rdi
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
lea rax, [rsp + 0x501]
movdqu xmmword [rax + 0x17], xmm1
movdqu xmmword [rax + 7], xmm0
cmp dword [r12 + 0x100], 4
jne 0x14015323a
mov rax, qword [r12 + 0x158]
sub rax, qword [r12 + 0x150]
cmp rax, qword [r12 + 0x178]
jae 0x140153295
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x130]
call fcn.1401711d0
mov rsi, rdx
mov edx, dword [rsp + 0x58]
test rax, rax
jne 0x14015d25a
test rsi, rsi
jne 0x14015d390
cmp dword [r12 + 0x100], 4
jne 0x14015d25a
mov rax, qword [r12 + 0x158]
sub rax, qword [r12 + 0x150]
cmp rax, qword [r12 + 0x178]
jb 0x14015d25a
mov eax, dword [rsp + 0x524]
mov dword [rsp + 0x810], eax
mov qword [rsp + 0x208], rdi
movdqa xmm0, xmmword [rsp + 0x690]
movdqa xmm1, xmmword [rsp + 0x6a0]
lea rax, [rsp + 0x210]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov byte [rsp + 0x200], 6
mov rcx, qword [rsp + 0xe0]
lea rdx, [rsp + 0x200]
call fcn.14016f7c0
cmp al, 0xc
jne 0x140160412
mov rdi, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xa8]
jmp 0x140153343
cmp byte [r12 + 0x3d4], 0
je 0x140153429
cmp dword [r12 + 0x3c8], 0
mov rdi, qword [rsp + 0xb0]
je 0x140153341
mov eax, dword [r12 + 0x3d0]
mov dword [rsp + 0x810], eax
je 0x14015335d
cmp qword [r12 + 0x3a0], 0
jne 0x14015335d
cmp byte [r12 + 0x3d4], 0
jne 0x14015d371
mov rdx, qword [r12 + 0x378]
cmp rdx, 2
je 0x14015339d
mov rcx, qword [r12 + 0x380]
mov rax, qword [r12 + 0x388]
test rdx, rdx
je 0x140153392
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0x980]
call qword [rax + 0x60]
mov qword [rsp + 0x690], 2
mov qword [rsp + 0x6b0], 0
movq xmm12, qword [r12 + 0x3e1]
test byte [r12 + 0x3e0], 1
mov byte [r12 + 0x3e0], 0
mov qword [rsp + 0x70], r15
je 0x1401534a7
cmp dword [r12 + 0x100], 4
jne 0x140153401
mov rdi, qword [rsp + 0xb0]
mov rdx, qword [r12 + 0x378]
cmp rdx, 2
jne 0x14015336b
jmp 0x14015339d
movzx eax, byte [r12 + 0x3e9]
test eax, eax
je 0x1401535bc
cmp byte [r12 + 0x1c1], 0
je 0x1401544a0
cmp byte [r12 + 0x1c0], 0
je 0x1401543b0
lea rcx, [rsp + 0x200]
mov rdx, r12
mov r8, qword [rsp + 0x4b0]
call fcn.1401ded70
cmp qword [rsp + 0x200], 0
mov rbx, qword [rsp + 0x208]
je 0x1401543fb
mov byte [r12 + 0x1c2], 1
mov eax, 1
xor edi, edi
jmp 0x140154545
lea rcx, [rsp + 0x200]
mov rdx, r12
mov r8, qword [rsp + 0x4b0]
call fcn.1401ded70
cmp qword [rsp + 0x200], 0
mov rax, qword [rsp + 0x208]
je 0x140154466
add byte [rax], al
mov byte [r12 + 0x1c2], 1
xor edi, edi
mov rbx, rax
test rdi, rdi
jne 0x140154557
jmp 0x140157a92
mov rcx, qword [rsp + 0x210]
lea rax, [rsp + 0x218]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x500], xmm0
test byte [rax + rax], ah
add eax, 0x85480000
fisttp dword [rdi]
invalid
invalid
add byte [rax], al
invalid
test byte [rax + rax], ah
add eax, 0x85480000
fisttp dword [rdi]
test byte [rbp + 0xf000000], bh
sub byte [rsp + 0x500], al
movaps xmm0, xmmword [rsp + 0x500]
movaps xmmword [rsp + 0x990], xmm0
movaps xmmword [rsp + 0x200], xmm0
mov eax, 1
mov qword [rsp + 0xfe8], rcx
mov rsi, rcx
mov rdi, rbx
movdqa xmm0, xmmword [rsp + 0x200]
add al, byte [rax]
add byte [rsi + 0xf], ah
jg 0x1401543dd
and al, 0xd0
invalid
add byte [rax], al
mov rbx, rsi
jmp 0x140154545
add al, byte [rax]
add byte [rsi + 0xf], ah
jg 0x1401543dd
and al, 0xd0
invalid
mov rcx, qword [rsp + 0x210]
lea rdx, [rsp + 0x218]
movdqu xmm0, xmmword [rdx]
movdqa xmmword [rsp + 0x500], xmm0
test rax, rax
jne 0x140157a71
mov byte [r12 + 0x1c1], 0
nop word cs:[rax + rax]
mov rbp, rsi
mov rsi, qword [r12 + 0x1a8]
cmp qword [r12 + 0x1b0], rsi
jne 0x1401544cf
mov edx, 1
mov rcx, qword [rsp + 0x4b0]
call fcn.1400381c0
mov rsi, qword [r12 + 0x1a8]
cmp rsi, 0xffffffffffffffff
jne 0x1401578b0
jmp case.0x140154715.19
cmp qword [r12 + 0x1a8], 0
je 0x140154505
mov r8d, 0x19
mov cl, 0x27
lea rdx, [0x14029e8fe]
lea edx, [0x14029e8fe]
lea edx, [0x14029e8fe]
call fcn.14016d3b0
mov rbx, rax
jmp 0x140154395
invalid
invalid
invalid
invalid
movaps xmm0, xmmword [rsp + 0x690]
movaps xmmword [rsp + 0x990], xmm0
or dword [rax], eax
add byte [rcx - 0x3a], al
test byte [rcx + rax*8], ah
add dword [rax], eax
add byte [rax], al
or dword [rax], eax
add byte [rcx - 0x3a], al
test byte [rcx + rax*8], ah
add dword [rax], eax
add byte [rax], al
xor ebx, ebx
xor eax, eax
jmp 0x140154449
nop word [rax + rax]
mov byte [r12 + 0x1c1], 0
test byte [rcx + rax*8], ah
add dword [rax], eax
add byte [rax], al
xor ecx, ecx
xor eax, eax
mov byte [r12 + 0x1c2], cl
test rax, rax
je 0x140157bee
test rdi, rdi
je 0x140157a92
test byte [rbx], bh
invalid
add byte [rax], al
test byte [rbx], bh
xor eax, 0xf660000
outsd dx, dword [rsi]
test byte [rax + rdx*8], ah
invalid
movdqa xmm0, xmmword [rsp + 0xed0]
lea rax, [rsp + 0x358]
add bl, dh
movq qword [rax], mm0
test byte [rax + rbx*2], ah
add eax, dword [rax]
add bl, dh
movq qword [rax], mm0
mov r14, qword [r12 + 0x370]
add byte [rax], al
mov qword [rsp + 0x348], rdi
mov qword [rsp + 0x350], rbx
mov qword [rsp + 0xaf0], 2
mov qword [rsp + 0xb10], 0
cmp rbx, 5
jb 0x140160412
lea rax, [rbx - 5]
cmp rax, 3
clc
add ecx, dword [rdi]
xchg byte [rsi - 0x42], bl
add byte [rax], al
clc
add ecx, dword [rdi]
xchg byte [rsi - 0x42], bl
add byte [rax], al
movzx eax, byte [rdi + 3]
cmp rax, 9
mov qword [rsp + 0xa8], rsi
ja case.default.0x1401545d8
lea rdx, [0x1401fd03c]
movsxd rcx, dword [rdx + rax*4]
add rcx, rdx
jmp rcx
mov rbp, r15
xor ecx, ecx
mov qword [rsp + 0x48], rbx
pop rsp
and al, 0x48
mov r15d, dword [rdi + 5]
mov qword [rsp + 0xb0], rdi
mov al, 0
add byte [rax], al
mov al, 0
add byte [rax], al
movzx edi, byte [rdi + 4]
mov rdx, qword [rsp + 0x3f0]
lock add eax, dword [rax]
add byte [rax - 0x75], cl
xor cl, byte [rax - 0x7d]
inc byte [rdx]
lock add eax, dword [rax]
add byte [rax - 0x75], cl
xor cl, byte [rax - 0x7d]
inc byte [rdx]
je 0x1401546f0
add byte [rax], al
test cl, cl
jne 0x1401546f0
mov bpl, 0xa
mov r11d, 1
add byte [rax], al
add byte [rax + 0x24448901], dh
pop rsp
add byte [rax], al
add byte [rax + 0x24448901], dh
pop rsp
xor r10d, r10d
xor edx, edx
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov r9b, 1
mov cl, 1
mov cl, 1
lea r8, [0x140223388]
lea r14, str.combase.dll
mov rsi, qword [rsp + 0x360]
test sil, 1
test dh, 1
jne 0x14015766a
test dword [rsi], ebx
xor byte [rax], al
add al, dh
dec qword [rsi + 0x20]
lock dec qword [rsi + 0x20]
jne 0x1401576d0
mov qword [rsp + 0xd0], r14
mov qword [rsp + 0x98], r8
mov r13d, ecx
mov r14d, r9d
mov r12d, edi
mov edi, ebx
mov ebx, ebp
mov ebp, r11d
mov r15d, r10d
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140154696
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
sbb byte [rax], al
invalid
sbb byte [rax], al
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
or eax, 0x184ab3
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movzx esi, byte [rsp + 0x47]
mov dh, 0x74
and al, 0x47
mov dh, 0x74
and al, 0x47
mov edx, dword [rsp + 0x1a4]
mov r10d, r15d
mov r11d, ebp
jmp 0x140154643
fisttp qword [rcx - 0x1876bb05]
mov r9d, r14d
mov ecx, esi
jmp 0x140154643
mov ecx, esi
mov ecx, r13d
mov r8, qword [rsp + 0x98]
mov eax, dword [rsp + 0x98]
mov eax, dword [rsp + 0x98]
add byte [rax], al
mov r14, qword [rsp + 0xd0]
cmp bpl, 0xa
std
or cl, byte [rdi]
test dword [rsi], eax
xor byte [rax], al
invalid
std
or cl, byte [rdi]
test dword [rsi], eax
xor byte [rax], al
add cl, ch
and esi, dword [0x1a67b46e7]
add byte [rsi + 0x66], ah
jmp 0x140157c08
add byte [rsi + 0x66], ah
nop dword cs:[rax + rax]
add byte [rax], al
add byte [rax], al
and r15d, 0xffffff7f
mov ecx, r15d
mov ecx, edi
mov ecx, edi
bswap ecx
mov dword [rsp + 0x38], ecx
movzx ebx, dil
movzx ebx, bh
movzx ebx, bh
movzx eax, al
lea rcx, [0x1401fd064]
push rsi
mov dword [rdx], ecx
or al, byte [rax]
lea ecx, [0x1401fd064]
push rsi
mov dword [rdx], ecx
or al, byte [rax]
movsxd rax, dword [rcx + rax*4]
or al, byte [rax]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
invalid
loopne 0x140154759
mov r8d, 9
mov eax, 9
lea rcx, [rsp + 0x200]
add byte [rdx], al
add byte [rax], al
invalid
add byte [rax - 0x73], cl
xchg esp, eax
and al, 0x48
lea rdx, [rsp + 0x348]
call fcn.140037fe0
mov rsi, qword [rsp + 0x218]
add eax, dword [rax]
add al, ch
scasb al, byte [rdi]
cmp dh, ch
dec dword [rax - 0x75]
mov ah, 0x24
sbb byte [rdx], al
add byte [rax], al
test sil, 1
jne 0x140154b60
add al, 0
invalid
add al, 0
add al, dh
dec qword [rsi + 0x20]
lock dec qword [rsi + 0x20]
mov edx, dword [rsp + 0x1f4]
jne 0x140154b9e
xchg esp, eax
and al, 0xf4
hlt
add dword [rax], eax
add byte [rdi], cl
test dword [rax + 4], ecx
add byte [rax], al
hlt
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140154b86
and byte [rax - 0x7d], cl
jle 0x140154766
add byte [rdi], cl
test byte [rcx], ah
add al, 0
add byte [rbx + rcx*4 + 6], cl
invalid
mov r8, qword [rsi]
mov eax, dword [rsi]
invalid
mov rcx, qword [0x1402d9150]
or eax, 0x1849e1
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140154b86
add byte [rdi], cl
invalid
mov rbp, r15
mov cl, 1
jmp 0x1401545df
invalid
invalid
invalid
invalid
nop word [rax + rax]
invalid
mov rbp, r15
xor ecx, ecx
mov al, 0xa
jmp 0x1401545df
cmp qword [rsp + 0x48], 9
jb 0x140160412
invalid
add byte [rbp - 0x7b], al
inc dword [rbx + rcx*4 - 0x64]
and al, 0x8c
add dword [rax], eax
add byte [rdi], cl
test byte [rdi + 7], bh
add byte [rax], al
test r15d, r15d
test edi, edi
mov r11d, dword [rsp + 0x18c]
je 0x140154f38
and r11d, 0xffffff00
or r11d, 0x12
mov dword [rsp + 0x18c], r11d
jmp 0x140156fc1
and al, 0x8c
add dword [rax], eax
add cl, ch
invalid
mov rax, qword [rsp + 0x3f0]
add byte [rax], al
mov qword [rax], 2
cmp esi, 2
jne 0x140154ac9
test eax, esp
add al, byte [rax]
add byte [rax], al
test eax, esp
add al, byte [rax]
add byte [rax], al
mov byte [rsp + 0x50], 0xa
xor r10d, r10d
mov edx, 1
add byte [rax], al
mov byte [rsp + 0x50], 0xa
xor r10d, r10d
mov edx, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r11d, r11d
xor edi, edi
xor r9d, r9d
mov r8b, 1
lea rcx, [0x140223388]
lea rbp, str.combase.dll
jmp 0x140157622
mov r11d, 1
xor r10d, r10d
test r15d, r15d
test edi, edi
test edi, edi
je 0x140154f18
mov rbx, qword [rsp + 0x48]
cmp rbx, 9
mov edx, dword [rsp + 0x80c]
xchg esp, eax
and al, 0xc
or byte [rax], al
invalid
or dword [rbx + 0x80c2494], ecx
add byte [rax], al
xchg esp, eax
and al, 0xc
or byte [rax], al
add byte [rax - 0x75], cl
mov ah, 0x24
test al, 0
add byte [rax], al
mov rsi, qword [rsp + 0xa8]
mov r8d, dword [rsp + 0x68]
jb 0x140160412
push 0xffffffffbbc3820f
add byte [rax], al
cmp rbx, 0xe
mov rcx, qword [rsp + 0x8e0]
and al, 0xe0
or byte [rax], al
add byte [rax - 0x75], cl
mov esp, 0xb024
add byte [rdi], cl
test al, bl
or byte [rax], al
invalid
and al, 0xe0
or byte [rax], al
add byte [rax - 0x75], cl
mov esp, 0xb024
add byte [rdi], cl
test al, bl
or byte [rax], al
add byte [rcx - 0xff1f], al
invalid
invalid
inc dword [rbx + 0x2be910c9]
or dword [rax], eax
and ecx, 0xffffff00
or ecx, 0x10
jmp 0x1401551a2
invalid
invalid
add byte [rcx - 0x48], al
or dword [rax], eax
add byte [rax], al
invalid
mov r8d, 9
add byte [rax], al
add byte [rax - 0x73], cl
mov word [rax + rax], fs
add al, byte [rax]
add byte [rax - 0x73], cl
xchg esp, eax
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x348]
and al, 0x48
add eax, dword [rax]
add al, ch
invalid
invalid
out dx, al
dec dword [rax - 0x75]
mov ah, 0x24
sbb byte [rdx], al
add byte [rax], al
test sil, 1
jne 0x140154c8a
and al, 0x48
add eax, dword [rax]
add rax, qword [rax]
add al, ch
invalid
mov byte [rcx], 0xf
test esi, esp
add eax, dword [rax]
add al, dh
dec qword [rsi + 0x20]
lock dec qword [rsi + 0x20]
jne 0x140154cba
add al, 0
add byte [rax - 0x75], cl
and byte [rax - 0x7d], r9b
jle 0x1401548bf
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140154ca9
jmp 0x1401548bf
add byte [rax], al
add byte [rdi], cl
test bl, ch
jmp 0x1401548bf
add byte [rax], al
mov r8, qword [rsi]
jmp 0x1401548bf
mov r8, qword [rsi]
mov eax, dword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
shr al, cl
add eax, 0xe90009e4
invalid
add eax, dword [rax]
invalid
shr al, cl
add eax, 0xe90009e4
invalid
mov rbx, qword [rsp + 0x48]
cmp rbx, 9
jb 0x140160412
cmp rbx, 0xd
je 0x140154f81
xchg esp, eax
invalid
add byte [rax], al
xchg esp, eax
invalid
mov byte [rsp + 0x50], 0xa
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r10d, r10d
add dword [rcx + 0x455c2444], ecx
xor edx, edx
jmp 0x140155250
mov rbx, qword [rsp + 0x48]
and al, 0x48
cmp rbx, 9
jb 0x140160412
lea rax, [rbx - 9]
cmp rax, 7
ja 0x140154e30
mov byte [rsp + 0xcd8], 0xc
mov qword [rsp + 0xcd0], 0
add byte [rax], al
or al, 0x48
mov dword [rsp + 0xcd0], 0
jmp 0x140156fc1
mov r8d, 9
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x348]
call fcn.140037fe0
mov rsi, qword [rsp + 0x218]
and al, 0x18
add al, byte [rax]
add byte [rax - 0xa], al
mov byte [rcx], 0xf
test dword [rax + 4], ebx
add byte [rax], al
invalid
and al, 0x18
add al, byte [rax]
add byte [rax - 0xa], al
mov byte [rcx], 0xf
test dword [rax + 4], ebx
add byte [rax], al
invalid
add al, dh
dec qword [rsi + 0x20]
lock dec qword [rsi + 0x20]
jne 0x140154df1
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140154de0
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
or eax, 0x1847c3
or eax, 0x1847c3
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140154de0
add byte [rax - 0x75], cl
pop rsp
and al, 0x48
mov rbx, qword [rsp + 0x48]
mov ebx, dword [rsp + 0x48]
cmp rbx, 9
jb 0x140160412
xor r10d, r10d
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
test r15d, r15d
jne 0x140154a60
cmp rbx, 0x11
jne 0x140154a60
and dil, 1
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rax + 9]
movq xmm0, rcx
psrlq xmm0, 0x10
movd ebp, xmm0
mov qword [rsp + 0x1d0], rcx
shr rcx, 0x30
mov qword [rsp + 0x98], rcx
mov cl, 1
mov dword [rsp + 0x5c], ecx
mov r14b, 5
mov qword [rsp + 0xd8], rcx
mov byte [rsp + 0x17f], dil
mov rdi, rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rsi, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x70]
jmp 0x140156d39
mov rbx, qword [rsp + 0x48]
cmp rbx, 9
jb 0x140160412
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r10d, r10d
cmp rbx, 0xd
je 0x140154fd1
mov byte [rsp + 0x50], 0xa
jmp 0x140155250
mov byte [rsp + 0x50], 9
mov r10d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov rax, qword [rsp + 0x98]
mov r9d, eax
mov r8, qword [rsp + 0x108]
mov rbp, qword [rsp + 0x148]
mov rax, qword [rsp + 0xd8]
mov r11d, eax
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
jne 0x140157009
jmp 0x140157650
mov r8d, 0x138
lea rcx, [rsp + 0x508]
mov rdx, qword [rsp + 0x680]
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x500], rsi
xor eax, eax
test rsi, rsi
sete al
mov ecx, dword [rsp + 0x38]
cmp dword [rsp + rax*8 + 0x610], ecx
jne 0x14015754c
mov rdi, qword [rsp + 0x628]
test rdi, rdi
je 0x1401555b4
cmp byte [rsp + 0x608], 0
je 0x140155adb
mov rax, qword [rsp + 0x48]
add rax, rdi
cmp rax, r14
jbe 0x140155adb
xor r12d, r12d
mov al, 1
mov dword [rsp + 0x78], eax
xor edi, edi
xor ebx, ebx
xor r14d, r14d
lea r15, [0x140223388]
lea rbp, str.combase.dll
mov dword [rsp + 0x38], 9
jmp 0x140157572
shr rsi, 5
mov rax, qword [rsp + 0x210]
add rax, rsi
mov edx, dword [rsp + 0x1f4]
je 0x140154b9e
mov rax, qword [rsp + 0x200]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov edx, dword [rsp + 0x1f4]
mov rcx, qword [rsp + 0x348]
mov rax, qword [rsp + 0x350]
mov rsi, qword [rsp + 0x360]
test sil, 1
jne 0x140154cf9
mov qword [rsp + 0x428], rcx
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x438], rsi
lea rax, [0x1402a30e8]
mov qword [rsp + 0x420], rax
test r15d, r15d
je 0x140154d9e
mov edi, ebx
mov r8, qword [rsp + 0x428]
and edi, 8
mov rsi, qword [rsp + 0xa8]
je 0x14015513c
mov r15, rsi
mov rsi, qword [rsp + 0x430]
mov r14d, 0xd
test rsi, rsi
je 0x1401552bd
movzx ebp, byte [r8]
movzx r15d, bpl
cmp rsi, r15
jbe 0x1401552c1
cmp rsi, 1
jne 0x140155e01
movdqa xmm0, xmmword [rsp + 0x420]
movdqa xmm1, xmmword [rsp + 0x430]
movdqa xmmword [rsp + 0x510], xmm1
movdqa xmmword [rsp + 0x500], xmm0
lea rax, [0x1402013f8]
mov qword [rsp + 0x420], rax
lea rax, [rsp + 0x430]
movups xmmword [rax], xmm6
lea rax, str.combase.dll
jmp 0x140155e6f
shr rsi, 5
mov rax, qword [rsp + 0x210]
add rax, rsi
je 0x140154cba
mov rax, qword [rsp + 0x200]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movdqu xmm0, xmmword [rsp + 0x348]
movdqu xmm1, xmmword [rsp + 0x358]
movdqa xmmword [rsp + 0x430], xmm1
movdqa xmmword [rsp + 0x420], xmm0
test r15d, r15d
je 0x140154f28
test dil, 8
jne 0x14015504c
xor r15d, r15d
jmp 0x140155374
shr rsi, 5
sub rcx, rsi
add rax, rsi
mov rdx, qword [rsp + 0x358]
add rdx, rsi
mov qword [rsp + 0x500], rcx
mov qword [rsp + 0x508], rdx
mov qword [rsp + 0x510], rax
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x500]
call fcn.140037a80
mov rax, qword [rsp + 0x210]
sub rax, rsi
jb 0x140160412
mov qword [rsp + 0x210], rax
add qword [rsp + 0x208], rsi
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x420], xmm0
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x438], rax
mov edx, dword [rsp + 0x1f4]
test r15d, r15d
jne 0x140154bf0
mov r8, qword [rsp + 0x428]
mov rsi, qword [rsp + 0x430]
mov r14d, 0x12
mov r15, qword [rsp + 0xa8]
jmp 0x1401552ce
shr rsi, 5
mov rax, qword [rsp + 0x210]
add rax, rsi
je 0x140154df1
mov rax, qword [rsp + 0x200]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movdqu xmm0, xmmword [rsp + 0x348]
movdqu xmm1, xmmword [rsp + 0x358]
movdqa xmmword [rsp + 0x430], xmm1
movdqa xmmword [rsp + 0x420], xmm0
test r15d, r15d
je 0x140154f30
test dil, 8
jne 0x1401550c4
xor r15d, r15d
jmp 0x140155470
mov r13, rbp
mov rcx, qword [rsp + 0xb0]
mov esi, dword [rcx + 9]
mov eax, 0xffffff7f
and esi, eax
bswap esi
mov edi, dword [rcx + 0xd]
bswap edi
lea r8, [rbx - 0x11]
lea rdx, [rcx + 0x11]
lea rcx, [rsp + 0xcd0]
call fcn.140037770
mov dword [rsp + 0xcf0], esi
mov dword [rsp + 0xcf4], edi
mov rax, qword [rsp + 0xcd0]
test rax, rax
mov rdx, qword [rsp + 0xa8]
je 0x140156fc1
mov rcx, rax
mov qword [rsp + 0x98], rax
shr rax, 0x20
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xcd8]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0xce0]
mov qword [rsp + 0x148], rax
mov eax, dword [rsp + 0xce8]
mov dword [rsp + 0x19c], eax
mov al, 1
mov dword [rsp + 0x5c], eax
mov r14b, 6
mov eax, dword [rsp + 0xcec]
mov dword [rsp + 0x198], eax
mov dword [rsp + 0x194], edi
mov dword [rsp + 0x190], esi
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rdi, qword [rsp + 0xb0]
mov rsi, rdx
jmp 0x140156d39
mov byte [rsp + 0x50], 0xa
mov al, 1
mov dword [rsp + 0x5c], eax
jmp 0x140155250
mov r13b, 0x12
jmp 0x14015604f
mov sil, 0x12
jmp 0x14015552e
mov rax, qword [rsp + 0x48]
lea r9, [rax - 9]
test bl, 1
jne 0x1401552a4
mov rax, r9
movabs rcx, 0xaaaaaaaaaaaaaaab
imul rax, rcx
ror rax, 1
movabs rcx, 0x2aaaaaaaaaaaaaab
cmp rax, rcx
jb case.0x14013c3c6.84
and r11d, 0xffffff00
or r11d, 0x11
jmp case.0x14013c3c6.71
mov r13, rbp
mov rdi, qword [rsp + 0xb0]
mov eax, dword [rdi + 9]
bswap eax
mov qword [rsp + 0x98], rax
mov al, 1
mov dword [rsp + 0x5c], eax
mov r14b, 8
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rsi, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0x38]
jmp 0x140156d39
mov rdi, qword [rsp + 0xb0]
movzx r8d, byte [rdi + 9]
movzx eax, byte [rdi + 0xa]
shl eax, 0x10
movzx ecx, byte [rdi + 0xb]
shl ecx, 8
movzx edx, byte [rdi + 0xc]
and r8d, 0x7f
shl r8d, 0x18
or r8d, eax
or r8d, ecx
or r8d, edx
mov qword [rsp + 0x98], r8
mov al, 1
mov dword [rsp + 0x5c], eax
mov r14b, 7
je 0x140154a60
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rsi, qword [rsp + 0xa8]
mov r13, qword [rsp + 0x70]
mov ebp, dword [rsp + 0x38]
jmp 0x140156d39
cmp qword [rsp + 0x428], 0
je 0x140155316
mov rax, qword [rsp + 0x420]
movzx r15d, byte [rax]
mov r8d, 1
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x420]
call fcn.140037fe0
mov rsi, qword [rsp + 0x518]
test sil, 1
jne 0x140155344
lock dec qword [rsi + 0x20]
jne 0x140155374
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140155363
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140155363
cmp qword [rsp + 0x428], 0
je 0x14015531e
mov rax, qword [rsp + 0x420]
movzx r15d, byte [rax]
mov r8d, 1
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x420]
call fcn.140037fe0
mov rsi, qword [rsp + 0x518]
test sil, 1
jne 0x140155440
lock dec qword [rsi + 0x20]
jne 0x140155470
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x14015545f
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14015545f
jmp 0x140156aa6
mov eax, dword [rdi + 9]
bswap eax
mov ecx, eax
and ecx, 0x7fffffff
movzx edx, byte [rdi + 0xd]
mov dword [rsp + 0x200], ecx
mov byte [rsp + 0x204], dl
mov ecx, dword [rsp + 0x201]
mov byte [rsp + 0x200], al
mov dword [rsp + 0x201], ecx
mov edx, dword [rsp + 0x200]
mov r9d, dword [rsp + 0x38]
cmp edx, r9d
jne 0x140155326
mov rcx, qword [rsp + 0x8e0]
and ecx, 0xffffff00
or ecx, 0x14
mov edx, dword [rsp + 0x80c]
and edx, 0xffff00ff
or edx, 0x200
mov eax, edx
and eax, 0xff00
cmp eax, 0x200
mov qword [rsp + 0x8e0], rcx
mov dword [rsp + 0x80c], edx
jne 0x14015525b
mov byte [rsp + 0x50], 0xa
lea eax, [rcx - 0xc]
movzx eax, al
cmp al, 9
mov ecx, 9
cmovae eax, ecx
mov cl, 1
mov dword [rsp + 0x5c], ecx
cmp al, 8
jne 0x140155250
movabs rax, 0xffffffff00000000
mov r12, qword [rsp + 0x108]
and r12, rax
or r12, 1
xor r9d, r9d
mov r10d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov r8, r12
mov rbp, qword [rsp + 0x148]
mov r11d, dword [rsp + 0x38]
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
jne 0x140157009
jmp 0x140157650
xor ebx, ebx
xor edi, edi
xor ecx, ecx
jmp 0x140156fe6
mov dword [rsp + 0x68], r8d
mov al, 1
mov dword [rsp + 0x5c], eax
mov r14b, 2
mov eax, edx
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x1d0], rax
mov ebp, ecx
mov eax, dword [rsp + 0x92c]
mov qword [rsp + 0x98], rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov r13, qword [rsp + 0x70]
jmp 0x140156d39
test r9, r9
je 0x140155da6
and r11d, 0xffffff00
or r11d, 0x10
jmp case.0x14013c3c6.71
xor esi, esi
jmp 0x1401552ce
mov r15, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0x70]
and edx, 0xffff00ff
or edx, 0x200
mov rax, qword [rsp + 0x420]
lea rcx, [rsp + 0x438]
mov edi, edx
mov rdx, r8
mov r8, rsi
call qword [rax + 0x10]
mov ecx, edi
mov rbx, qword [rsp + 0x48]
mov r8, qword [rsp + 0xc88]
mov edx, dword [rsp + 0x94c]
mov rsi, r15
mov r13, rbp
jmp 0x140156b1c
mov r13b, 0x13
jmp 0x14015604f
mov sil, 0x13
jmp 0x14015552e
shr ecx, 0x18
shr eax, 0x17
and eax, 0x100
or eax, ecx
mov ecx, r9d
mov dword [rsp + 0x92c], edx
mov edx, eax
jmp 0x1401551ae
shr rsi, 5
mov rax, qword [rsp + 0x510]
add rax, rsi
je 0x140155374
mov rax, qword [rsp + 0x500]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov bl, 2
test dil, 0x20
je 0x140156032
mov r13b, 0x13
cmp qword [rsp + 0x428], 5
jb 0x14015604f
mov rax, qword [rsp + 0x420]
mov ebx, dword [rax]
bswap ebx
mov ecx, ebx
and ecx, 0x7fffffff
movzx eax, byte [rax + 4]
mov dword [rsp + 0x500], ecx
mov byte [rsp + 0x504], al
mov ebp, dword [rsp + 0x501]
mov byte [rsp + 0x500], bl
mov dword [rsp + 0x501], ebp
mov r12d, dword [rsp + 0x500]
mov r13b, 0x14
cmp r12d, dword [rsp + 0x38]
je 0x14015604f
mov r8d, 5
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x420]
call fcn.140037fe0
mov rsi, qword [rsp + 0x518]
test sil, 1
jne 0x140155ffc
lock dec qword [rsi + 0x20]
jne 0x14015602c
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x14015601b
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14015601b
shr rsi, 5
mov rax, qword [rsp + 0x510]
add rax, rsi
je 0x140155470
mov rax, qword [rsp + 0x500]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov sil, 0x13
cmp qword [rsp + 0x428], 5
jb 0x14015552e
mov rax, qword [rsp + 0x420]
mov ebx, dword [rax]
mov eax, 0xffffff7f
and ebx, eax
mov r8d, 4
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x420]
call fcn.140037fe0
mov rsi, qword [rsp + 0x518]
test sil, 1
jne 0x1401554e1
lock dec qword [rsi + 0x20]
jne 0x140155511
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140155500
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140155500
shr rsi, 5
mov rax, qword [rsp + 0x510]
add rax, rsi
je 0x140155511
mov rax, qword [rsp + 0x500]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
test r15, r15
je 0x1401555f0
mov rax, qword [rsp + 0x428]
mov sil, 0xd
sub rax, r15
jae 0x1401555e8
mov rdi, qword [rsp + 0x438]
test dil, 1
jne 0x14015556d
lock dec qword [rdi + 0x20]
jne 0x140155597
mov rax, qword [rdi + 0x20]
cmp qword [rdi + 8], 0
je 0x14015555f
mov r8, qword [rdi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
jmp 0x140155592
shr rdi, 5
mov rax, qword [rsp + 0x430]
add rax, rdi
je 0x140155597
mov r8, qword [rsp + 0x420]
sub r8, rdi
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov bpl, 0xa
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r10d, r10d
xor ebx, ebx
xor edi, edi
xor ecx, ecx
jmp 0x140156b6c
mov rdi, qword [rsp + 0x358]
cmp rdi, 8
jbe 0x140160412
mov r15, qword [rsp + 0x360]
test r15b, 1
jne 0x140155f54
lock inc qword [r15 + 0x20]
jg 0x140157181
jmp 0x140160416
mov qword [rsp + 0x428], rax
bswap ebx
movaps xmmword [rsp + 0x950], xmm6
movaps xmmword [rsp + 0xc20], xmm6
mov rax, qword [rsp + 0x420]
mov rcx, qword [rsp + 0x428]
movaps xmm0, xmmword [rsp + 0x430]
lea r8, [rsp + 0x210]
movups xmmword [r8 + 7], xmm0
mov qword [r8 - 9], rax
mov qword [r8 - 1], rcx
mov qword [rsp + 0x500], 0
movzx eax, byte [rsp + 0x47]
mov byte [rsp + 0x508], al
mov rax, qword [rsp + 0xbf9]
mov rcx, qword [rsp + 0xc00]
lea rdx, [rsp + 0x501]
mov qword [rdx + 0xf], rcx
mov qword [rdx + 8], rax
mov qword [rsp + 0x518], 2
mov qword [rsp + 0x520], 0
mov qword [rsp + 0x528], 8
movaps xmm0, xmmword [rsp + 0x950]
movups xmmword [rdx + 0x2f], xmm0
mov qword [rsp + 0x540], 8
movaps xmm0, xmmword [rsp + 0xc20]
movups xmmword [rdx + 0x47], xmm0
mov word [rsp + 0x558], 0
movzx eax, word [rsp + 0x81e]
mov word [rdx + 0x5d], ax
mov eax, dword [rsp + 0x81a]
mov dword [rdx + 0x59], eax
mov byte [rsp + 0x560], 0xb
mov rax, qword [rsp + 0xc17]
mov qword [rdx + 0x6f], rax
movups xmm0, xmmword [rsp + 0xc08]
movups xmmword [rdx + 0x60], xmm0
mov qword [rsp + 0x578], 0
mov rax, qword [rsp + 0xcc8]
mov qword [rdx + 0x8f], rax
movups xmm0, xmmword [rsp + 0xcb8]
movups xmmword [rdx + 0x7f], xmm0
mov qword [rsp + 0x598], 0
mov rax, qword [rsp + 0xae8]
mov qword [rdx + 0xaf], rax
movups xmm0, xmmword [rsp + 0xad8]
movups xmmword [rdx + 0x9f], xmm0
mov qword [rsp + 0x5b8], 0
mov rax, qword [rsp + 0x900]
mov qword [rdx + 0xcf], rax
movups xmm0, xmmword [rsp + 0x8f0]
movups xmmword [rdx + 0xbf], xmm0
mov qword [rsp + 0x5d8], 0
mov rax, qword [rsp + 0xcb0]
mov qword [rdx + 0xef], rax
movups xmm0, xmmword [rsp + 0xca0]
movups xmmword [rdx + 0xdf], xmm0
mov word [rsp + 0x5f8], 0
movzx eax, word [rsp + 0x818]
mov word [rdx + 0xfd], ax
mov eax, dword [rsp + 0x814]
mov dword [rdx + 0xf9], eax
mov byte [rsp + 0x600], 0
mov eax, dword [rsp + 0x879]
mov ecx, dword [rsp + 0x87c]
mov dword [rdx + 0x103], ecx
mov dword [rdx + 0x100], eax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x608], eax
mov dword [rsp + 0x60c], ebx
mov byte [rsp + 0x610], dil
mov eax, dword [rsp + 0x200]
mov ecx, dword [rsp + 0x203]
mov dword [rdx + 0x113], ecx
mov dword [rdx + 0x110], eax
movdqu xmm0, xmmword [r8 - 9]
movdqu xmm1, xmmword [r8 + 7]
movdqa xmmword [rsp + 0x650], xmm1
movdqa xmmword [rsp + 0x640], xmm0
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x640]
mov r8, r14
mov r9, qword [rsp + 0x3a0]
call fcn.14004d050
cmp al, 0x15
jne 0x140155a00
test dil, 4
je 0x140155a62
mov eax, dword [rsp + 0x500]
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0x504]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x148], rax
mov eax, dword [rsp + 0x518]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x51c]
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x524]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x52c]
mov dword [rsp + 0x3cc], eax
mov eax, dword [rsp + 0x530]
mov dword [rsp + 0x3c8], eax
movzx eax, byte [rsp + 0x534]
mov dword [rsp + 0x1a0], eax
lea rsi, [rsp + 0x501]
movzx eax, word [rsi + 0x34]
mov word [rsp + 0x124], ax
movzx eax, byte [rsi + 0x36]
mov byte [rsp + 0x126], al
mov r8d, 0xd8
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x538]
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsp + 0x610]
mov dword [rsp + 0x100], eax
movzx eax, byte [rsp + 0x614]
mov dword [rsp + 0xfc], eax
movzx eax, word [rsi + 0x110]
mov word [rsp + 0x120], ax
movzx eax, byte [rsi + 0x112]
mov byte [rsp + 0x122], al
and al, 0x22
add dword [rax], eax
add byte [rdi], cl
mov bh, 0x86
adc al, 1
add byte [rax], al
and al, 0x22
add dword [rax], eax
add byte [rdi], cl
mov bh, 0x86
adc al, 1
add byte [rax], al
mov word [rsp + 0x11c], ax
movzx eax, byte [rsi + 0x116]
mov byte [rsp + 0x11e], al
mov rsi, qword [rsp + 0x658]
mov ah, 0x24
pop rax
invalid
add byte [rax], al
test sil, 1
jne 0x140156f43
mov ah, 0x24
pop rax
invalid
lock dec qword [rsi + 0x20]
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov ah, 0x24
test al, 0
add byte [rax], al
mov ah, 0x24
test al, 0
add byte [rax], al
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
mov r13, rbp
jne 0x140156f90
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
add byte [rdi], cl
invalid
xchg ebp, eax
invalid
add byte [rax], al
add byte [rdi], cl
test byte [rbp + 0x4c000015], dl
mov eax, dword [rsi]
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140156f7f
lea ecx, [rax - 0xc]
movzx ecx, cl
cmp cl, 9
mov edx, 9
cmovae ecx, edx
cmp cl, 7
je 0x140156786
movzx ecx, cl
mov edx, 1
mov r8b, 1
xor r15d, r15d
cmp ecx, 9
jne 0x140156725
test dil, 4
jne 0x140156725
add al, 0xfd
mov ebx, 0
mov edi, 0
mov ecx, 0
lea r13, [0x140223388]
lea r14, str.combase.dll
cmp al, 9
jb 0x1401567ce
invalid
add byte [rax], al
or eax, 0xb8410000
sbb byte [rcx], al
add byte [rax], al
mov r8d, 0x118
lea rsi, [rsp + 0x200]
mov rcx, rsi
lea rdx, [rsp + 0x500]
add byte [rax], al
add byte [rax], al
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x640]
and al, 0x40
invalid
add byte [rax], al
fisttp dword [rcx]
add byte [rdi], cl
sub byte [rsp + 0x640], al
and al, 0x40
invalid
add byte [rax], al
and al, 0x40
invalid
movaps xmm1, xmmword [rsp + 0x650]
movaps xmmword [rsp + 0x430], xmm1
movaps xmmword [rsp + 0x420], xmm0
add byte [rax - 0x75], cl
test byte [rax + rsi*8], ah
add eax, dword [rax]
add byte [rbx + 0x1a740238], al
add byte [rax - 0x75], cl
test byte [rax + rsi*8], ah
add eax, dword [rax]
add byte [rbx + 0x1a740238], al
mov rcx, qword [rsp + 0x680]
call fcn.14004a430
dec dword [rax - 0x75]
mov word [rax + riz*8], fs
invalid
add byte [rax], al
call fcn.140038570
invalid
sub ch, dh
invalid
dec dword [rax - 0x75]
mov word [rax + riz*8], fs
invalid
test eax, 0x48ffee2a
mov eax, dword [rsp + 0x3f0]
mov rax, qword [rsp + 0x3f0]
mov qword [rax], 1
jmp 0x14015668c
invalid
add byte [rax - 0x75], cl
and al, 0x48
invalid
mov rax, qword [rsp + 0x48]
cmp rax, 9
cmp rax, 9
or dword [rdi], ecx
jb 0x140160412
invalid
test eax, 0x8d480000
jo 0x140155ae5
lea rsi, [rax - 9]
mov r15, qword [rsp + 0x630]
mov rax, r15
sub rax, rdi
cmp rax, rsi
jae 0x140155b21
invalid
lea rcx, [rsp + 0x620]
mov rdx, rsi
mov word [rax + riz], fs
invalid
call fcn.1400381c0
mov rdi, qword [rsp + 0x628]
mov r15, qword [rsp + 0x630]
mov edi, dword [rsp + 0x630]
mov edi, dword [rsp + 0x630]
xor byte [rsi], al
add byte [rax], al
mov rax, qword [rsp + 0xb0]
lea rdx, [rax + 9]
mov rcx, qword [rsp + 0x620]
add rcx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
add rdi, rsi
cmp rdi, r15
ja 0x140160412
mov qword [rsp + 0x628], rdi
jmp 0x140157247
test r9, r9
je 0x1401568e4
invalid
invalid
invalid
add byte [rax], al
test byte [rdx + 0x4800000d], al
mov eax, dword [rsp + 0xb0]
mov rax, qword [rsp + 0xb0]
lea r14, [rax + 9]
xor eax, eax
sal byte [rcx], 0xf6
sal byte [rcx], 0xf6
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov qword [rsp + 0x108], r8
or byte [rcx], al
add byte [rax], al
or byte [rcx], al
add byte [rax], al
xor r8d, r8d
mov qword [rsp + 0xd8], r8
and al, 0xd8
add byte [rax], al
invalid
ror byte [rcx + rcx*4 - 0x7c], 0x24
fadd dword [rax]
add byte [rax], al
and al, 0xd8
add byte [rax], al
add bh, al
mov dword [rsp + 0x38], 0
and al, 0x38
add byte [rax], al
add byte [rax], al
invalid
add byte [rax - 0x75], cl
pop rsp
and al, 0x48
mov rbx, qword [rsp + 0x48]
jmp 0x140155bd8
shl esi, 0x18
shl r13d, 0x10
sbb byte [rcx - 0x3f], al
in eax, 0x10
or r13d, esi
shl r12d, 8
or r12d, r13d
or r12d, r8d
mov dword [rsp + 0x38], 1
mov r8d, r12d
invalid
loopne 0x140155bff
mov dword [rsp + 0x5c], r12d
mov dword [rsp + 0x5c], esp
mov rbx, qword [rsp + 0x48]
mov esi, r10d
add r14, r15
sub r9, r15
dec byte [rbp + 0x29]
stc
mov r12, qword [rsp + 0x60]
je 0x14015690d
cmp r9, 6
cmp ecx, 6
mov r15d, 6
cmovb r15, r9
cmp r15, 1
cmp edi, 1
cmp edi, 1
je 0x140160412
and ch, byte [rax - 0x7cb70000]
inc dword [rdx]
cmp r15, 2
jbe 0x140160412
test al, 0
add byte [rcx - 0x7d], cl
cmp r15, 3
cmp r15, 3
je 0x140160412
test byte [rsi], cl
test al, 0
add byte [rcx - 0x7d], cl
inc dword [rdi + rcx]
add al, 0xf
cmp r15, 4
jbe 0x140160412
add al, 0xf
xchg byte [rax + rbp*4], al
add byte [rax], al
cmp r15, 5
je 0x140160412
movzx r8d, byte [r14]
mov dh, 6
invalid
movzx r11d, byte [r14 + 1]
shl r8d, 8
loopne case.0x140154715.12
loopne case.0x140154715.12
add r11d, r8d
dec r11d
cmp r11d, 7
cmp ebx, 7
retf
cmp ebx, 7
sti
invalid
ja case.default.0x140155c56
mov r10d, esi
movzx esi, byte [r14 + 2]
movzx r13d, byte [r14 + 3]
movzx ebp, byte [rsi + 3]
movzx ebp, byte [rsi + 3]
movzx r12d, byte [r14 + 4]
movzx r8d, byte [r14 + 5]
lea rbx, [0x1401fd090]
je 0x140155c58
add byte [rsi + 0x63], cl
sbb al, 0x9b
je 0x140155c58
add byte [rsi + 0x63], cl
sbb al, 0x9b
add r11, rbx
jmp r11
jrcxz 0x140155c1b
shl esi, 0x18
out 0x18, al
shl r13d, 0x10
or r13d, esi
shl r12d, 8
or r12d, r13d
in al, dx
in al, dx
or r12d, r8d
mov r8d, 1
mov qword [rsp + 0xd8], r8
mov ebp, r12d
cmp r12d, 2
mov rbx, qword [rsp + 0x48]
mov ebx, dword [rsp + 0x48]
invalid
mov ebx, dword [rsp + 0x48]
mov esi, r10d
jb case.default.0x140155c56
jmp 0x140156fab
add byte [rax], al
shl esi, 0x18
shl r13d, 0x10
sbb byte [rcx - 0x3f], al
in eax, 0x10
or r13d, esi
shl r12d, 8
or r12d, r13d
or r12d, r8d
mov esi, 1
mov r8d, r12d
mov dword [rsp + 0xd0], r12d
mov rbx, qword [rsp + 0x48]
jmp case.default.0x140155c56
shl esi, 0x18
shl r13d, 0x10
or r13d, esi
shl r12d, 8
or r12d, r13d
or r12d, r8d
mov eax, 1
mov edi, r12d
cmp r12d, 2
mov rbx, qword [rsp + 0x48]
mov esi, r10d
jb case.default.0x140155c56
jmp 0x140156fab
shl esi, 0x18
shl r13d, 0x10
adc byte [rcx + 9], al
cmc
adc byte [rcx + 9], al
cmc
shl r12d, 8
or r12d, r13d
or r12d, r8d
mov r8d, 1
mov qword [rsp + 0x108], r8
mov r8d, r12d
mov dword [rsp + 0xbc], r12d
jmp case.0x140155c56.6
shl esi, 0x18
shl r13d, 0x10
or r13d, esi
shl r12d, 8
shl esp, 8
shl esp, 8
or r12d, r13d
or r12d, r8d
mov ecx, 1
mov r8d, r12d
mov dword [rsp + 0x98], r12d
mov rbx, qword [rsp + 0x48]
mov esi, r10d
jns case.default.0x140155c56
jmp 0x140156fab
shl esi, 0x18
shl r13d, 0x10
or r13d, esi
shl r12d, 8
lea edx, [r12 + r13]
add edx, 0xffffc000
cmp edx, 0xffc000
mov rbx, qword [rsp + 0x48]
jae 0x140156fab
mov esi, r10d
or r13d, r12d
or r13d, r8d
mov edx, 1
mov r8d, r13d
mov dword [rsp + 0xb8], r13d
jmp case.default.0x140155c56
mov r15d, dword [rsp + 0xc68]
mov r14d, dword [rsp + 0xc70]
xor eax, eax
mov cl, 1
mov dword [rsp + 0x1a0], ecx
xor r13d, r13d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0xd8], rcx
mov dword [rsp + 0x38], 0
mov edi, dword [rsp + 0x928]
mov r8d, dword [rsp + 0x924]
mov r9d, dword [rsp + 0x920]
mov r10d, dword [rsp + 0x91c]
mov rbx, qword [rsp + 0x48]
jmp 0x140156961
mov rax, qword [rsp + 0x420]
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x438]
mov r9, rsi
call qword [rax]
dec qword [rsp + 0x430]
mov rax, qword [rsp + 0x428]
inc rax
mov qword [rsp + 0x210], 1
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x500], xmm0
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x510], rcx
mov rcx, qword [rsp + 0x218]
mov qword [rsp + 0x518], rcx
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x500]
mov rdx, qword [rsp + 0x508]
mov r8, qword [rsp + 0x510]
lea rcx, [rsp + 0x518]
call qword [rax + 0x10]
not r15
add rsi, r15
mov r9, qword [rsp + 0x430]
cmp r9, rsi
jb 0x140160412
mov r14, qword [rsp + 0xa8]
jne 0x140155eea
lea rax, str.combase.dll
mov qword [rsp + 0x508], rax
lea rax, [rsp + 0x501]
movups xmmword [rax + 0xf], xmm6
lea rax, [0x1402013f8]
mov qword [rsp + 0x500], rax
jmp 0x140156a71
test rsi, rsi
je 0x140156a24
mov rax, qword [rsp + 0x420]
mov r8, qword [rsp + 0x428]
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x438]
call qword [rax]
sub qword [rsp + 0x210], rsi
mov qword [rsp + 0x430], rsi
add qword [rsp + 0x208], rsi
movups xmm0, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0x500], xmm0
movdqu xmm0, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x510], xmm0
jmp 0x140156a71
movzx eax, byte [0x1402d9160]
mov rax, qword [0x1402d9150]
test rax, rax
jne 0x140155f7c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x140160412
mov qword [0x1402d9150], rax
mov r8d, 0x28
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x140160412
mov rsi, rax
mov rax, r15
shr rax, 5
lea rcx, [rax + rdi]
mov rdx, qword [rsp + 0xb0]
sub rdx, rax
add rax, qword [rsp + 0x48]
shr r15d, 2
and r15d, 7
mov qword [rsi], rdx
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], 2
mov qword [rsp + 0x360], rsi
test sil, 1
je 0x140155ff4
cmp rsi, 0xfffffffffffffee0
jae 0x140157105
add rsi, 0x120
mov r15, rsi
jmp 0x140157181
shr rsi, 5
mov rax, qword [rsp + 0x510]
add rax, rsi
je 0x14015602c
mov rax, qword [rsp + 0x500]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
shr ebx, 0x1f
shr ebp, 0x18
test r15, r15
je 0x140156186
mov rax, qword [rsp + 0x428]
mov r13b, 0xd
sub rax, r15
jae 0x14015617e
mov rsi, qword [rsp + 0x438]
test sil, 1
jne 0x140156096
lock dec qword [rsi + 0x20]
mov r12, qword [rsp + 0x108]
jne 0x1401560c8
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140156088
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
jmp 0x1401560c3
shr rsi, 5
mov rax, qword [rsp + 0x430]
add rax, rsi
mov r12, qword [rsp + 0x108]
je 0x1401560c8
mov r8, qword [rsp + 0x420]
sub r8, rsi
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea eax, [r13 - 0xc]
movzx eax, al
cmp al, 9
mov ecx, 9
cmovae eax, ecx
mov cl, 1
mov dword [rsp + 0x5c], ecx
cmp al, 8
jne 0x14015612b
movabs rax, 0xffffffff00000000
and r12, rax
or r12, 1
xor r9d, r9d
mov qword [rsp + 0x98], r12
mov r14, qword [rsp + 0x148]
mov r15d, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xb8]
mov edx, dword [rsp + 0xc4]
mov r8d, dword [rsp + 0x38]
jmp 0x140156153
mov r8d, 1
xor ecx, ecx
xor edx, edx
xor edi, edi
xor r15d, r15d
mov r9b, 1
lea r12, [0x140223388]
mov qword [rsp + 0x98], r12
lea r14, str.combase.dll
mov bpl, 0xa
mov eax, r13d
mov byte [rsp + 0x17d], r13b
movzx esi, byte [rsp + 0x47]
mov r10d, ecx
mov ebx, edx
mov ecx, r15d
mov qword [rsp + 0xd0], r14
mov r11d, r8d
jmp 0x140156b8d
mov qword [rsp + 0x428], rax
movaps xmmword [rsp + 0x950], xmm6
movaps xmmword [rsp + 0xc20], xmm6
mov rax, qword [rsp + 0x420]
mov rcx, qword [rsp + 0x428]
movaps xmm0, xmmword [rsp + 0x430]
lea r8, [rsp + 0x210]
movups xmmword [r8 + 3], xmm0
mov qword [r8 - 0xd], rax
mov qword [r8 - 5], rcx
mov qword [rsp + 0x500], 0
movzx eax, byte [rsp + 0x17d]
mov byte [rsp + 0x508], al
mov rax, qword [rsp + 0xbf9]
mov rcx, qword [rsp + 0xc00]
lea rdx, [rsp + 0x501]
mov qword [rdx + 0xf], rcx
mov qword [rdx + 8], rax
mov qword [rsp + 0x518], 2
mov qword [rsp + 0x520], 0
mov qword [rsp + 0x528], 8
movaps xmm0, xmmword [rsp + 0x950]
movups xmmword [rdx + 0x2f], xmm0
mov qword [rsp + 0x540], 8
movaps xmm0, xmmword [rsp + 0xc20]
movups xmmword [rdx + 0x47], xmm0
mov word [rsp + 0x558], 0
movzx eax, word [rsp + 0x81e]
mov word [rdx + 0x5d], ax
mov eax, dword [rsp + 0x81a]
mov dword [rdx + 0x59], eax
mov byte [rsp + 0x560], 0xb
mov rax, qword [rsp + 0xc17]
mov qword [rdx + 0x6f], rax
movups xmm0, xmmword [rsp + 0xc08]
movups xmmword [rdx + 0x60], xmm0
mov qword [rsp + 0x578], 0
mov rax, qword [rsp + 0xcc8]
mov qword [rdx + 0x8f], rax
movups xmm0, xmmword [rsp + 0xcb8]
movups xmmword [rdx + 0x7f], xmm0
mov qword [rsp + 0x598], 0
mov rax, qword [rsp + 0xae8]
mov qword [rdx + 0xaf], rax
movups xmm0, xmmword [rsp + 0xad8]
movups xmmword [rdx + 0x9f], xmm0
mov qword [rsp + 0x5b8], 0
mov rax, qword [rsp + 0x900]
mov qword [rdx + 0xcf], rax
movups xmm0, xmmword [rsp + 0x8f0]
movups xmmword [rdx + 0xbf], xmm0
mov qword [rsp + 0x5d8], 0
mov rax, qword [rsp + 0xcb0]
mov qword [rdx + 0xef], rax
movups xmm0, xmmword [rsp + 0xca0]
movups xmmword [rdx + 0xdf], xmm0
mov word [rsp + 0x5f8], 0
movzx eax, word [rsp + 0x818]
mov word [rdx + 0xfd], ax
mov eax, dword [rsp + 0x814]
mov dword [rdx + 0xf9], eax
mov byte [rsp + 0x600], 0
mov eax, dword [rsp + 0x879]
mov ecx, dword [rsp + 0x87c]
mov dword [rdx + 0x103], ecx
mov dword [rdx + 0x100], eax
mov dword [rsp + 0x608], r12d
mov byte [rsp + 0x60c], bpl
mov byte [rsp + 0x60d], bl
mov word [rsp + 0x60e], 0
mov esi, dword [rsp + 0x38]
mov dword [rsp + 0x610], esi
mov byte [rsp + 0x614], dil
movzx eax, byte [rsp + 0x202]
mov byte [rdx + 0x116], al
movzx eax, word [rsp + 0x200]
mov word [rdx + 0x114], ax
movdqu xmm0, xmmword [r8 - 0xd]
movdqu xmm1, xmmword [r8 + 3]
movdqa xmmword [rsp + 0x650], xmm1
movdqa xmmword [rsp + 0x640], xmm0
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x640]
mov r8, r14
mov r9, qword [rsp + 0x3a0]
call fcn.14004d050
cmp al, 0x15
jne 0x1401565b6
test dil, 4
mov r13, qword [rsp + 0x70]
je 0x140156618
mov eax, dword [rsp + 0x500]
mov qword [rsp + 0x98], rax
mov eax, dword [rsp + 0x504]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x148], rax
mov eax, dword [rsp + 0x518]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x51c]
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x524]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x52c]
mov dword [rsp + 0x3cc], eax
mov eax, dword [rsp + 0x530]
mov dword [rsp + 0x3c8], eax
movzx eax, byte [rsp + 0x534]
mov dword [rsp + 0x1a0], eax
lea rsi, [rsp + 0x501]
movzx eax, word [rsi + 0x34]
mov word [rsp + 0x124], ax
movzx eax, byte [rsi + 0x36]
mov byte [rsp + 0x126], al
mov r8d, 0xd8
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x538]
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsp + 0x610]
mov dword [rsp + 0x100], eax
movzx eax, byte [rsp + 0x614]
mov dword [rsp + 0xfc], eax
movzx eax, word [rsi + 0x110]
mov word [rsp + 0x120], ax
movzx eax, byte [rsi + 0x112]
mov byte [rsp + 0x122], al
movzx eax, word [rsi + 0x114]
mov word [rsp + 0x11c], ax
movzx eax, byte [rsi + 0x116]
mov byte [rsp + 0x11e], al
mov rsi, qword [rsp + 0x658]
test sil, 1
jne 0x14015687f
lock dec qword [rsi + 0x20]
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
jne 0x1401568c9
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x1401568b8
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x1401568b8
lea ecx, [rax - 0xc]
movzx ecx, cl
cmp cl, 9
mov edx, 9
cmovae ecx, edx
cmp cl, 7
je 0x14015673e
movzx ecx, cl
mov edx, 1
mov r8b, 1
xor r15d, r15d
cmp ecx, 9
jne 0x140156725
test dil, 4
jne 0x140156725
add al, 0xfd
mov ebx, 0
mov edi, 0
mov ecx, 0
lea r13, [0x140223388]
lea r14, str.combase.dll
cmp al, 9
jb 0x1401567ce
mov r8d, 0x118
lea rsi, [rsp + 0x200]
mov rcx, rsi
lea rdx, [rsp + 0x500]
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmmword [rsp + 0x430], xmm1
movaps xmmword [rsp + 0x420], xmm0
mov rax, qword [rsp + 0x3f0]
cmp dword [rax], 2
je 0x14015667d
mov rcx, qword [rsp + 0x680]
call fcn.14004a430
mov rcx, qword [rsp + 0x7e0]
call fcn.140038570
mov rax, qword [rsp + 0x3f0]
mov qword [rax], 0
mov r8d, 0x118
mov rcx, qword [rsp + 0x680]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
movdqa xmm0, xmmword [rsp + 0x420]
movdqa xmm1, xmmword [rsp + 0x430]
mov rax, qword [rsp + 0x7e0]
movdqu xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm1
mov bpl, 9
movzx esi, byte [rsp + 0x47]
mov r10d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov rax, qword [rsp + 0x98]
mov r9d, eax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd8]
mov r11d, eax
jmp 0x140156b8d
xor ebx, ebx
xor edi, edi
xor ecx, ecx
lea r13, [0x140223388]
lea r14, str.combase.dll
jmp 0x1401567ce
movabs rax, 0xffffffff00000000
mov r12, qword [rsp + 0x108]
and r12, rax
or r12, 1
xor r8d, r8d
mov r15d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov r13, r12
mov r14, qword [rsp + 0x148]
mov edx, esi
jmp 0x1401567ce
movabs rax, 0xffffffff00000000
mov r12, qword [rsp + 0x108]
and r12, rax
or r12, 1
xor r8d, r8d
mov r15d, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc4]
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov r13, r12
mov r14, qword [rsp + 0x148]
mov edx, dword [rsp + 0x38]
mov qword [rsp + 0xd0], r14
mov rsi, qword [rsp + 0x658]
test sil, 1
mov dword [rsp + 0xd8], edx
mov r14d, ecx
mov r12d, r8d
jne 0x140156816
lock dec qword [rsi + 0x20]
jne 0x140156846
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140156835
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140156835
shr rsi, 5
mov rax, qword [rsp + 0x650]
add rax, rsi
je 0x140156846
mov rax, qword [rsp + 0x640]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0x98], r13
lea rcx, [rsp + 0x500]
call fcn.14004a430
mov bpl, 0xa
mov al, 1
mov dword [rsp + 0x5c], eax
movzx esi, byte [rsp + 0x47]
mov r10d, r15d
mov r11d, dword [rsp + 0xd8]
mov r9d, r12d
mov ecx, r14d
jmp 0x140156b8d
shr rsi, 5
mov rax, qword [rsp + 0x650]
add rax, rsi
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
je 0x1401568c9
mov rax, qword [rsp + 0x640]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov dword [rsp + 0x5c], 0
mov qword [rsp + 0x1d0], rax
mov rsi, r14
mov r14b, 1
jmp 0x140156d39
mov dword [rsp + 0x38], 0
xor eax, eax
mov qword [rsp + 0xd8], rax
xor eax, eax
mov qword [rsp + 0x108], rax
xor ecx, ecx
xor edx, edx
xor esi, esi
xor eax, eax
mov rbx, qword [rsp + 0x48]
mov r8d, ebp
mov r15, qword [rsp + 0x108]
shl r15, 0x20
or r15, r8
mov r8d, dword [rsp + 0xbc]
mov r14, rcx
shl r14, 0x20
or r14, r8
mov dword [rsp + 0x1a0], 0
mov r8d, dword [rsp + 0xd0]
mov r9d, dword [rsp + 0xb8]
mov r10d, dword [rsp + 0x98]
mov r11d, dword [rsp + 0x5c]
mov rbp, qword [rsp + 0x70]
mov r13d, esi
mov sil, 1
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x194], r13d
mov dword [rsp + 0x920], r9d
mov dword [rsp + 0x190], r9d
mov dword [rsp + 0x198], edx
mov dword [rsp + 0x91c], r10d
mov dword [rsp + 0x19c], r10d
mov dword [rsp + 0x928], edi
mov dword [rsp + 0x3c8], edi
mov dword [rsp + 0x3cc], eax
mov dword [rsp + 0x924], r8d
mov dword [rsp + 0x3d0], r8d
mov qword [rsp + 0x148], r14
mov qword [rsp + 0xc70], r14
mov r14b, 4
mov qword [rsp + 0x108], r15
mov qword [rsp + 0xc68], r15
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0x18c], r11d
mov eax, r11d
mov qword [rsp + 0x98], rax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xb0]
mov r13, rbp
mov ebp, dword [rsp + 0x38]
jmp 0x140156d39
movdqa xmm0, xmmword [rsp + 0x420]
movdqa xmm1, xmmword [rsp + 0x430]
movdqa xmmword [rsp + 0x510], xmm1
movdqa xmmword [rsp + 0x500], xmm0
lea rax, [0x1402013f8]
mov qword [rsp + 0x420], rax
lea rax, str.combase.dll
mov qword [rsp + 0x428], rax
lea rax, [rsp + 0x430]
movups xmmword [rax], xmm6
mov rax, qword [rsp + 0x500]
mov rdx, qword [rsp + 0x508]
mov r8, qword [rsp + 0x510]
lea rcx, [rsp + 0x518]
call qword [rax + 0x10]
mov r8, qword [rsp + 0x428]
mov edx, dword [rsp + 0x1f4]
mov rsi, r14
and ebx, 9
mov r14d, dword [rsp + 0x420]
mov eax, dword [rsp + 0x424]
mov dword [rsp + 0x948], eax
mov eax, r14d
shr eax, 8
mov dword [rsp + 0x940], eax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0xc80], rax
mov eax, dword [rsp + 0x438]
mov dword [rsp + 0x944], eax
mov eax, dword [rsp + 0x43c]
mov dword [rsp + 0x93c], eax
and edx, 0xff000000
or edx, ebx
shl edi, 5
or edi, edx
movzx ecx, bpl
shl ecx, 0x10
or ecx, edi
mov edx, dword [rsp + 0x38]
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x70]
mov eax, ecx
and eax, 0xff00
cmp eax, 0x200
mov dword [rsp + 0x1f4], ecx
mov qword [rsp + 0xc88], r8
mov dword [rsp + 0x94c], edx
jne 0x140156ca6
mov bpl, 0xa
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r10d, r10d
movzx esi, byte [rsp + 0x47]
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [rsp + 0x114], 0
mov r9b, 1
lea r12, [0x140223388]
mov qword [rsp + 0x98], r12
lea r14, str.combase.dll
mov qword [rsp + 0xd0], r14
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
je 0x140156c80
mov r14d, ecx
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
mov r13d, r10d
mov r15d, r11d
mov r12d, r9d
je 0x140156bd2
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xb08]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
mov r10d, r13d
mov r11d, r15d
mov r9d, r12d
mov ecx, r14d
je 0x140156c80
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
je 0x140156c22
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0xb08]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0xaf0]
cmp rax, 2
mov r10d, r13d
mov r11d, r15d
mov r9d, r12d
mov ecx, r14d
je 0x140156c80
test rax, rax
je 0x140156c80
mov rax, qword [rsp + 0xaf8]
lock dec qword [rax]
jne 0x140156c80
mov rcx, qword [rsp + 0xaf8]
mov rdx, qword [rsp + 0xb00]
call fcn.14014cf70
mov ecx, r14d
mov r9d, r12d
mov r11d, r15d
mov r10d, r13d
nop
mov edx, dword [rsp + 0x1a4]
mov r8, qword [rsp + 0x98]
mov r14, qword [rsp + 0xd0]
cmp bpl, 0xa
jne 0x1401576e6
jmp 0x140157c08
mov eax, dword [rsp + 0x940]
shl eax, 8
movzx r9d, r14b
or r9d, eax
mov qword [rsp + 0x98], r9
xor r14d, r14d
mov dword [rsp + 0x194], ecx
mov dword [rsp + 0x190], edx
mov eax, dword [rsp + 0x93c]
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x944]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x948]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x108], r8
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x1d0], rax
mov dword [rsp + 0x5c], 0
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov rdi, qword [rsp + 0xb0]
movzx eax, byte [rsp + 0x126]
mov byte [rsp + 0x39e], al
movzx eax, word [rsp + 0x124]
mov word [rsp + 0x39c], ax
mov r8d, 0xd8
lea rcx, [rsp + 0x990]
lea rdx, [rsp + 0x690]
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x120]
mov word [rsp + 0x398], ax
movzx eax, byte [rsp + 0x122]
mov byte [rsp + 0x39a], al
movzx eax, word [rsp + 0x11c]
mov word [rsp + 0x394], ax
movzx eax, byte [rsp + 0x11e]
mov byte [rsp + 0x396], al
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
je 0x140156e70
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
je 0x140156dea
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xb08]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
je 0x140156e70
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
je 0x140156e2a
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0xb08]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0xaf0]
cmp rax, 2
je 0x140156e70
test rax, rax
je 0x140156e70
mov rax, qword [rsp + 0xaf8]
lock dec qword [rax]
jne 0x140156e70
mov rcx, qword [rsp + 0xaf8]
mov rdx, qword [rsp + 0xb00]
call fcn.14014cf70
nop
mov r15d, r14d
mov r14, rsi
cmp byte [rsp + 0x5c], 0
je 0x140156ee6
mov rsi, qword [rsp + 0x360]
test sil, 1
jne 0x140156ebc
lock dec qword [rsi + 0x20]
jne 0x140156ee6
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140156eae
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
jmp 0x140156ee1
shr rsi, 5
mov rax, qword [rsp + 0x358]
add rax, rsi
je 0x140156ee6
mov r8, qword [rsp + 0x348]
sub r8, rsi
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x98]
mov eax, ecx
shr eax, 8
mov dword [rsp + 0x5c], eax
mov eax, ecx
shr eax, 0x10
mov dword [rsp + 0x114], eax
mov eax, dword [rsp + 0x194]
mov dword [rsp + 0xd0], eax
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0xbc], eax
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x19c]
mov dword [rsp + 0xb8], eax
mov rsi, r14
jmp 0x140157752
shr rsi, 5
mov rax, qword [rsp + 0x650]
add rax, rsi
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
mov r13, rbp
je 0x140156f90
mov rax, qword [rsp + 0x640]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov dword [rsp + 0x5c], 0
mov qword [rsp + 0x1d0], rax
mov rsi, r14
mov r14b, 3
jmp 0x140156d39
mov eax, dword [rsp + 0x18c]
and eax, 0xffffff00
or eax, 0xe
mov dword [rsp + 0x18c], eax
mov byte [rsp + 0x50], 0xa
mov r11d, 1
mov al, 1
mov dword [rsp + 0x5c], eax
xor r10d, r10d
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [rsp + 0x114], 0
mov r9b, 1
lea r8, [0x140223388]
lea rbp, str.combase.dll
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
je 0x140157650
mov r14d, ecx
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
mov esi, r10d
mov r15d, r11d
mov r12d, r9d
mov r13, r8
je 0x14015703f
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xb08]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
mov r10d, esi
mov r11d, r15d
mov r9d, r12d
mov ecx, r14d
mov r8, r13
je 0x140157650
mov rcx, qword [rsp + 0xaf8]
mov rax, qword [rsp + 0xb00]
test rdx, rdx
je 0x140157092
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0xb08]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0xaf0]
cmp rax, 2
mov r10d, esi
mov r11d, r15d
mov r9d, r12d
mov ecx, r14d
mov r8, r13
je 0x140157650
test rax, rax
je 0x140157650
mov rax, qword [rsp + 0xaf8]
lock dec qword [rax]
jne 0x140157650
mov rcx, qword [rsp + 0xaf8]
mov rdx, qword [rsp + 0xb00]
call fcn.14014cf70
mov r8, r13
mov ecx, r14d
mov r9d, r12d
mov r11d, r15d
mov r10d, esi
jmp 0x140157650
movzx eax, byte [0x1402d9160]
mov rax, qword [0x1402d9150]
test rax, rax
jne 0x14015712d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x140160412
mov qword [0x1402d9150], rax
mov r8d, 0x28
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x140160412
mov r15, rax
mov rax, rsi
shr rax, 5
lea rcx, [rax + rdi]
mov rdx, qword [rsp + 0xb0]
sub rdx, rax
add rax, qword [rsp + 0x48]
shr esi, 2
and esi, 7
mov qword [r15], rdx
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], rsi
mov qword [r15 + 0x20], 1
mov rcx, qword [rsp + 0x48]
mov rax, rcx
sub rax, 9
mov r13d, 0
cmovae r13, rax
mov eax, 9
cmovb rax, rcx
mov qword [rsp + 0x358], 9
mov qword [rsp + 0x350], rax
mov rsi, qword [rsp + 0x638]
test sil, 1
jne 0x1401571e7
lock dec qword [rsi + 0x20]
jne 0x140157217
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x140157206
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140157206
shr rsi, 5
mov rax, qword [rsp + 0x630]
add rax, rsi
je 0x140157217
mov rax, qword [rsp + 0x620]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
add rdi, 0xfffffffffffffff7
mov rax, qword [rsp + 0xb0]
add rax, 9
mov qword [rsp + 0x620], rax
mov qword [rsp + 0x628], r13
mov qword [rsp + 0x630], rdi
mov qword [rsp + 0x638], r15
lea rcx, [rsp + 0x508]
lea rdx, [rsp + 0x620]
mov r8, r14
mov r9, qword [rsp + 0x3a0]
call fcn.14004d050
cmp al, 0x15
jne 0x140157440
test bl, 4
je 0x1401574a8
mov eax, dword [rsp + 0x618]
mov rcx, qword [rsp + 0x500]
mov edx, eax
or dl, 4
test rcx, rcx
movzx edx, dl
cmove edx, eax
mov dword [rsp + 0x100], edx
mov eax, dword [rsp + 0x61c]
mov edx, eax
or dl, 4
test rcx, rcx
mov ecx, dword [rsp + 0x508]
mov qword [rsp + 0x98], rcx
mov ecx, dword [rsp + 0x50c]
mov qword [rsp + 0xd8], rcx
mov rcx, qword [rsp + 0x510]
mov qword [rsp + 0x108], rcx
mov rcx, qword [rsp + 0x518]
mov qword [rsp + 0x148], rcx
setne bpl
mov ecx, dword [rsp + 0x520]
mov dword [rsp + 0x19c], ecx
mov ecx, dword [rsp + 0x524]
mov dword [rsp + 0x198], ecx
mov ecx, dword [rsp + 0x528]
mov dword [rsp + 0x190], ecx
mov ecx, dword [rsp + 0x52c]
mov dword [rsp + 0x194], ecx
mov ecx, dword [rsp + 0x530]
mov dword [rsp + 0x3d0], ecx
mov ecx, dword [rsp + 0x534]
mov dword [rsp + 0x3cc], ecx
lea rsi, [rsp + 0x501]
movzx ecx, word [rsi + 0x3c]
mov word [rsp + 0x124], cx
mov ecx, dword [rsp + 0x538]
mov dword [rsp + 0x3c8], ecx
movzx ecx, byte [rsi + 0x3e]
mov byte [rsp + 0x126], cl
movzx ecx, dl
cmovne ecx, eax
mov dword [rsp + 0xfc], ecx
movzx eax, byte [rsp + 0x53c]
mov dword [rsp + 0x1a0], eax
mov r8d, 0xd8
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x540]
call sub.msvcrt.dll_memcpy
movzx eax, word [rsi + 0x118]
mov word [rsp + 0x120], ax
movzx eax, byte [rsi + 0x11a]
mov byte [rsp + 0x122], al
movzx eax, byte [rsi + 0x11e]
mov byte [rsp + 0x11e], al
movzx eax, word [rsi + 0x11c]
mov word [rsp + 0x11c], ax
mov rsi, qword [rsp + 0x638]
test sil, 1
jne 0x14015783e
lock dec qword [rsi + 0x20]
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xb0]
jne 0x14015788d
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x14015787c
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14015787c
lea ecx, [rax - 0xc]
movzx ecx, cl
cmp cl, 9
mov edx, 9
cmovae ecx, edx
cmp cl, 7
je 0x1401577f2
movzx ecx, cl
cmp ecx, 9
jne 0x14015754c
xor r12d, r12d
mov dword [rsp + 0x38], 1
mov cl, 1
mov dword [rsp + 0x78], ecx
test bl, 4
jne 0x14015755d
add al, 0xfd
mov edi, 0
mov ebx, 0
mov r14d, 0
lea r15, [0x140223388]
lea rbp, str.combase.dll
cmp al, 9
jb 0x140157572
mov r8d, 0x140
lea rsi, [rsp + 0x200]
mov rcx, rsi
lea rdx, [rsp + 0x500]
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x3f0]
cmp dword [rax], 2
je 0x1401574ed
mov rcx, qword [rsp + 0x680]
call fcn.14004a430
mov rcx, qword [rsp + 0x7e0]
call fcn.140038570
mov r8d, 0x140
mov rcx, qword [rsp + 0x3f0]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x50], 9
mov rbp, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x108]
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0x98]
mov r9d, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xbc]
mov r10d, dword [rsp + 0xb8]
mov r11d, dword [rsp + 0xc4]
jmp 0x140157622
xor r12d, r12d
mov dword [rsp + 0x38], 1
mov al, 1
mov dword [rsp + 0x78], eax
xor edi, edi
xor ebx, ebx
xor r14d, r14d
lea r15, [0x140223388]
lea rbp, str.combase.dll
lea rcx, [rsp + 0x508]
call fcn.14004a430
mov rsi, qword [rsp + 0x638]
test sil, 1
jne 0x1401575c9
lock dec qword [rsi + 0x20]
mov al, 1
mov dword [rsp + 0x5c], eax
jne 0x1401575e0
mov byte [rsp + 0x50], 0xa
mov rax, qword [rsi + 0x20]
cmp qword [rsi + 8], 0
je 0x1401575bb
mov r8, qword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
jmp 0x140157600
shr rsi, 5
mov al, 1
mov dword [rsp + 0x5c], eax
mov rax, qword [rsp + 0x630]
add rax, rsi
jne 0x1401575e7
mov byte [rsp + 0x50], 0xa
jmp 0x140157605
mov byte [rsp + 0x50], 0xa
mov r8, qword [rsp + 0x620]
sub r8, rsi
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov eax, edi
mov edi, ebx
mov r11d, eax
mov r10d, r12d
mov r9d, r14d
mov eax, dword [rsp + 0x78]
mov r8d, eax
mov rcx, r15
mov eax, dword [rsp + 0x38]
mov edx, eax
mov ebx, r11d
mov eax, r9d
mov r9d, r8d
mov r8, rcx
mov ecx, eax
mov r11d, edx
mov rdx, qword [rsp + 0xaf0]
cmp rdx, 2
jne 0x140157009
nop word cs:[rax + rax]
mov r14, rbp
movzx ebp, byte [rsp + 0x50]
mov rsi, qword [rsp + 0x360]
test sil, 1
je 0x14015464c
shr rsi, 5
mov rax, qword [rsp + 0x358]
add rax, rsi
je 0x1401576d0
mov qword [rsp + 0x98], r8
mov r8, qword [rsp + 0x348]
sub r8, rsi
mov r12d, ecx
mov rcx, qword [0x1402d9150]
xor edx, edx
mov esi, r10d
mov r15d, edi
mov edi, ebx
mov ebx, ebp
mov ebp, r11d
mov r13, r14
mov r14d, r9d
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x98]
mov ecx, r12d
mov r9d, r14d
mov r14, r13
mov r11d, ebp
mov ebp, ebx
mov ebx, edi
mov edi, r15d
mov r10d, esi
movzx esi, byte [rsp + 0x47]
mov edx, dword [rsp + 0x1a4]
cmp bpl, 0xa
je 0x140157c08
mov r15d, ebp
mov ebp, edx
mov eax, r11d
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x108], r8
mov eax, r9d
mov qword [rsp + 0x98], rax
mov dword [rsp + 0xd0], ecx
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0xc4], ebx
mov dword [rsp + 0xb8], r10d
mov byte [rsp + 0x47], sil
mov r12, qword [rsp + 0x60]
mov rsi, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xb0]
movzx eax, byte [rsp + 0x39e]
mov byte [rsp + 0x392], al
movzx eax, word [rsp + 0x39c]
mov word [rsp + 0x390], ax
mov r8d, 0xd8
lea rcx, [rsp + 0xed0]
lea rdx, [rsp + 0x990]
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x398]
mov word [rsp + 0x38c], ax
movzx eax, byte [rsp + 0x39a]
mov byte [rsp + 0x38e], al
movzx eax, word [rsp + 0x394]
mov word [rsp + 0x388], ax
movzx eax, byte [rsp + 0x396]
mov byte [rsp + 0x38a], al
cmp r15b, 9
jne 0x140157ab0
mov dword [rsp + 0x1a4], ebp
mov r15, r13
cmp byte [r12 + 0x1c2], 0
jne 0x140154530
jmp 0x140154350
movabs rax, 0xffffffff00000000
mov r15, qword [rsp + 0x108]
and r15, rax
or r15, 1
mov dword [rsp + 0x78], 0
mov r12d, dword [rsp + 0xb8]
mov edi, dword [rsp + 0xc4]
mov ebx, dword [rsp + 0xbc]
mov r14d, dword [rsp + 0xd0]
mov rbp, qword [rsp + 0x148]
jmp 0x140157572
shr rsi, 5
mov rax, qword [rsp + 0x630]
add rax, rsi
mov r12, qword [rsp + 0x60]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xb0]
invalid
je 0x14015788d
add byte [rdi + rbx + 0x48], dh
mov eax, dword [rsp + 0x620]
mov rax, qword [rsp + 0x620]
sub rax, rsi
mov rsi, rax
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov ecx, ebp
add cl, cl
or cl, 1
mov al, 1
mov dword [rsp + 0x5c], eax
mov qword [rsp + 0x1d0], rax
mov rsi, r14
mov r14d, ecx
jmp 0x140156d39
invalid
invalid
invalid
mov r14, rdi
mov rax, qword [r12 + 0x1b0]
cmp rax, rsi
jne 0x1401578e2
mov edx, 0x40
mov rcx, qword [rsp + 0x4b0]
call fcn.1400381c0
mov rsi, qword [r12 + 0x1a8]
mov rax, qword [r12 + 0x1b0]
mov rdi, qword [r12 + 0x1a0]
add rdi, rsi
sub rax, rsi
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x210]
movups xmmword [rax], xmm6
mov rcx, qword [r12 + 0x188]
mov rax, qword [r12 + 0x190]
mov rdx, qword [rsp + 0x130]
lea r8, [rsp + 0x200]
call qword [rax + 0x18]
test rax, rax
jne 0x140157fae
test rdx, rdx
jne 0x140157989
mov rax, qword [rsp + 0x210]
cmp rax, qword [rsp + 0x208]
add byte [rdi], cl
xchg eax, eax
mov al, byte [rax]
invalid
add byte [rdi], cl
xchg eax, eax
mov al, byte [rax]
add byte [rax + 0x3b], cl
mov esp, 0x20024
add byte [rdi], cl
test dword [rdx + 0x4800008a], esi
add esi, eax
cmp rdi, qword [rsp + 0x200]
jne 0x140160412
add rsi, rax
cmp rsi, qword [r12 + 0x1b0]
ja 0x140160412
mov rdi, r14
mov qword [r12 + 0x1a8], rsi
test rax, rax
je case.0x140154715.19
xor eax, eax
jmp 0x1401579a0
mov rbx, rdx
mov rsi, rbp
ror dword [rax - 0x77], cl
out dx, al
mov eax, 1
mov cl, 1
xor edi, edi
jmp 0x14015453d
mov byte [r12 + 0x1c0], al
mov byte [r12 + 0x1c1], 1
and al, 0xc1
add dword [rax], eax
add byte [rcx], al
and al, 0xc1
add dword [rax], eax
add byte [rcx], al
cmp byte [r12 + 0x1c2], 0
mov rsi, rbp
mov esi, ebp
jne 0x140154530
test al, al
jne 0x14015436a
lea rcx, [rsp + 0x200]
mov rdx, r12
mov r8, qword [rsp + 0x4b0]
call fcn.1401ded70
cmp qword [rsp + 0x200], 0
mov rax, qword [rsp + 0x208]
jne 0x1401543df
mov rcx, qword [rsp + 0x210]
lea rdx, [rsp + 0x218]
movdqu xmm0, xmmword [rdx]
movdqa xmmword [rsp + 0x500], xmm0
test rax, rax
jne 0x140157a71
mov byte [r12 + 0x1c1], 0
mov rsi, qword [r12 + 0x1a8]
cmp qword [r12 + 0x1b0], rsi
jne 0x140157a51
mov edx, 1
mov rcx, qword [rsp + 0x4b0]
call fcn.1400381c0
mov rsi, qword [r12 + 0x1a8]
cmp rsi, 0xffffffffffffffff
jne 0x1401578b0
mov al, 1
cmp byte [r12 + 0x1c0], 0
je 0x1401579a0
jmp 0x140157d36
movdqa xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0xed0], xmm0
mov rdi, rax
mov rbx, rcx
mov ebx, ecx
mov ebx, ecx
test rdi, rdi
jne 0x140154557
mov eax, ebx
and eax, 3
lea rdx, [0x1401fd0b0]
movsxd rcx, dword [rdx + rax*4]
add rcx, rdx
jmp rcx
movzx ecx, byte [rbx + 0x10]
jmp 0x140157d57
mov dword [rsp + 0x38], r15d
mov r15, r13
mov eax, dword [rsp + 0x114]
shl eax, 0x10
movzx ecx, byte [rsp + 0x5c]
shl ecx, 8
or ecx, eax
mov rsi, qword [rsp + 0x98]
movzx eax, sil
or eax, ecx
mov qword [rsp + 0x180], rax
movzx eax, byte [rsp + 0x392]
mov byte [rsp + 0x382], al
movzx eax, word [rsp + 0x390]
mov word [rsp + 0x380], ax
mov r8d, 0xd8
lea rcx, [rsp + 0xdb0]
lea rdx, [rsp + 0xed0]
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x38c]
mov word [rsp + 0x37c], ax
movzx eax, byte [rsp + 0x38e]
mov byte [rsp + 0x37e], al
movzx eax, word [rsp + 0x388]
mov word [rsp + 0x378], ax
movzx eax, byte [rsp + 0x38a]
mov byte [rsp + 0x37a], al
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x6c], al
and al, 0xb8
add byte [rax], al
add byte [rbx + 0xc4249c], cl
add byte [rax], al
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x6c], al
and al, 0xb8
add byte [rax], al
add byte [rbx + 0xc4249c], cl
add byte [rax], al
mov edi, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xd0]
mov r9d, esi
mov r8, qword [rsp + 0x108]
mov r14, qword [rsp + 0x148]
mov rax, qword [rsp + 0xd8]
mov r11d, eax
mov eax, dword [rsp + 0x3c8]
mov dword [rsp + 0x4ec], eax
mov eax, dword [rsp + 0x3cc]
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0x3d0]
mov dword [rsp + 0x4e4], eax
mov eax, dword [rsp + 0xfc]
mov byte [rsp + 0x106], al
mov eax, dword [rsp + 0x100]
mov byte [rsp + 0x105], al
mov eax, dword [rsp + 0x1a0]
mov byte [rsp + 0xa6], al
jmp 0x140157c76
mov r14b, 0xa
mov rdx, qword [rsp + 0xb90]
add byte [rax], al
cmp rdx, 2
jne 0x140157ed6
jmp 0x140157fd0
mov ebp, edx
mov eax, dword [rsp + 0x114]
shl eax, 0x10
mov r15, r8
mov r8d, ecx
movzx ecx, byte [rsp + 0x5c]
shl ecx, 8
or ecx, eax
movzx eax, r9b
or eax, ecx
mov ecx, r8d
mov qword [rsp + 0x180], rax
add byte [rcx], 0
invalid
mov al, 9
add byte [rcx], 0
add byte [rax + 0x24448909], dh
mov dword [rsp + 0x38], eax
invalid
invalid
je 0x140157c63
mov dword [rsp + 0x38], eax
mov byte [rsp + 0x47], sil
mov dword [rsp + 0xb8], r10d
mov dword [rsp + 0xb8], r10d
mov dword [rsp + 0xc4], ebx
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0xd0], r8d
mov dword [rsp + 0xd0], eax
mov dword [rsp + 0xd0], eax
mov qword [rsp + 0x108], r15
mov qword [rsp + 0x148], r14
add dword [rax], eax
add byte [rcx + rcx*4 - 0x4c], cl
and al, 0x48
add dword [rax], eax
add byte [rbp - 0x77], cl
clc
mov dword [rsp + 0x148], esi
mov r8, r15
mov r15, qword [rsp + 0x70]
mov rax, r8
mov eax, eax
shr rax, 0x20
mov qword [rsp + 0x3e0], rax
mov dword [rsp + 0x170], ecx
mov dword [rsp + 0x158], edi
mov dword [rsp + 0x16c], ebx
mov dword [rsp + 0x168], r10d
mov eax, r9d
mov qword [rsp + 0x98], rax
mov eax, r11d
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x1d0]
mov word [rsp + 0x4fe], ax
movzx eax, byte [rsp + 0x17f]
mov byte [rsp + 0x17e], al
test byte [rsi + rdi*2], ah
add dword [rax], eax
add byte [rcx + rcx*4 - 0x4c], cl
and al, 0x98
add al, 0
add byte [rcx + rcx*4 - 0x40], al
test byte [rsi + rdi*2], ah
add dword [rax], eax
add byte [rcx + rcx*4 - 0x4c], cl
and al, 0x98
add al, 0
add byte [rcx + rcx*4 - 0x40], al
mov dword [rsp + 0x164], r8d
mov dword [rsp + 0x160], r11d
mov dword [rsp + 0x1a4], ebp
mov dword [rsp + 0x140], ebp
mov r12, qword [rsp + 0x60]
mov rsi, qword [rsp + 0xa8]
mov ah, 0x24
test al, 0
add byte [rax], al
mov ah, 0x24
test al, 0
add byte [rax], al
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb0]
mov r14d, dword [rsp + 0x38]
mov rdx, qword [rsp + 0xb90]
cmp rdx, 2
jne 0x140157ed6
jmp 0x140157fd0
add al, byte [rax]
add byte [rcx - 0x4a], al
or cl, byte [rax - 0x77]
out dx, al
mov r14b, 0xa
mov rsi, rbp
mov rdx, qword [rsp + 0xb90]
cmp rdx, 2
jne 0x140157ed6
add dword [rax], eax
invalid
or eax, dword [rax]
add byte [rax - 0x7d], cl
cli
add cl, byte [rdi]
test dword [rax - 0x16ffffff], ecx
add dword [rax], eax
add cl, ch
add dword [rax], eax
add cl, ch
jmp 0x140157fd0
jge case.0x140157aa5.1
add byte [rax], al
movzx ecx, byte [rbx + 0xf]
cmp cl, 0x15
jne case.0x140157aa5.2
test ebp, ecx
add byte [rax], al
invalid
test ebp, ecx
add byte [rax], al
add byte [rax - 0x73], cl
dec byte [rax - 0x7d]
stc
add cl, byte [rdi]
invalid
lea rcx, [rax - 2]
cmp rcx, 2
jb case.0x140157aa5.2
test rax, rax
je case.0x140157aa5.2
mov rcx, qword [rbx - 1]
mov rax, qword [rbx + 7]
call qword [rax + 0x38]
movabs rcx, 0x468c1389e5bc1b95
xor rdx, rcx
xor rdx, rcx
movabs rcx, 0xe515a9a63d460cb2
xor rax, rcx
enter 0x948, 0xffffffffffffffd0
enter 0x948, 0xffffffffffffffd0
jne case.0x140157aa5.2
test dword [rax + 0x49000000], ecx
mov esi, esi
mov r14, rsi
lea rax, [0x140223388]
mov qword [rsp + 0x208], rax
lea rax, str.combase.dll
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0x218]
movups xmmword [rax], xmm6
mov dword [rsp + 0x204], 6
mov word [rsp + 0x200], 0x101
add byte [rdx], al
add byte [rax], al
add dword [rcx], eax
add byte [rdx], al
add byte [rax], al
add dword [rcx], eax
add al, byte [rax]
add byte [rcx], al
add dword [rax - 0x75], ecx
jae 0x140157de9
mov rsi, qword [rbx - 1]
dec dword [rax - 0x75]
jnp 0x140157df5
mov rdi, qword [rbx + 7]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140157e16
jg 0x140157dff
add byte [rsp + rbx + 0x48], dh
cmp dword [rdi + 0x10], 0x11
cmp qword [rdi + 0x10], 0x11
jb 0x140157e05
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
ror byte [rcx - 0x77], cl
invalid
call sub.kernel32.dll_HeapFree
ror byte [rcx - 0x77], cl
invalid
lea r8, [rbx - 1]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, r14
jmp 0x140157e3d
lea rcx, [rsp + 0x200]
mov rdx, rbx
call fcn.14004ca40
out dx, eax
invalid
out dx, eax
dec dword [rbx + 0x2002484]
add byte [rax], al
mov eax, dword [rsp + 0x200]
mov qword [rsp + 0x180], rax
mov eax, dword [rsp + 0x204]
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x164], eax
mov eax, dword [rsp + 0x20c]
or al, 2
add byte [rax], al
or al, 2
add byte [rax], al
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x210]
adc byte [rdx], al
add byte [rax], al
adc byte [rdx], al
add byte [rax], al
mov qword [rsp + 0x498], rax
mov dword [rsp + 0x498], eax
mov eax, dword [rsp + 0x218]
mov dword [rsp + 0x168], eax
mov eax, dword [rsp + 0x21c]
mov dword [rsp + 0x16c], eax
add byte [rcx + 0x16c2484], cl
add byte [rax], al
mov eax, dword [rsp + 0x220]
mov dword [rsp + 0x158], eax
test byte [rax + rbx*2], ah
add dword [rax], eax
add byte [rbx + 0x2242484], cl
add byte [rax], al
test byte [rax + rbx*2], ah
add dword [rax], eax
add byte [rbx + 0x2242484], cl
add byte [rax], al
mov dword [rsp + 0x170], eax
jo 0x140157ebe
add byte [rax], al
add byte [rcx - 0x4a], al
or dword [rcx], esi
dec dword [rax - 0x75]
xchg esp, eax
and al, 0x90
or eax, dword [rax]
add byte [rax - 0x7d], cl
cli
add cl, byte [rdi]
test dl, bh
add byte [rax], al
add byte [rax - 0x75], cl
mov word [rax + rbx*4], fs
or eax, dword [rax]
add byte [rax - 0x75], cl
test byte [rax + riz*4], ah
or eax, dword [rax]
add byte [rax - 0x7b], cl
sal byte [rdx + rdx + 0x48], cl
mov edx, dword [rax + 0x10]
mov r14b, 9
mov dh, 9
xor edi, edi
mov rdx, qword [rsp + 0xb90]
cmp rdx, 2
je 0x140157fd0
mov rcx, qword [rsp + 0xb98]
mov rax, qword [rsp + 0xba0]
test rdx, rdx
je 0x140157efd
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xba8]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xb90]
cmp rdx, 2
je 0x140157fd0
and al, 0xa8
or eax, dword [rax]
add bh, bh
push rax
push 0x24948b48
nop
or eax, dword [rax]
add byte [rax - 0x7d], cl
cli
add cl, byte [rdi]
test byte [rsi + 0x48000000], dh
mov ecx, dword [rsp + 0xb98]
mov rcx, qword [rsp + 0xb98]
mov rax, qword [rsp + 0xba0]
test rdx, rdx
je 0x140157f41
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add ecx, edx
add ecx, edx
add rcx, 0x10
mov rdx, qword [rsp + 0xba8]
call qword [rax + pe_nt_image_headers64]
add byte [rax], 0
add byte [rax - 0x75], cl
test byte [rax + rdx*4], ah
or eax, dword [rax]
add byte [rax - 0x7d], cl
clc
invalid
je 0x140157fd0
add byte [rax], 0
add byte [rax - 0x75], cl
test byte [rax + rdx*4], ah
or eax, dword [rax]
add byte [rax - 0x7d], cl
clc
add dh, byte [rbx + rsi*2 + 0x48]
test eax, eax
test rax, rax
je 0x140157fd0
mov rax, qword [rsp + 0xb98]
lock dec qword [rax]
or eax, dword [rax]
add al, dh
dec qword [rax]
jne 0x140157fd0
mov rcx, qword [rsp + 0xb98]
mov rdx, qword [rsp + 0xba0]
call fcn.14014cf70
jmp 0x140157fd0
add byte [rax - 0x75], cl
xchg esp, eax
and al, 0xa0
or eax, dword [rax]
add al, ch
jmp 0x140157fd2
sub byte [rdi], cl
xchg dword [rax + 0x48000024], ecx
lea edx, [0x1401fd0c0]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rdi, r14
mov r14b, 0xb
mov rsi, rbp
mov rdx, qword [rsp + 0xb90]
or eax, dword [rax]
add byte [rax - 0x7d], cl
cli
add cl, byte [rdi]
invalid
invalid
invalid
invalid
invalid
or eax, dword [rax]
add byte [rax - 0x7d], cl
cli
add cl, byte [rdi]
test dword [0x150157fc9], ecx
invalid
nop dword [rax]
mov qword [rsp + 0xa8], rsi
mov ah, 0x24
test al, 0
add byte [rax], al
cmp r14b, 0xa
mov qword [rsp + 0xb0], rdi
je 0x1401582f0
movzx esi, r14b
cmp esi, 9
mov rdi, qword [rsp + 0x88]
je 0x14015d3fd
cmp esi, 0xb
je case.default.0x14015808e
movzx eax, byte [rsp + 0x382]
mov byte [rsp + 0x11a], al
movzx eax, word [rsp + 0x380]
mov word [rsp + 0x118], ax
mov r8d, 0xd8
lea rcx, [rsp + 0xff0]
lea rdx, [rsp + 0xdb0]
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x37c]
mov word [rsp + 0x178], ax
movzx eax, byte [rsp + 0x37e]
mov byte [rsp + 0x17a], al
movzx eax, word [rsp + 0x378]
mov word [rsp + 0x174], ax
je 0x140158070
add byte [rax], al
je 0x140158070
add byte [rax], al
add byte [rdi], cl
mov dh, 0x84
and al, 0x7a
add eax, dword [rax]
add byte [rax + 0x1762484], cl
add byte [rax], al
movzx eax, byte [rsp + 0x37a]
mov byte [rsp + 0x176], al
lea rcx, [0x1401fd164]
movsxd rax, dword [rcx + rsi*4]
add rax, rcx
jmp rax
mov qword [rsp + 0x48], rbx
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0x990], eax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x994], eax
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x998], eax
mov rax, qword [rsp + 0x3e0]
mov dword [rsp + 0x99c], eax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x9a0], rax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x9a8], eax
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0x9ac], eax
mov esi, dword [rsp + 0x158]
mov dword [rsp + 0x9b0], esi
mov eax, dword [rsp + 0x170]
add dword [rax], eax
add byte [rcx + 0x9b42484], cl
add byte [rax], al
add dword [rax], eax
add byte [rcx + 0x9b42484], cl
add byte [rax], al
mov r14, qword [rsp + 0x8a0]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
mov ah, 0x24
movabs al, byte [0x45e8f1894c000008]
stosb byte [rdi], al
or dword [rax], eax
movzx eax, byte [r14 + 8]
test al, al
jne 0x140160412
lea rdi, [r14 + 0x10]
movzx ebx, byte [rsp + 0x8b0]
mov r13, qword [rsp + 0x8a8]
lea rdx, [r14 + 0x1a8]
add byte [rax], al
add byte [rax], al
lea rcx, [rsp + 0x200]
mov r8d, esi
invalid
call fcn.1400527f0
cmp qword [rsp + 0x200], 0
je 0x14015913e
invalid
movdqu xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0xed0], xmm0
mov rcx, r13
call sub.kernel32.dll_AcquireSRWLockExclusive
mov qword [rsp + 0x78], r13
movzx eax, byte [r13 + 8]
test al, al
jne 0x140160412
movups xmm0, xmmword [rsp + 0x990]
movaps xmmword [rsp + 0x690], xmm0
mov rbp, qword [rsp + 0x9a0]
lea rax, [rsp + 0x9a8]
movdqu xmm0, xmmword [rax]
lea rax, [rsp + 0x6a8]
movdqu xmmword [rax], xmm0
mov r15, qword [rsp + 0xed0]
mov esi, dword [rsp + 0xed8]
cmp qword [r15 + 0x10], rsi
mov r9d, dword [rsp + 0x3b0]
jbe 0x140160412
mov rax, qword [r15]
test rax, rax
je 0x140160412
imul r12, rsi, 0x130
cmp dword [rax + r12], 2
je 0x140160412
out 0x30, al
add dword [rax], eax
add byte [rdx - 0x7d], al
cmp al, 0x20
add cl, byte [rdi]
test byte [rcx], cl
invalid
mov ebx, dword [rsp + 0xedc]
add rax, r12
cmp dword [rax + 0x114], ebx
jne 0x140160412
add byte [rax], al
add byte [rax], al
mov r10d, dword [rax + 0x48]
mov qword [rsp + 0x6a0], rbp
test rbp, 0xffffffff80000000
jne 0x140160412
cmp qword [r15 + 0x10], rsi
cmp dword [rdi + 0x10], esi
jbe 0x140160412
mov rax, qword [r15]
test rax, rax
je 0x140160412
test ah, al
invalid
add byte [rax], al
test ah, al
add dword [rax], 0x3c834200
and byte [rdx], al
cmp dword [rax + r12], 2
je 0x140160412
add rax, r12
cmp dword [rax + 0x114], ebx
jne 0x140160412
lea rcx, [r14 + 0x160]
mov qword [rsp + 0xc8], rcx
movzx ecx, byte [rax + 0x50]
push rax
push rax
cmp cl, 5
mov dword [rsp + 0x128], r10d
ja 0x140159109
lea edx, [rcx - 3]
cmp dl, 3
movzx edx, dl
mov r8d, 1
cmovae edx, r8d
cmp dl, 2
je 0x1401582bf
movzx edx, dl
cmp edx, 1
cli
add dword [rdi], ecx
test dword [rcx + 0xe], ebx
add byte [rax], al
cli
add dword [rdi], ecx
test dword [rcx + 0xe], ebx
add byte [rax], al
cmp cl, 1
ja 0x1401582bf
cmp byte [rax + 0x51], 2
jae 0x140159109
mov eax, dword [r14 + 0x58]
xor r13d, r13d
test eax, eax
mov ecx, 0
cmovg ecx, eax
cmp ecx, ebp
jae 0x140159d68
mov dword [rsp + 0x50], 3
mov al, 1
mov dword [rsp + 0x38], eax
jmp 0x140159bdb
sbb byte [rax], al
invalid
sbb byte [rax], al
add byte [rdi], cl
invalid
lea rcx, [rsp + 0x8a0]
xor edx, edx
call fcn.14019b0f0
mov esi, 3
test al, al
mov edx, dword [rsp + 0x58]
pop rax
pop rax
mov rdi, qword [rsp + 0x88]
je 0x14015bb44
jmp 0x140160412
movzx eax, byte [rsp + 0x11a]
mov byte [rsp + 0x376], al
movzx eax, word [rsp + 0x118]
mov word [rsp + 0x374], ax
mov dword [rsp + 0x374], eax
mov dword [rsp + 0x374], eax
mov rcx, qword [rsp + 0x180]
mov eax, ecx
shr eax, 8
mov dword [rsp + 0x4f4], eax
mov eax, ecx
shr eax, 0x10
mov dword [rsp + 0x4f0], eax
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x808], eax
mov edx, dword [rsp + 0x158]
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x15c], eax
add byte [rax], al
add byte [rax], al
mov eax, dword [rsp + 0x4ec]
mov dword [rsp + 0x938], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x934], eax
mov eax, dword [rsp + 0x4e4]
mov dword [rsp + 0x930], eax
mov rdi, qword [rsp + 0x498]
mov rbp, qword [rsp + 0x3e0]
mov r15d, ebp
mov eax, dword [rsp + 0x164]
test byte [rsp + riz*2], ah
add dword [rax], eax
add byte [rcx + 0x8042484], cl
add byte [rax], al
test byte [rsp + riz*2], ah
add dword [rax], eax
add byte [rcx + 0x8042484], cl
add byte [rax], al
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x800], eax
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0x107], al
mov eax, ecx
mov byte [rsp + 0x1c8], cl
mov eax, dword [rsp + 0x140]
mov esi, eax
jmp 0x14015bb44
invalid
add byte [rcx + rcx*4 - 3], cl
mov rbp, r15
movzx eax, byte [rsp + 0x11a]
lea rsi, [rsp + 0xde5]
mov byte [rsi + 2], al
movzx eax, word [rsp + 0x118]
mov word [rsi], ax
mov r8d, 0xd8
lea rcx, [rsp + 0xde8]
lea rdx, [rsp + 0xff0]
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsp + 0x17a]
mov byte [rsi + 0xde], al
movzx eax, word [rsp + 0x178]
mov word [rsi + 0xdc], ax
movzx eax, byte [rsp + 0x176]
mov byte [rsi + 0xe2], al
movzx eax, word [rsp + 0x174]
mov word [rsi + 0xe0], ax
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0xdb0], eax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0xdb4], eax
mov ah, 0xd
add byte [rax], al
mov ah, 0xd
add byte [rax], al
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0xdb8], eax
mov rax, qword [rsp + 0x3e0]
mov dword [rsp + 0xdbc], eax
mov rax, qword [rsp + 0x498]
add al, 0
add byte [rax - 0x77], cl
test byte [rax + rax*8], ah
and al, 0xc0
or eax, 0x848b0000
and al, 0x68
add dword [rax], eax
add byte [rcx + 0xdc82484], cl
add byte [rax], al
add al, 0
add byte [rax - 0x77], cl
test byte [rax + rax*8], ah
and al, 0xc0
and al, 0xc0
or eax, 0x848b0000
and al, 0x68
add dword [rax], eax
add byte [rcx + 0xdc82484], cl
add byte [rax], al
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0xdcc], eax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0xdd0], eax
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0xdd4], eax
or eax, 0x848b0000
and al, 0xe4
add al, 0
add byte [rcx + 0xdd82484], cl
add byte [rax], al
or eax, 0x848b0000
and al, 0xe4
add al, 0
add byte [rcx + 0xdd82484], cl
add byte [rax], al
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0xddc], eax
mov eax, dword [rsp + 0x4ec]
mov dword [rsp + 0xde0], eax
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0xde4], al
movzx eax, byte [rsp + 0x105]
mov byte [rsp + 0xec0], al
movzx eax, byte [rsp + 0x106]
mov byte [rsp + 0xec4], al
mov r14, qword [rsp + 0x8a0]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 8]
test al, al
jne 0x140160412
mov r15d, dword [rsp + 0xec0]
cmp r15d, dword [r14 + 0xa8]
jbe 0x140158e42
mov al, 3
mov dword [rsp + 0x38], eax
mov r15, rbp
jmp 0x1401590f7
mov qword [rsp + 0x48], rbx
movzx eax, byte [rsp + 0x11a]
mov dh, 0x84
and al, 0x1a
add dword [rax], eax
add byte [rax - 0x73], cl
mov ah, 0x24
add dword [0x1869d85af], eax
movzx eax, word ss:[rsp + 0x118]
mov dh, 0x84
and al, 0x1a
add dword [rax], eax
add byte [rax - 0x73], cl
mov ah, 0x24
add dword [0x1869d85af], eax
movzx eax, word ss:[rsp + 0x118]
mov word [rsi + 0x34], ax
mov r8d, 0xd8
lea rcx, [rsp + 0x538]
lea rdx, [rsp + 0xff0]
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsp + 0x17a]
add byte [rax + 0x11286], cl
add byte [rdi], cl
mov bh, 0x84
and al, 0x78
add dword [rax], eax
add byte [rsi - 0x77], ah
xchg byte [rax], dl
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x84
and al, 0x76
add dword [rax], eax
add byte [rax + 0x11686], cl
add byte [rdi], cl
mov bh, 0x84
and al, 0x74
add dword [rax], eax
add byte [rsi - 0x77], ah
xchg byte [rcx + rax], dl
add byte [rax], al
add byte [rax + 0x11286], cl
add byte [rdi], cl
mov bh, 0x84
and al, 0x78
add dword [rax], eax
add byte [rsi - 0x77], ah
xchg byte [rax], dl
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x84
and al, 0x76
add dword [rax], eax
add byte [rax + 0x11686], cl
add byte [rdi], cl
mov bh, 0x84
and al, 0x74
add dword [rax], eax
add byte [rsi - 0x77], ah
xchg byte [rcx + rax], dl
add byte [rax], al
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0x500], eax
add byte [rax], al
add byte [rax], al
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x504], eax
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x508], eax
mov rax, qword [rsp + 0x3e0]
mov dword [rsp + 0x50c], eax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x510], rax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0x51c], eax
mov eax, dword [rsp + 0x158]
add byte [rax], al
add byte [rax], al
mov dword [rsp + 0x520], eax
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x524], eax
mov eax, dword [rsp + 0x4e4]
mov dword [rsp + 0x528], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x52c], eax
add byte [rbx + 0x4ec2484], cl
add byte [rax], al
add byte [rbx + 0x4ec2484], cl
add byte [rax], al
mov dword [rsp + 0x530], eax
movzx eax, byte [rsp + 0xa6]
mov byte [rsp + 0x534], al
movzx eax, byte [rsp + 0x105]
mov byte [rsp + 0x610], al
add byte [rdi], cl
mov dh, 0x84
and al, 6
add dword [rax], eax
add byte [rax + 0x6142484], cl
add byte [rax], al
add byte [rdi], cl
mov dh, 0x84
and al, 6
add dword [rax], eax
add byte [rax + 0x6142484], cl
add byte [rax], al
mov rdi, qword [rsp + 0x8a0]
mov rcx, rdi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 8]
test al, al
jne 0x140160412
mov r14, qword [rsp + 0x8a8]
mov esi, dword [rsp + 0x608]
mov r15d, dword [rsp + 0x60c]
add byte [rbp + rcx*4 - 0x51], cl
test al, 1
add byte [rax], al
add byte [rbp + rcx*4 - 0x51], cl
test al, 1
add byte [rax], al
lea rcx, [rsp + 0x690]
mov rdx, r13
mov r8d, esi
call fcn.1400527f0
mov rax, qword [rsp + 0x690]
xor ebx, ebx
test rax, rax
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x50], rdi
je 0x14015958e
mov dl, 3
cmp esi, dword [rdi + 0xa8]
add byte [rax], al
add byte [rdi], cl
xchg byte [rax + 0xd], dh
add byte [rax], al
add byte [rax], al
add byte [rdi], cl
xchg byte [rax + 0xd], dh
add byte [rax], al
mov ebx, dword [rsp + 0x3b4]
mov eax, dword [rsp + 0x4e0]
mov dword [rsp + 0x78], eax
movzx esi, byte [rsp + 0x97]
mov edi, dword [rsp + 0x3c0]
mov r12d, dword [rsp + 0x3bc]
mov ebp, dword [rsp + 0x3b8]
mov r13, qword [rsp + 0x850]
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x48
or byte [rax], al
add byte [rcx - 0x16c7dbac], cl
out dx, al
sbb eax, dword [rax]
invalid
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x48
or byte [rax], al
add byte [rcx - 0x16c7dbac], cl
out dx, al
sbb eax, dword [rax]
add byte [rax - 0x75], cl
mov rax, qword [rsp + 0x898]
cmp byte [rax + 8], 0
jne 0x140160412
mov rax, qword [rsp + 0x898]
cmp byte [rax + 8], 0
jne 0x140160412
movzx ecx, word [rsp + 0x4fe]
mov edx, dword [rsp + 0x140]
shl rdx, 0x10
or rdx, rcx
mov rcx, qword [rsp + 0x180]
shl rcx, 0x30
or rcx, rdx
cmp byte [rsp + 0x17e], 0
je 0x14015915b
movzx edx, byte [rax + 0x11]
mov r8, qword [rax + 0x12]
mov byte [rax + 0x11], 2
cmp dl, 2
je 0x140159841
cmp r8, rcx
jne 0x14015983e
movabs rax, 0x54fe9b8bf0a27b0b
cmp rcx, rax
jne 0x140160412
mov rdi, qword [rsp + 0x888]
cmp dword [rdi + 0x28], 0
je 0x140160412
mov r14, rbx
mov rsi, qword [rsp + 0x8a0]
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rsi + 8]
test al, al
jne 0x140160412
mov ebx, dword [rsi + 0xa4]
mov rcx, rsi
add byte [rax], al
add byte [rax - 0x77], cl
int1
call fcn.1401f2d54
movaps xmmword [rsp + 0x200], xmm6
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rsi + 8]
test al, al
jne 0x140160412
cmp dword [rsi + 0xa8], ebx
jb 0x140160412
mov dword [rsi + 0xa8], ebx
mov rcx, rsi
call fcn.1401f2d54
cmp dword [rdi + 0x28], 0
je 0x1401588be
xor eax, eax
cmp ebx, dword [rdi + 0x2c]
setne al
mov ecx, 0xff
cmovb eax, ecx
cmp al, 0xff
je 0x1401588be
movzx eax, al
test eax, eax
jne 0x140160412
mov dword [rdi + 0x28], 1
mov dword [rdi + 0x2c], ebx
mov dword [rdi + 0x30], 0
mov rax, qword [rdi]
test rax, rax
je 0x1401588e6
lea rcx, [rdi + 0x18]
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
call qword [rax + 0x10]
lea rax, [0x14029eac8]
mov qword [rdi], rax
lea rax, str.combase.dll
mov qword [rdi + 8], rax
movdqa xmm0, xmmword [rsp + 0x200]
movdqu xmmword [rdi + 0x10], xmm0
mov dword [rdi + 0x20], ebx
mov dword [rdi + 0x24], 0
mov esi, 2
mov rbx, r14
mov edx, dword [rsp + 0x58]
and al, 0x58
and al, 0x58
mov rdi, qword [rsp + 0x88]
jmp 0x14015bb44
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0x690], eax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x694], eax
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x698], eax
mov rax, qword [rsp + 0x3e0]
add byte [rax], al
add byte [rax], al
mov dword [rsp + 0x69c], eax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x6a0], rax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x6a8], eax
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0x6ac], eax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x6b0], eax
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x6b4], eax
mov r14, qword [rsp + 0x8a0]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 8]
test al, al
jne 0x140160412
mov r13, qword [rsp + 0x8a8]
mov ebp, dword [rsp + 0x8a8]
mov rcx, r13
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r13 + 8]
test al, al
jne 0x140160412
mov ebp, dword [rsp + 0x6b0]
mov ecx, dword [r14 + 0x118]
mov al, 1
mov dword [rsp + 0xc8], ecx
add byte [rax], al
add byte [rax], al
cmp ecx, ebp
jb 0x140159e9d
mov qword [rsp + 0x1c0], r13
mov qword [rsp + 0x48], rbx
add dword [rax], eax
add byte [rax - 0x77], cl
pop rsp
and al, 0x48
mov dword [r14 + 0x118], ebp
mov rax, qword [rsp + 0x690]
mov r8, qword [rsp + 0x698]
mov r9, qword [rsp + 0x6a0]
lea rcx, [rsp + 0x508]
lea rdx, [rsp + 0x6a8]
xchg esp, eax
and al, 0xa8
invalid
add byte [rax], al
call qword [rax]
mov eax, dword [rsp + 0x6b4]
mov dword [rsp + 0x504], eax
mov word [rsp + 0x500], 0x201
mov rax, qword [r14 + 0x1e8]
test rax, rax
mov dword [rsp + 0x50], ebp
je 0x140158f5e
xchg esp, eax
and al, 0xa8
invalid
mov r9d, ebp
lea rcx, [r14 + 0x160]
mov qword [rsp + 0x128], rcx
mov word [rax + rbp], fs
add dword [rax], eax
add byte [rax - 0x75], cl
mov word [rax + rax*8], fs
add dword [rax], eax
add byte [rax - 0x7d], cl
rcl dword [rax], 0x48
mov dword [rsp + 0x78], ecx
mov word [rax + rbp], fs
add dword [rax], eax
add byte [rax - 0x75], cl
mov word [rax + rax*8], fs
add dword [rax], eax
add byte [rax - 0x7d], cl
rcl dword [rax], 0x48
mov dword [rsp + 0x78], ecx
lea rcx, [r14 + 0x1a8]
mov qword [rsp + 0x38], rcx
lea rbp, [r14 + 0xb8]
mov rdi, rax
xor r15d, r15d
invalid
jmp 0x140158af2
invalid
cmp esi, 0x3b9aca00
setne r8b
mov rcx, rbx
lea rdx, [rsp + 0x200]
call fcn.14004af80
mov rax, qword [r14 + 0x1e8]
mov r9d, dword [rsp + 0x50]
cmp rax, rdi
sbb r15, 0xffffffffffffffff
cmp rax, rdi
sbb rdi, 0
cmp r15, rdi
mov r12, qword [rsp + 0x60]
jae 0x140158f5e
cmp qword [r14 + 0x200], r15
jbe 0x140160412
mov rcx, qword [r14 + 0x1f0]
mov r8, r15
shl r8, 4
mov ebx, dword [rcx + r8 + 0xc]
cmp qword [r14 + 0x1b8], rbx
jbe 0x140160412
mov rdx, qword [r14 + 0x1a8]
test rdx, rdx
je 0x140160412
js 0x140158b2e
invalid
js 0x140158b2e
add byte [rcx + rbp*2 - 0x1d], cl
xor byte [rcx], al
add byte [rax], al
imul r12, rbx, 0x130
cmp dword [rdx + r12], 2
and al, byte [rdx]
je 0x140160412
mov r13d, dword [rcx + r8 + 8]
add rdx, r12
cmp dword [rdx + 0x114], r13d
jne 0x140160412
cmp r13d, r9d
jbe 0x140158ad6
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x200], rax
mov dword [rsp + 0x208], ebx
mov dword [rsp + 0x20c], r13d
mov esi, dword [rdx + 0x48]
lea rcx, [rsp + 0x500]
call fcn.14004a080
mov rcx, rbp
mov rdx, qword [rsp + 0x78]
lea r8, [rsp + 0x200]
call fcn.14016c890
cmp qword [r14 + 0x1b8], rbx
jbe 0x140160412
mov rax, qword [r14 + 0x1a8]
test rax, rax
je 0x140160412
invalid
add byte [rdx - 0x7d], al
cmp al, 0x20
add cl, byte [rdi]
test byte [rdx + 0x78], cl
add byte [rax], al
cmp dword [rax + r12], 2
je 0x140160412
add rax, r12
cmp dword [rax + 0x114], r13d
jne 0x140160412
mov edx, dword [rax + 0x84]
test edx, edx
mov rbx, qword [rsp + 0x128]
jle 0x140158ab0
mov dword [rax + 0x84], 0
mov rcx, rbp
mov r8, qword [rsp + 0x38]
mov r9, rbx
call fcn.140051dc0
jmp 0x140158ab0
mov r14, qword [rsp + 0x8a0]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 8]
test al, al
jne 0x140160412
mov r13, qword [rsp + 0x8a8]
mov rcx, r13
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r13 + 8]
test al, al
jne 0x140160412
lea r12, [r14 + 0x1a8]
mov r8d, dword [rsp + 0x140]
test r8d, r8d
je 0x14015916d
lea rbp, [rsp + 0x200]
mov rcx, rbp
mov rdx, r12
mov esi, r8d
call fcn.1400527f0
cmp qword [rsp + 0x200], 0
je 0x14015971e
lea r8, [r13 + 0x10]
lea rcx, [r14 + 0xb0]
lea rax, [r14 + 0x160]
lea rdx, [r14 + 0x150]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
mov rdx, qword [rsp + 0x180]
mov r9, rbp
call fcn.140199cf0
jmp 0x140159bb4
mov r14, qword [rsp + 0x8a0]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 8]
test al, al
jne 0x140160412
mov r8d, dword [rsp + 0x140]
test r8d, r8d
je 0x14015d9d2
cmp dword [r14 + 0xa8], r8d
jb 0x140159bc1
mov r13, qword [rsp + 0x8a8]
lea rdx, [r14 + 0x1a8]
lea rcx, [rsp + 0x500]
mov esi, r8d
call fcn.1400527f0
cmp qword [rsp + 0x500], 0
je 0x1401597fa
movdqu xmm0, xmmword [rsp + 0x500]
movdqa xmmword [rsp + 0x200], xmm0
mov rcx, r13
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [r13 + 8]
test al, al
jne 0x140160412
mov rcx, qword [rsp + 0x200]
mov eax, dword [rsp + 0x208]
cmp qword [rcx + 0x10], rax
mov rdi, qword [rsp + 0x180]
lea rdx, [rsp + 0x200]
jbe 0x140160412
mov rsi, qword [rcx]
test rsi, rsi
je 0x140160412
imul rax, rax, 0x130
cmp dword [rsi + rax], 2
je 0x140160412
mov ecx, dword [rsp + 0x20c]
add rsi, rax
cmp dword [rsi + 0x114], ecx
jne 0x140160412
lea rcx, [r14 + 0x160]
mov r8d, dword [rsi + 0x48]
cmp byte [rsi + 0x126], 0
je 0x140158dda
mov rax, qword [r14 + 0x198]
cmp qword [r14 + 0x190], rax
jbe 0x140159d2c
inc rax
mov qword [r14 + 0x198], rax
mov dword [rsp + 0x38], r8d
mov qword [rsp + 0x48], rcx
movzx eax, byte [rsi + 0x50]
cmp rax, 5
ja 0x140158dfb
cmp byte [rsi + 0x121], 0
je 0x14015ac98
lea ecx, [rax - 6]
cmp cl, 6
jb 0x14015ac85
lea ecx, [rax - 3]
cmp cl, 2
ja 0x140158e18
cmp cl, 1
jne 0x14015ac85
test rax, rax
je 0x14015ac85
cmp eax, 1
jne 0x14015ac67
lea rcx, [rsi + 0x70]
mov rax, qword [rsi + 0x58]
mov rdx, qword [rsi + 0x60]
mov r8, qword [rsi + 0x68]
call qword [rax + 0x10]
jmp 0x14015ac85
mov al, 3
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x48], rbx
lea rax, [r14 + 0x10]
mov qword [rsp + 0x128], rax
movzx eax, byte [rsp + 0x8b0]
mov byte [rsp + 0xc8], al
mov rax, qword [rsp + 0x8a8]
mov qword [rsp + 0x50], rax
lea rax, [r14 + 0x1a8]
mov qword [rsp + 0x78], rax
lea r12, [r14 + 0x1d0]
mov rcx, qword [r14 + 0x208]
mov rdx, qword [r14 + 0x210]
mov r8d, r15d
call fcn.14004c8c0
mov r8, qword [r14 + 0x1f0]
mov rcx, qword [r14 + 0x200]
mov rdx, qword [r14 + 0x1d0]
mov r9, qword [r14 + 0x1d8]
mov r10, rax
shr r10, 0x39
movd xmm0, r10d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r10d, r10d
mov r11, rax
and r11, r9
movdqu xmm1, xmmword [rdx + r11]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r13d, xmm2
test r13w, r13w
je 0x140158f39
tzcnt ebp, r13d
add rbp, r11
and rbp, r9
lea rdi, [rbp*8]
mov rbx, rdx
sub rbx, rdi
mov rbx, qword [rbx - 8]
cmp rcx, rbx
jbe 0x140160412
lea esi, [r13 - 1]
and esi, r13d
mov rdi, rbx
shl rdi, 4
mov r13d, esi
cmp dword [r8 + rdi + 8], r15d
jne 0x140158ef0
jmp 0x14015901e
pcmpeqb xmm1, xmm7
pmovmskb edi, xmm1
test edi, edi
mov rbx, qword [rsp + 0x48]
jne 0x14015a9ec
add r11, r10
add r11, 0x10
add r10, 0x10
jmp 0x140158eda
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x220], rax
movzx eax, word [rsp + 0x500]
movzx ecx, word [rsp + 0x502]
mov edx, dword [rsp + 0x504]
mov r8, qword [rsp + 0x508]
movups xmm0, xmmword [rsp + 0x510]
movaps xmmword [rsp + 0x210], xmm0
mov word [rsp + 0x200], ax
mov word [rsp + 0x202], cx
mov dword [rsp + 0x204], edx
mov qword [rsp + 0x208], r8
movzx eax, byte [r14 + 0x128]
cmp rax, 3
mov rbx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
mov r13, qword [rsp + 0x1c0]
je 0x140159e47
test rax, rax
je 0x140159e47
cmp eax, 1
jne 0x140159e23
lea rcx, [r14 + 0x148]
mov rax, qword [r14 + 0x130]
mov rdx, qword [r14 + 0x138]
mov r8, qword [r14 + 0x140]
call qword [rax + 0x10]
jmp 0x140159e47
neg rbp
lea rax, [rdx + rbp*8]
mov qword [rsp + 0x508], r12
mov qword [rsp + 0x510], rax
mov dword [rsp + 0x518], r15d
cmp rbx, rcx
jae 0x140160412
mov rax, qword [r14 + 0x1f0]
mov r13d, dword [rax + rdi + 8]
mov esi, dword [rax + rdi + 0xc]
mov r12d, esi
cmp qword [r14 + 0x1b8], r12
mov rbx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x50]
jbe 0x140160412
mov rax, qword [r14 + 0x1a8]
test rax, rax
je 0x140160412
imul r15, r12, 0x130
cmp dword [rax + r15], 2
je 0x140160412
add rax, r15
cmp dword [rax + 0x114], r13d
jne 0x140160412
movzx ecx, byte [rax + 0x50]
cmp cl, 5
ja 0x140159319
lea edx, [rcx - 3]
cmp dl, 3
movzx edx, dl
mov r8d, 1
cmovae edx, r8d
cmp dl, 2
je 0x1401590ef
movzx edx, dl
cmp edx, 1
jne 0x140159319
cmp cl, 1
ja 0x1401590ef
mov r12, qword [rsp + 0x60]
mov r15, r9
lea rcx, [rsp + 0xdb0]
call fcn.14004a430
jmp 0x14015bb23
add cl, 0xfa
movzx ecx, cl
cmp cl, 6
mov edx, 6
add byte [rax], al
add byte [rdi], cl
retf 0xf980
add al, 0xf
test ah, ch
invalid
add byte [rax], al
add byte [rax], al
add byte [rdi], cl
retf 0xf980
movzx ecx, cl
cmp ecx, 3
jne 0x14015996b
mov cl, 1
mov dword [rsp + 0x38], ecx
lea rcx, [rax + 0x52]
jmp 0x140159919
mov r10b, 3
cmp esi, dword [r14 + 0xa8]
jbe 0x140159764
mov rsi, qword [rsp + 0x7d0]
add byte [rax], al
jmp 0x1401597b8
mov byte [rax + 8], 1
mov qword [rax + 9], rcx
mov esi, 2
jmp case.0x14015808e.2
mov eax, dword [r14 + 0xb8]
mov r8, qword [rsp + 0x180]
add eax, r8d
jo 0x14015f280
sti
invalid
add byte [rax], al
sti
invalid
mov dword [r14 + 0xb8], eax
mov qword [rsp + 0x200], 2
mov qword [rsp + 0x220], 0
mov eax, dword [r14 + 0xbc]
lea ecx, [rax + r8]
shl rcx, 0x20
mov edx, eax
add edx, r8d
movabs rdx, 0x300000001
add byte [rax + 0xf], cl
retf 0xc984
jne 0x1401591d7
add byte [rax + 0xf], cl
retf 0xc984
shr rcx, 0x20
mov dword [r14 + 0xbc], ecx
mov eax, ecx
test eax, eax
jle 0x140159bb4
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x48], rbx
lea rsi, [r14 + 0x160]
lea rbx, [r14 + 0xb8]
add byte [rax], al
add byte [rbp - 0x73], cl
scasb al, byte [rdi]
fadd qword [rax]
add byte [rax], al
add byte [rax], al
add byte [rbp - 0x73], cl
scasb al, byte [rdi]
fadd qword [rax]
add byte [rax], al
jmp 0x140159268
cmp byte [rdx + 0x51], 0
je 0x140159306
mov qword [rsp + 0x500], rax
mov dword [rsp + 0x508], ecx
mov dword [rsp + 0x50c], r8d
cmp dword [rdx + 0x48], 0x3b9aca00
setne bpl
mov rcx, rbx
lea rdi, [rsp + 0x500]
add eax, 0x89480000
cli
add eax, 0x89480000
cli
call fcn.1400520c0
mov rcx, rsi
mov rdx, rdi
mov rdi, qword [rsp + 0x88]
mov r8d, ebp
mov r15, qword [rsp + 0x70]
call fcn.14004af80
cmp dword [r14 + 0xbc], 0
jle 0x140159aed
add byte [rdi], cl
mov es, word [rbp + 0x48000008]
lea ecx, [rsp + 0x500]
lea rcx, [rsp + 0x500]
mov rdx, r13
mov r8, r12
mov eax, esp
mov eax, esp
call fcn.140053170
mov rax, qword [rsp + 0x500]
test rax, rax
je 0x140159a0c
mov ecx, dword [rsp + 0x508]
cmp qword [rax + 0x10], rcx
jbe 0x140160412
mov rdx, qword [rax]
test rdx, rdx
test edx, edx
test edx, edx
je 0x140160412
imul r9, rcx, 0x130
cmp dword [rdx + r9], 2
je 0x140160412
mov r8d, dword [rsp + 0x50c]
add rdx, r9
cmp dword [rdx + 0x114], r8d
jne 0x140160412
movzx r9d, byte [rdx + 0x50]
add r9b, 0xfa
movzx r9d, r9b
cmp r9b, 6
cmp cl, 6
cmp cl, 6
mov r10d, 6
cmovae r9d, r10d
cmp r9b, 5
je 0x140159200
movzx r9d, r9b
cmp r9d, 3
je 0x140159200
invalid
invalid
invalid
cmp qword [rdx + 0x88], 0
jne 0x14015920a
jmp 0x14015925a
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x8f0], rax
mov rcx, rbp
call sub.kernel32.dll_AcquireSRWLockExclusive
add byte [rdi], cl
mov dh, 0x45
or byte [rax + rax*8 + 0x70d5850f], al
add byte [rax], al
add byte [rdi], cl
mov dh, 0x45
or byte [rax + rax*8 + 0x70d5850f], al
add byte [rax], al
lea rax, [rbp + 0x10]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x348], rax
mov dword [rsp + 0x350], esi
mov dword [rsp + 0x354], r13d
lea rax, [rsp + 0x8f0]
mov qword [rsp + 0x618], rax
sbb byte [rsi], al
add byte [rax], al
sbb byte [rsi], al
add byte [rax], al
mov r8d, 0x118
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0xdb0]
call sub.msvcrt.dll_memcpy
lea rax, [rsp + 0xad8]
mov qword [rsp + 0x620], rax
invalid
add byte [rax], al
cmp qword [r14 + 0x1b8], r12
jbe 0x140160412
invalid
mov rdi, qword [r14 + 0x1a8]
test rdi, rdi
je 0x140160412
sar dword [rsp + rax], 0x48
mov esi, dword [rsp + 0x668]
ja case.0x140159426.1
movzx eax, al
lea rcx, [0x1401fd188]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rbp, qword [rsp + 0x8f0]
mov r8d, 0x118
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0xdb0]
call sub.msvcrt.dll_memcpy
cmp dword [rdi], 2
je 0x140160412
cmp dword [rdi + 0x114], r13d
jne 0x140160412
movzx eax, byte [rbx]
lea ecx, [rax - 6]
movzx r8d, cl
cmp r8b, 6
mov edx, 6
add byte [rax], al
add byte [rdi + rcx + 0x43], al
ret 0x8041
clc
add al, 0x4c
mov esp, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x68]
ja case.0x1401594a6.1
add byte [rax], al
add byte [rdi + rcx + 0x43], al
ret 0x8041
movzx edx, byte [rsp + 0x7a4]
movzx r8d, r8b
movzx eax, al
movzx eax, al
lea r9, [0x1401fd19c]
movsxd r8, dword [r9 + r8*4]
add r8, r9
jmp r8
test dl, 1
jne 0x14015a9d5
mov edx, dword [rsp + 0x788]
mov r8d, 0xffffff38
add edx, r8d
cmp dx, 0xff9c
setb r12b
mov sil, 9
xor r15d, r15d
jmp 0x14015a9db
mov qword [rsp + 0x128], r14
mov r12d, dword [rsp + 0x698]
cmp qword [rax + 0x10], r12
jbe 0x140160412
mov rdx, qword [rax]
test rdx, rdx
je 0x140160412
imul r14, r12, 0x130
cmp dword [rdx + r14], 2
je 0x140160412
mov ebp, dword [rsp + 0x69c]
add rdx, r14
cmp dword [rdx + 0x114], ebp
jne 0x140160412
add rdx, 0x50
call fcn.1400559a0
movzx edx, byte [rsp + 0x200]
movzx esi, byte [rsp + 0x201]
cmp dl, 3
jne 0x1401598be
test sil, sil
je 0x14015958e
mov sil, 1
xor ebx, ebx
cmp byte [rdi + 0xac], 0
je case.0x14013fc1f.69
cmp dword [rdi + 0x18], 0
jne 0x140160412
cmp byte [rdi + 0x1a0], 0
je 0x14015a6c5
mov dword [rsp + 0x78], 1
xor edi, edi
xor r12d, r12d
xor ebp, ebp
lea r13, [0x140234700]
jmp 0x14015a38f
mov dword [rsp + 0x78], 1
xor edi, edi
xor r12d, r12d
xor ebp, ebp
lea r13, [0x14029fee8]
lea r14, str.combase.dll
mov sil, 1
mov dl, 1
mov dword [rsp + 0x38], edx
jmp case.0x14013fc1f.74
test sil, 1
sete al
cmp byte [r14 + 0x1a0], 0
sete cl
xor cl, al
mov r12, qword [rsp + 0x60]
je 0x1401599eb
cmp dword [r14 + 0xb0], 0
jne 0x140159bb9
mov eax, dword [rsp + 0x140]
cmp dword [r14 + 0xb4], eax
ja 0x140159bb9
jmp 0x14015f53e
mov r10b, 1
mov dword [rsp + 0x1f0], 1
test esi, esi
je 0x1401597b1
test sil, 1
sete al
test bl, bl
sete cl
xor cl, al
lea rdx, [r14 + 0xb0]
lea r8, [r14 + 0x14]
lea rax, [r14 + 0xb4]
test cl, cl
cmovne rdi, rdx
cmove rax, r8
cmp dword [rdi], 0
jne 0x14015a08e
cmp dword [rax], esi
ja 0x14015a08e
lea rsi, [0x14029fee8]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x88]
mov dword [rsp + 0x38], r10d
mov rax, qword [rsp + 0x990]
mov rdx, qword [rsp + 0x998]
mov r8, qword [rsp + 0x9a0]
lea rcx, [rsp + 0x9a8]
call qword [rax + 0x10]
mov qword [rsp + 0x7d0], rsi
jmp 0x140159d0f
test sil, 1
sete al
cmp byte [r14 + 0x1a0], 0
sete cl
xor cl, al
je 0x140159dc8
cmp dword [r14 + 0xb0], 0
mov bpl, 3
jne 0x14015adf5
mov eax, dword [rsp + 0x140]
cmp dword [r14 + 0xb4], eax
jbe 0x140159de7
jmp 0x14015adf5
mov byte [rax + 0x11], dl
mov rdx, qword [rax]
mov esi, 2
test rdx, rdx
je case.0x14015808e.2
movabs rax, 0xb416870b7adb7c3b
cmp rcx, rax
jne case.0x14015808e.2
mov eax, 2
mov ecx, 3
lock cmpxchg qword [rdx + 0x10], rcx
jne case.0x14015808e.2
mov rax, qword [rdx + 0x40]
mov rcx, rax
or rcx, 2
lock cmpxchg qword [rdx + 0x40], rcx
jne 0x14015987f
test rax, rax
jne case.0x14015808e.2
mov rax, qword [rdx + 0x30]
mov rcx, qword [rdx + 0x38]
mov qword [rdx + 0x30], 0
lock and qword [rdx + 0x40], 0xfffffffffffffffd
test rax, rax
je case.0x14015808e.2
call qword [rax + 8]
jmp case.0x14015808e.2
movzx eax, word [rsp + 0x202]
mov word [rsp + 0x1fe], ax
mov eax, dword [rsp + 0x204]
mov dword [rsp + 0x78], eax
mov r13, qword [rsp + 0x208]
mov r14, qword [rsp + 0x210]
mov ebx, dword [rsp + 0x218]
mov edi, dword [rsp + 0x21c]
mov r12d, dword [rsp + 0x220]
mov ebp, dword [rsp + 0x224]
mov dword [rsp + 0x38], edx
jmp case.0x14013fc1f.74
mov cl, 1
mov dword [rsp + 0x38], ecx
lea rcx, [rax + 0x51]
xor r13d, r13d
cmp byte [rcx], 0
je 0x140159bd3
mov ecx, dword [r14 + 0x58]
test ecx, ecx
mov edx, 0
cmovg edx, ecx
cmp edx, ebp
jb 0x14015995e
test ebp, ebp
je 0x14015ab28
cmp ecx, ebp
jl 0x140160412
sub ecx, ebp
jo 0x14015995b
mov dword [r14 + 0x58], ecx
mov ecx, dword [r14 + 0x5c]
sub ecx, ebp
jno 0x14015ab24
xor r13d, r13d
mov dword [rsp + 0x50], 3
jmp 0x140159bdb
mov dword [rsp + 0x50], 1
mov al, 1
mov dword [rsp + 0x38], eax
xor r13d, r13d
jmp 0x140159bdb
cmp dword [r14 + 0x10], 0
jne 0x140159bb9
mov eax, dword [rsp + 0x140]
cmp dword [r14 + 0x14], eax
ja 0x140159bb9
jmp 0x14015f53e
mov rdx, qword [rsp + 0x200]
cmp rdx, 2
mov r12, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
je 0x140159bb9
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
test rdx, rdx
je 0x140159a54
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0x218]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0x200]
cmp rdx, 2
je 0x140159bb9
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
test rdx, rdx
je 0x140159a98
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0x218]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0x200]
cmp rax, 2
je 0x140159bb9
test rax, rax
je 0x140159bb9
mov rax, qword [rsp + 0x208]
lock dec qword [rax]
jne 0x140159bb9
mov rcx, qword [rsp + 0x208]
mov rdx, qword [rsp + 0x210]
call fcn.14014cf70
jmp 0x140159bb9
mov rdx, qword [rsp + 0x200]
cmp rdx, 2
mov rbx, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
je 0x140159bb4
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
test rdx, rdx
je 0x140159b30
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0x218]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0x200]
cmp rdx, 2
je 0x140159bb4
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
test rdx, rdx
je 0x140159b70
mov r12, qword [rsp + 0x60]
mov rcx, r13
call fcn.1401f2d54
mov rcx, r14
call fcn.1401f2d54
mov esi, 2
jmp case.0x14015808e.2
mov dword [rsp + 0x50], 1
lea rsi, [0x140223360]
mov r12, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
mov r15d, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x88]
mov rax, qword [rsp + 0x690]
mov rdx, qword [rsp + 0x698]
lea rcx, [rsp + 0x6a8]
mov r8, rbp
call qword [rax + 0x10]
test r13b, r13b
mov qword [rsp + 0x480], rsi
mov dword [rsp + 0x68], r15d
je 0x140159cb9
add byte [rax], al
invalid
add byte [rax], al
add byte [rcx - 0x75], al
pop rsp
mov ecx, dword [r14 + 0x5c]
lea eax, [rcx + rbp]
shl rax, 0x20
shl eax, 0x20
shl eax, 0x20
add ecx, ebp
movabs rcx, 0x300000001
add byte [rbx], al
add byte [rax], al
add byte [rax + 0xf], cl
rol dword [rcx + 0x29], 0xae
invalid
add byte [rax], al
invalid
test al, al
jne 0x140159c5b
add byte [rbx], al
add byte [rax], al
add byte [rax + 0xf], cl
rol dword [rcx + 0x29], 0xae
movabs al, byte [0x480875c084000000]
shr eax, 0x20
shr rax, 0x20
mov dword [r14 + 0x5c], eax
mov r13, qword [rsp + 0x78]
lea r9, [r13 + 0x10]
lea rcx, [r14 + 0xb0]
add byte [rcx - 0x73], cl
xchg byte [rax + 1], dl
add byte [rax], al
add byte [rcx - 0x73], cl
xchg byte [rax + 1], dl
add byte [rax], al
mov qword [rsp + 0x30], rax
and al, 0x30
mov rbp, qword [rsp + 0xc8]
mov qword [rsp + 0x28], rbp
lea rsi, [rsp + 0xed0]
mov qword [rsp + 0x20], rsi
mov rdx, qword [rsp + 0x480]
mov r8b, 1
call fcn.140199e90
mov al, 3
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x3b0], eax
mov r15, qword [rsp + 0x70]
jmp 0x140159ced
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x3b0], eax
mov qword [rsp + 0x7d0], rsi
mov dword [rsp + 0x1f0], eax
lea rsi, [rsp + 0xed0]
mov r15, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov rbp, qword [rsp + 0xc8]
cmp dword [rsp + 0x128], 0x3b9aca00
setne r8b
mov rcx, rbp
mov rdx, rsi
call fcn.14004af80
mov rcx, r13
call fcn.1401f2d54
mov rcx, r14
call fcn.1401f2d54
or dword [rax], eax
or dword [rax], eax
mov esi, 2
cmp byte [rsp + 0x38], 3
cmp byte [rbx], al
cmp byte [rbx], al
je case.0x14015808e.2
jmp 0x14015da4c
mov bpl, 1
mov dword [rsp + 0x4c8], 0xb
mov dword [rsp + 0x4cc], 0xf
lea rax, [0x140223360]
or al, 0
or al, 0
mov qword [rsp + 0x8c8], rax
lea rax, str.too_many_resets
lea eax, str.too_many_resets
lea eax, str.too_many_resets
mov qword [rsp + 0x8c0], rax
jmp 0x14015add0
ror byte [rax], 0
add cl, ch
push 0xffffffff85000010
in eax, dx
test ebp, ebp
mov r12, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x480]
mov r15d, dword [rsp + 0x68]
mov rdi, qword [rsp + 0x88]
je 0x14015ab92
test byte [rbx], al
invalid
add byte [rax], al
test byte [rbx], al
invalid
mov dword [rsp + 0x50], 3
add byte [rax], al
mov cl, 1
mov dword [rsp + 0x38], ecx
cmp eax, ebp
jl 0x140160412
sub eax, ebp
jo 0x140159db9
mov dword [r14 + 0x58], eax
mov eax, dword [r14 + 0x5c]
sub eax, ebp
jno 0x14015ab8e
xor r13d, r13d
lea rsi, [0x140223360]
jmp 0x140159bf9
cmp dword [r14 + 0x10], 0
mov bpl, 3
jne 0x14015adf5
mov eax, dword [rsp + 0x140]
cmp dword [r14 + 0x14], eax
ja 0x14015adf5
mov bpl, 1
mov dword [rsp + 0x4c8], 1
mov dword [rsp + 0x4cc], 0
lea rax, [0x14029fee8]
mov qword [rsp + 0x8c8], rax
lea rax, str.combase.dll
mov qword [rsp + 0x8c0], rax
ror byte [rax], 0
add cl, ch
ror byte [rdi], cl
add byte [rax], al
ror byte [rax], 0
add cl, ch
ror byte [rdi], cl
add byte [rax], al
mov r8, qword [r14 + 0x130]
test r8, r8
je 0x140159e47
xchg byte [rax], dh
add dword [rax], eax
add byte [rbp - 0x7b], cl
sal byte [rax + rbx + 0x49], 0x83
cmp qword [r14 + 0x138], 0
je 0x140159e47
mov rcx, qword [0x1402d9150]
cmp qword [r14 + 0x138], 0
je 0x140159e47
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
invalid
add byte [rcx - 0x73], cl
xchg byte [rax], ch
add dword [rax], eax
add byte [rax - 0x75], cl
mov word [rax + riz], fs
and al, 0x20
lea rax, [r14 + 0x128]
mov rcx, qword [rsp + 0x220]
and al, 0x20
add al, byte [rax]
add byte [rax - 0x77], cl
and byte [rdi], cl
mov bh, 0x8c
and al, 0
add al, byte [rax]
add byte [rdi], cl
mov bh, 0x94
and al, 2
add al, byte [rax]
add byte [rbx + rcx*4 - 0x7c], al
and al, 4
add al, byte [rax]
add byte [rbx + rcx*4 - 0x74], cl
and al, 8
add al, byte [rax]
add byte [rsi + 0xf], ah
outsd dx, dword [rsi]
test byte [rax + rdx], ah
add al, byte [rax]
add bl, dh
movq qword [rax + 0x10], mm0
and al, 0x20
add al, byte [rax]
add byte [rax - 0x77], cl
and byte [rdi], cl
mov bh, 0x8c
and al, 0
add al, byte [rax]
add byte [rdi], cl
mov bh, 0x94
and al, 2
add al, byte [rax]
add byte [rbx + rcx*4 - 0x7c], al
and al, 4
add al, byte [rax]
add byte [rbx + rcx*4 - 0x74], cl
and al, 8
add al, byte [rax]
add byte [rsi + 0xf], ah
outsd dx, dword [rsi]
test byte [rax + rdx], ah
add al, byte [rax]
add bl, dh
movq qword [rax + 0x10], mm0
mov word [rax], cx
mov word [rax + 2], dx
mov dword [rax + 4], r8d
mov qword [rax + 8], r9
mov al, 3
mov ebp, dword [rsp + 0x50]
mov dword [rsp + 0x38], eax
mov rcx, r13
call fcn.1401f2d54
mov rcx, r14
call fcn.1401f2d54
cmp dword [rsp + 0xc8], ebp
jb 0x14015da7d
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x220], rax
movups xmm0, xmmword [rsp + 0x690]
movups xmm1, xmmword [rsp + 0x6a0]
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x200], xmm0
mov rsi, qword [rsp + 0x890]
mov rax, qword [rsi]
test rax, rax
je 0x140159f0d
lea rcx, [rsi + 0x18]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x220]
mov qword [rsi + 0x20], rax
movdqa xmm0, xmmword [rsp + 0x200]
movq mm0, qword [rsp + 0x200]
movq mm0, qword [rsp + 0x200]
movdqa xmm1, xmmword [rsp + 0x210]
movdqu xmmword [rsi + 0x10], xmm1
invalid
mov word [rax + rdx], fs
add al, byte [rax]
add bl, dh
movq qword [rsi + 0x10], mm1
invalid
adc bl, dh
movq qword [rsi], mm0
movdqu xmmword [rsi], xmm0
mov esi, 2
jmp case.0x14015808e.2
cmp byte [rdi + 0x52], 0
jne case.0x140159426.1
jmp case.0x140159426.0
cmp byte [rdi + 0x51], 0
je case.0x140159426.0
test byte [rsp + 0x614], 1
jne 0x140159fa1
lea rcx, [rsp + 0x500]
call fcn.14004a430
mov byte [rsp + 0x87], 1
mov dword [rsp + 0x1dc], 1
mov dword [rsp + 0x38], 0
mov r12, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x70]
and al, 0x70
and al, 0x70
mov rdi, qword [rsp + 0x88]
jmp 0x14015baea
mov rsi, qword [rsp + 0x8f0]
mov r8d, 0x118
lea rcx, [rsp + 0x990]
lea rdx, [rsp + 0xdb0]
add al, ch
sbb al, 0x96
or dword [rax], eax
add al, ch
sbb al, 0x96
or dword [rax], eax
cmp dword [rdi], 2
mov rbp, qword [rsp + 0x70]
je 0x140160412
cmp dword [rdi + 0x114], r13d
jne 0x140160412
lea rcx, [rsp + 0x690]
mov rdx, rbx
call fcn.140055860
movzx eax, byte [rsp + 0x690]
cmp al, 3
jne 0x14015a0f6
invalid
add byte [rbp + 0x39], cl
cmp qword [r14 + 0x1b8], r12
mov rbx, qword [rsp + 0x48]
cmpsb byte [rsi], byte [rdi]
mov eax, 0x48000001
mov ebx, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x88]
jbe 0x140160412
mov rax, qword [r14 + 0x1a8]
test rax, rax
je 0x140160412
cmp dword [rax + r15], 2
je 0x140160412
add rax, r15
cmp dword [rax + 0x114], r13d
jne 0x140160412
invalid
add byte [rax], al
invalid
cmp dword [rax + 0x30], 2
jne 0x14015a53e
cmp qword [rax + 0x38], 0
je 0x14015a53e
mov r10d, 1
mov r15b, 1
mov dword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x668]
mov edx, dword [rsp + 0x4d8]
mov r8d, dword [rsp + 0x4d4]
mov r9d, dword [rsp + 0x4d0]
jmp 0x14015a164
mov rax, qword [rsp + 0x9a0]
test rax, 0xffffffff80000000
mov rbx, qword [rsp + 0x48]
pop rsp
and al, 0x48
pop rsp
and al, 0x48
jne 0x140160412
mov ecx, dword [r14 + 0x58]
test ecx, ecx
mov edx, 0
cmovg edx, ecx
mov dword [rsp + 0x1f0], 3
cmp edx, eax
mov r8, qword [rsp + 0x7d0]
mov rdi, qword [rsp + 0x88]
jb 0x14015a0ea
test eax, eax
je 0x14015ac16
test byte [rdx], bh
or eax, dword [rax]
invalid
test byte [rdx], bh
or eax, dword [rax]
add byte [rcx], ch
ror dword [rdi], 0x8c
invalid
mov word [rsi], gs
sub ecx, eax
jl 0x140160412
invalid
jno 0x14015abfb
lea rsi, [0x140223360]
jmp 0x1401597c5
iretd
idiv bh
invalid
iretd
mov dword [rsp + 0x38], eax
movzx r15d, byte [rsp + 0x691]
movzx eax, word [rsp + 0x692]
mov word [rsp + 0x92], ax
mov r13d, dword [rsp + 0x694]
xchg esp, eax
invalid
add byte [rax], al
mov r10d, dword [rsp + 0x698]
and al, 0x98
invalid
add byte [rax], al
xchg esp, eax
invalid
and al, 0x98
invalid
add byte [rax], al
mov eax, dword [rsp + 0x69c]
mov dword [rsp + 0x13c], eax
mov rcx, qword [rsp + 0x6a0]
mov edx, dword [rsp + 0x6a8]
mov r8d, dword [rsp + 0x6ac]
mov r9d, dword [rsp + 0x6b0]
mov eax, dword [rsp + 0x6b4]
mov qword [rsp + 0x368], rax
mov rbx, qword [rsp + 0x48]
pop rsp
and al, 0x48
pop rsp
and al, 0x48
mov dword [rsp + 0x3ac], r10d
mov dword [rsp + 0x4d0], r9d
mov dword [rsp + 0x4d4], r8d
mov dword [rsp + 0x4d8], edx
add byte [rax - 0x77], cl
mov word [rax + rbp*2], fs
invalid
add byte [rax], al
cmp qword [rsp + 0x9b0], 0
mov r12, qword [rsp + 0x60]
je 0x14015a1b1
add byte [rax - 0x77], cl
mov word [rax + rbp*2], fs
invalid
mov r8, qword [rsp + 0x9a8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov ecx, dword [rcx]
invalid
mov ecx, dword [rcx]
add byte [rax - 0x75], cl
mov esp, 0x9c824
add byte [rax - 0x7b], cl
push qword [rbx + rax*2 + 0x48]
mov esi, dword [rsp + 0x9b8]
mov rdi, qword [rsp + 0x9c8]
test rdi, rdi
je 0x14015a201
mov rsi, qword [rsp + 0x9b8]
add rsi, 0x30
jmp case.0x140154715.82
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
int1
int1
call qword [rax + 0x10]
add rsi, 0x68
push 0x74cfff48
invalid
push 0x74cfff48
sbb cl, byte [rax - 0x75]
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14015a1cc
fmul qword [rax - 0x73]
mov rax, qword [rsi + 0x10]
mov eax, dword [rsi + 0x10]
test rax, rax
je 0x14015a1cc
invalid
fmul qword [rax - 0x73]
lea rcx, [rsi + 0x28]
lea ecx, [rsi + 0x28]
sub byte [rax - 0x75], r9b
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
push rax
adc bl, ch
retf
push rsi
sbb byte [rbx + rcx*4 + 0x46], cl
and bh, bh
push rax
adc bl, ch
retf
cmp qword [rsp + 0x9c0], 0
and al, 0xc0
or dword [rax], eax
add byte [rax], al
je 0x14015a222
invalid
mov r8, qword [rsp + 0x9b8]
add byte [rax], al
add byte [rax - 0x75], cl
or eax, 0x17ef35
invalid
invalid
mov rcx, qword [0x1402d9150]
invalid
add byte [rcx], dh
shr al, cl
invalid
mov dl, 0x8a
xor edx, edx
call sub.kernel32.dll_HeapFree
or dword [rax], eax
add byte [rax - 0x75], cl
mov esp, 0x9e024
or dword [rax], eax
mov rdi, qword [rsp + 0x9e0]
or dword [rax], eax
add byte [rax], al
add byte [rax - 0x7b], cl
push qword [rdi + riz + 0x48]
invalid
mov rsi, qword [rsp + 0x9d0]
test rdi, rdi
je 0x14015a256
invalid
invalid
mov rsi, qword [rsp + 0x9d0]
add byte [rax], al
add byte [rax - 0x7d], cl
invalid
add rsi, 0x38
mov rax, qword [rsi - 0x18]
mov eax, dword [rsi - 0x18]
call 0x1306c2d8b
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov eax, dword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
push rax
adc byte [rax - 0x7d], cl
invalid
dec rdi
dec edi
jne 0x14015a23b
cmp qword [rsp + 0x9d8], 0
mov esp, 0x9d824
and al, 0xd8
or dword [rax], eax
add byte [rax], al
je 0x14015a277
invalid
mov r8, qword [rsp + 0x9d0]
or dword [rax], eax
add byte [rax - 0x75], cl
or eax, 0x17eee0
out dx, al
invalid
invalid
add byte [rax], al
mov rcx, qword [0x1402d9150]
out dx, al
invalid
xor edx, edx
call sub.kernel32.dll_HeapFree
mov cl, byte [rcx]
invalid
mov cl, byte [rcx]
add byte [rax - 0x73], cl
mov word [rax + rsi*8], fs
invalid
or dword [rax], eax
lea rcx, [rsp + 0x9f0]
call fcn.140049a80
out dx, al
dec dword [rdi]
mov bh, 0x94
and al, 0x94
add byte [rax], al
invalid
lock or dword [rax], eax
or dword [rax], eax
add al, ch
cld
imul esi
out dx, al
out dx, al
dec dword [rdi]
mov bh, 0x94
and al, 0x94
add byte [rax], al
add byte [rdi], cl
mov dh, 0x74
and al, 0x6f
outsd dx, dword [rsi]
add byte [rax], al
movzx esi, byte [rsp + 0x6f]
outsd dx, dword [rsi]
mov r8d, r15d
mov r9, qword [rsp + 0x368]
and al, 0x68
add eax, dword [rax]
add byte [rdi + rcx - 0x49], al
mov bh, 0x94
and al, 0x92
add byte [rax], al
invalid
and al, 0x68
add eax, dword [rax]
add byte [rdi + rcx - 0x49], al
invalid
push 0x44000003
movzx edx, word [rsp + 0x92]
mov bh, 0x94
and al, 0x92
add byte [rax], al
invalid
mov bh, 0x94
xchg esp, eax
and al, 0x92
add byte [rax], al
add byte [rbx + rcx*4 - 0x64], al
invalid
invalid
pushfq
and al, 0x3c
add dword [rax], eax
mov r11d, dword [rsp + 0x13c]
mov ebx, dword [rsp + 0x13c]
add byte [rax - 0x75], cl
mov esp, 0x8824
invalid
mov rdi, qword [rsp + 0x88]
mov edi, dword [rsp + 0x88]
add byte [rax], al
add cl, ch
test byte [rbx], 0
add dh, dh
invalid
jmp 0x14015a6b0
test dl, 1
jne 0x14015a9e2
add byte [rax], al
ret 0xf01
add byte [rax], al
add byte [rbx + 0x7882494], cl
mov edx, dword [rsp + 0x788]
add byte [rax], al
add byte [rbx - 0x7c99633e], al
add edx, 0xffffff9c
cmp dx, 0x64
cli
setae sil
cli
setae sil
setae dh
add sil, sil
add dh, dh
test byte [rax - 0x80], 0xce
or byte [rcx - 0x49], al
invalid
or sil, 8
mov r15b, 1
mov bh, 1
mov bh, 1
add dword [rcx], esi
fucomi st(1)
mov ebx, 0x8000000b
add byte [rax], al
invalid
xor ebx, ebx
jmp 0x14015aea1
add byte [rax], al
add byte [rax], al
add byte [rax + 0x7500527f], al
cmp byte [rdi + 0x52], 0
jne case.0x1401594a6.1
invalid
jg 0x14015a33b
add byte [rbp + 0x3d], dh
cmp eax, 0x7fb60f44
push rcx
movzx r15d, byte [rdi + 0x51]
mov bl, 1
add dword [rax - 0x4a], eax
or esi, esi
ret 0xf01
invalid
mov sil, 0xb
test dl, 1
jne 0x14015aea1
test dword [rdx - 0x74fffff5], esp
mov edx, dword [rsp + 0x788]
mov r8d, 0xffffff38
mov eax, 0xffffff38
xchg esp, eax
and al, 0x88
invalid
mov eax, 0xffffff38
cmp bh, bh
invalid
inc dword [rcx + rax - 0x3e]
add edx, r8d
ret 0x8366
cmp dx, 0xff9c
setb r12b
xchg edx, eax
invalid
mov sil, 9
jmp 0x14015aea1
or eax, dword [rax]
invalid
xchg edx, eax
invalid
or eax, dword [rax]
add byte [rax + 0xf00517f], al
cmp byte [rdi + 0x51], 0
invalid
add byte [rax], al
cmp byte [rdi + 0x51], 0
je 0x14015abcc
test byte [rbx + 0x44000008], ah
mov dword [rsp + 0x68], r10d
mov dword [rsp + 0x68], edx
push rsp
and al, 0x68
lea rax, [0x1402357d8]
mov rcx, rax
movabs dword [0xc148c18948000db4], eax
mov ah, 0xd
add byte [rax - 0x77], cl
ror dword [rax - 0x3f], 0xe9
invalid
invalid
invalid
shr rcx, 0x20
shr ecx, 0x20
jmp 0xcc9eeb5f
and byte [rax - 0x77], cl
mov word [rax + rbp*2], fs
and al, 0x68
mov qword [rsp + 0x868], rcx
xor edx, edx
and al, 0x68
push 0x31000008
or byte [rax], al
add byte [rcx], dh
rol byte [rcx - 0x45], cl
mov r11d, 1
mov ebx, 1
add dword [rax], eax
add byte [rax], al
mov cl, 1
add dword [rcx + 0x3d4248c], ecx
add byte [rax], al
invalid
mov dword [rsp + 0x3d4], ecx
mov word [rsp + rdx*8], fs
and al, 0xd4
add eax, dword [rax]
add byte [rbx + 4], bh
mov ebx, 4
add al, 0
add byte [rax], al
mov cl, 1
add dword [rcx - 0x77], eax
ret 0x8d4c
mov r10d, eax
mov edx, eax
lea r8, str.combase.dll
mov dword [rsp + 0x3a8], 0
test al, 3
add byte [rax], al
add byte [rax], al
add byte [rax], al
invalid
movabs byte [0x3a82484c70016bc], al
mov esp, 0x84c70016
and al, 0xa8
invalid
invalid
test al, 3
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
invalid
add byte [rbp + 0x31], al
leave
xor r9d, r9d
xor ecx, ecx
jmp 0x14015b0fe
add byte [rax], al
add bh, al
and al, 0x78
add dword [rax], eax
invalid
mov dword [rsp + 0x78], 1
add byte [rax], al
add byte [rax], al
add byte [rcx], dh
inc dword [rbp + 0x31]
xor edi, edi
xor r12d, r12d
invalid
in al, 0x31
xor ebp, ebp
in eax, dx
lea r13, [0x140223360]
invalid
or al, 0
add byte [rbp + rcx*4 + 0x35], cl
jb 0x14015a350
invalid
lea r14, str.combase.dll
mov al, 1
mov esp, 0x1b00016
invalid
add byte [rax + 0x24448901], dh
mov dword [rsp + 0x38], eax
and al, 0x38
cmp byte [rax - 0x73], cl
mov word [rax + rax], fs
lea rcx, [rsp + 0x500]
add eax, 0x87e80000
add bh, ch
add byte [rax], al
add al, ch
xchg dword [rax], eax
out dx, eax
call fcn.14004a430
dec dword [rcx + 0x3b4249c]
add byte [rax], al
invalid
mov dword [rsp + 0x3b4], ebx
pushfq
and al, 0xb4
add eax, dword [rax]
add byte [rcx + 0x3c024bc], cl
add byte [rax], al
invalid
mov dword [rsp + 0x3c0], edi
mov esp, 0x3c024
add byte [rcx + rcx*4 - 0x5c], al
and al, 0xbc
add eax, dword [rax]
invalid
mov dword [rsp + 0x3bc], r12d
mov dword [rsp + 0x3bc], esp
add byte [rax], al
add byte [rcx + 0x3b824ac], cl
mov dword [rsp + 0x3b8], ebp
add byte [rax], al
add byte [rcx + rcx*4 - 0x54], cl
and al, 0x50
push rax
mov qword [rsp + 0x850], r13
push rax
or byte [rax], al
add byte [rax], al
add byte [rcx + rcx*4 - 0x4c], cl
mov qword [rsp + 0x848], r14
and al, 0x48
or byte [rax], al
add byte [rax - 0x78], al
add byte [rax], al
mov byte [rsp + 0x97], sil
mov rcx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
mov ah, 0x24
xchg edi, eax
add byte [rax], al
add byte [rax - 0x75], cl
mov ecx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
and al, 0x50
push rax
call fcn.1401f2d54
or dword [rax], eax
mov esi, 2
add al, byte [rax]
add byte [rax], al
cmp byte [rsp + 0x38], 3
and al, 0x38
add ecx, dword [rbx + rcx*4 + 0x64]
and al, 0x60
cmp byte [rbx], al
mov r12, qword [rsp + 0x60]
and al, 0x60
invalid
mov rbx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x70]
mov edi, dword [rsp + 0x70]
mov r15, qword [rsp + 0x70]
mov edi, dword [rsp + 0x70]
jl 0x14015a424
jo case.0x140155c56.25
mov rdi, qword [rsp + 0x88]
mov edi, dword [rsp + 0x88]
and al, 0x88
add byte [rax], al
add byte [rbx + 0xf78246c], cl
mov ebp, dword [rsp + 0x78]
invalid
mov byte [rax], al
add byte [rax], al
mov ebp, dword [rsp + 0x78]
and al, 0x78
js 0x14015a41d
jne 0x14015dace
test dword [rbx - 0x76ffffca], edi
lodsb al, byte [rsi]
and al, 0xe0
add byte ss:[rax], al
add byte [rcx + 0x4e024ac], cl
add byte [rax], al
invalid
mov dword [rsp + 0x4e0], ebp
add al, 0
add cl, ch
and dword [rdi], edx
jmp case.0x14015808e.2
add byte [rax], al
mov cl, 0x29
invalid
add byte [rcx - 0x26ce16d7], dh
sub ecx, ebp
xor ecx, ebx
jmp 0x140157d57
invalid
push qword [rcx - 0x26d516ff]
add ecx, ebp
sub bl, cl
jmp 0x140157d57
invalid
push qword [rcx - 0x26dc16fe]
add ch, cl
and ebx, ecx
jmp 0x140157d57
invalid
push qword [rcx - 0x26e316fd]
add ebp, ecx
sbb al, 0xd9
jmp 0x140157d57
invalid
push qword [rcx - 0x26ea16fc]
invalid
add al, 0xe9
adc eax, 0xb1ffffd9
invalid
invalid
jmp 0x140157d57
push qword [rcx - 0x26f116fb]
invalid
mov cl, 5
add eax, 0xffd90ee9
jmp 0x140157d57
push qword [rcx - 0x26f816fa]
invalid
invalid
jmp 0x140157d57
push qword [rcx - 0x26ff16f9]
invalid
invalid
push qword [rcx - 0x270616f8]
invalid
or cl, ch
stc
fdivr st(7)
push qword [rcx - 0x270d16f7]
invalid
or ecx, ebp
fdivr st(7)
push qword [rcx - 0x271416f6]
invalid
or ch, cl
jmp 0x14015a442
push qword [rcx - 0x271b16f5]
or ebp, ecx
in al, 0xd8
invalid
push qword [rcx - 0x272216f4]
or al, 0xe9
fstp st(0)
invalid
push qword [rcx - 0x272916f3]
invalid
or eax, 0xffd8d6e9
push qword [rcx - 0x273016f2]
invalid
invalid
push qword [rcx - 0x273716f1]
invalid
psubsw mm1, mm0
fdivr st(7)
push qword [rcx - 0x273e16f0]
invalid
adc cl, ch
rcr eax, 0xff
push qword [rcx - 0x274516ef]
invalid
adc ecx, ebp
mov edx, 0xb1ffffd8
invalid
invalid
push qword [rcx - 0x274c16ee]
adc ch, cl
mov bl, 0xd8
invalid
push qword [rcx - 0x275316ed]
invalid
adc ebp, ecx
lodsb al, byte [rsi]
fdivr st(7)
push qword [rcx - 0x275a16ec]
invalid
adc al, 0xe9
movsd dword [rdi], dword [rsi]
fdivr st(7)
push qword [rcx - 0x276116eb]
invalid
mov cl, 0x15
jmp 0x140157d57
invalid
adc eax, 0xffd89ee9
push qword [rcx - 0x276816ea]
invalid
mov cl, 0x16
jmp 0x140157d57
invalid
invalid
push qword [rcx - 0x276f16e9]
invalid
invalid
push qword [rcx - 0x277616e8]
sbb cl, ch
mov eax, ebx
invalid
push qword [rcx - 0x277d16e7]
invalid
sbb ecx, ebp
invalid
push qword [rcx - 0x278416e6]
sbb ch, cl
jnp 0x14015a4b2
invalid
push qword [rcx - 0x278b16e5]
sbb ebp, ecx
je 0x14015a4b9
invalid
sbb al, 0xe9
insd dword [rdi], dx
fdivr st(7)
push qword [rcx - 0x279916e3]
sbb eax, 0xffd866e9
sbb eax, 0xffd866e9
push qword [rcx - 0x27a016e2]
invalid
invalid
pop rdi
fdivr st(7)
invalid
invalid
and cl, ch
push rcx
fdivr st(7)
push qword [rcx - 0x27b516df]
and ecx, ebp
fdivr st(7)
and ecx, ebp
fdivr st(7)
push qword [rcx - 0x27bc16de]
invalid
mov r8d, 0x118
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x990]
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x9e0]
lea rax, [rsp + 0xd00]
movups xmmword [rax + 0x28], xmm0
movups xmm0, xmmword [rsp + 0x9d0]
movups xmmword [rax + 0x18], xmm0
movdqu xmm0, xmmword [rsp + 0x990]
movdqu xmm1, xmmword [rsp + 0x9a0]
movdqu xmm2, xmmword [rsp + 0x9b0]
movups xmm3, xmmword [rsp + 0x9c0]
movups xmmword [rax + 8], xmm3
movdqu xmmword [rax - 8], xmm2
movdqu xmmword [rax - 0x18], xmm1
movdqu xmmword [rax - 0x28], xmm0
lea rcx, [rsp + 0x6f0]
call fcn.140049a80
cmp qword [r14 + 0x1b8], r12
jbe 0x140160412
mov rcx, qword [r14 + 0x1a8]
test rcx, rcx
je 0x140160412
cmp dword [rcx + r15], 2
je 0x140160412
add rcx, r15
cmp dword [rcx + 0x114], r13d
jne 0x140160412
add rcx, 0x18
add rsi, 0x20
mov qword [rsp + 0xcd0], 5
mov rdx, rsi
lea r8, [rsp + 0xcd0]
call fcn.140055ca0
cmp qword [r14 + 0x1b8], r12
jbe 0x140160412
mov rax, qword [r14 + 0x1a8]
test rax, rax
je 0x140160412
cmp dword [rax + r15], 2
je 0x140160412
add rax, r15
cmp dword [rax + 0x114], r13d
jne 0x140160412
mov rdx, qword [rax + 0xa8]
mov rcx, qword [rax + 0xb0]
mov qword [rax + 0xa8], 0
mov al, 3
mov dword [rsp + 0x38], eax
test rdx, rdx
mov r12, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x6f]
je 0x14015a681
call qword [rdx + 8]
mov r13d, dword [rsp + 0x1e8]
movzx edx, word [rsp + 0x94]
movzx r8d, byte [rsp + 0x6e]
mov r9, qword [rsp + 0x368]
movzx r10d, word [rsp + 0x92]
mov r11d, dword [rsp + 0x13c]
mov r15, rbp
mov dword [rsp + 0x1e8], r13d
mov rbp, qword [rsp + 0x50]
jmp 0x14015b9e4
test r15d, r15d
je 0x140159573
mov eax, r15d
and eax, 1
jne 0x140159573
mov dword [rsp + 0x78], 1
cmp dword [rdi + 0x10], 0
jne 0x14015a381
mov qword [rsp + 0x1c0], r13
mov dword [rsp + 0x3d8], ebp
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0xc8], r14
mov edi, 0
mov r12d, 0
mov ebp, 0
lea r13, [0x140223360]
lea r14, str.combase.dll
mov al, 1
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x14], r15d
ja case.0x14013fc1f.74
lea eax, [r15 + 2]
mov ecx, eax
shr ecx, 0x1f
mov rdx, qword [rsp + 0x50]
mov dword [rdx + 0x10], ecx
mov dword [rdx + 0x14], eax
mov rax, qword [rdx + 0x170]
cmp rax, qword [rdx + 0x178]
jbe 0x14015c7a3
mov eax, dword [rdx + 0x9c]
mov ecx, dword [rdx + 0x11c]
mov dword [rsp + 0x314], r15d
mov byte [rsp + 0x250], 6
mov word [rsp + 0x320], 0
mov qword [rsp + 0x278], 0
mov dword [rsp + 0x2b8], 0
mov dword [rsp + 0x280], ecx
mov dword [rsp + 0x318], 0
mov qword [rsp + 0x200], 0
mov dword [rsp + 0x2c4], 0
mov dword [rsp + 0x2d0], 0
mov dword [rsp + 0x2dc], 0
lea rcx, [rsp + 0x210]
mov byte [rcx + 0x116], 0
mov dword [rcx + 0x112], 0
movups xmmword [rcx + 0x74], xmm6
mov dword [rcx + 0x84], 0
mov dword [rsp + 0x2a0], eax
mov dword [rsp + 0x2a4], eax
mov dword [rsp + 0x31c], 0
mov dword [rsp + 0x2e8], 0
mov word [rsp + 0x327], 0x100
mov dword [rsp + 0x248], 0x3b9aca00
mov dword [rsp + 0x2f4], 0
mov qword [rsp + 0x218], 0
mov qword [rsp + 0x2a8], 0
mov dword [rsp + 0x300], 0
mov qword [rsp + 0x230], 0
lea rcx, [rsp + 0xcd0]
mov rdx, qword [rsp + 0x1c0]
mov r8d, r15d
lea r9, [rsp + 0x200]
call fcn.1400528f0
mov rsi, qword [rsp + 0xcd0]
mov ebx, dword [rsp + 0xcd8]
cmp qword [rsi + 0x10], rbx
jbe 0x140160412
mov rax, qword [rsi]
test rax, rax
je 0x140160412
imul rdi, rbx, 0x130
cmp dword [rax + rdi], 2
je 0x140160412
mov sil, 0xb
xor r15d, r15d
xor ebx, ebx
jmp 0x14015aea1
mov sil, 3
xor ebx, ebx
jmp 0x14015abf6
mov qword [rsp + 0x500], r12
mov qword [rsp + 0x508], rax
mov dword [rsp + 0x510], r15d
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x518], rax
cmp byte [rsp + 0xc8], 0
mov r12, qword [rsp + 0x60]
jne 0x14015aa5c
test r15d, r15d
je 0x14015aa5c
lea rdx, [r14 + 0xb0]
lea rax, [r14 + 0xb4]
lea rcx, [r14 + 0x14]
test r15b, 1
cmove rdx, qword [rsp + 0x128]
cmovne rcx, rax
xor eax, eax
cmp dword [rdx], 0
jne 0x14015c263
cmp dword [rcx], r15d
ja 0x14015c263
cmp dword [r14 + 0x18], 0
mov r8, qword [rsp + 0x70]
jne 0x140160412
cmp byte [r14 + 0x1a0], 0
lea rax, [0x140234700]
mov rdi, qword [rsp + 0x88]
je 0x14015aab3
mov ecx, r15d
lea rax, [0x140234700]
and ecx, 1
je 0x14015aab3
cmp dword [r14 + 0x10], 0
lea rax, [0x140223360]
jne 0x14015aab3
lea rax, [0x140223360]
cmp dword [r14 + 0x14], r15d
jbe 0x14015c627
mov rcx, rax
shr rcx, 0x20
mov qword [rsp + 0x8d8], rcx
mov byte [rsp + 0x87], 1
mov dword [rsp + 0x1ec], 1
mov dword [rsp + 0x7fc], 0
mov dword [rsp + 0x7f8], 0
mov dword [rsp + 0x7f4], 0
mov dword [rsp + 0x7f0], 0
mov rdx, rax
lea rcx, str.combase.dll
mov qword [rsp + 0x960], rcx
mov dword [rsp + 0x1dc], eax
mov al, 1
mov r15, r8
jmp 0x14015c296
add dword [r14 + 0xa0], ebp
mov ecx, dword [rax + 0xa0]
test ecx, ecx
mov edx, 0
cmovle ecx, edx
cmp ecx, ebp
jae 0x14015ab61
movabs rax, 0xffffffff00000000
mov rsi, qword [rsp + 0x480]
and rsi, rax
or rsi, 3
jmp 0x14015ae8d
mov rcx, qword [rax + 0x30]
cmp rcx, 1
je 0x14015ae11
cmp ecx, 2
jne 0x14015ae16
mov dword [r14 + 0x5c], eax
mov ecx, dword [r14 + 0x5c]
lea eax, [rcx + rbp]
shl rax, 0x20
add ecx, ebp
movabs rcx, 0x300000001
cmovo rax, rcx
mov cl, 3
mov dword [rsp + 0x38], ecx
test al, al
jne 0x14015abbf
shr rax, 0x20
mov dword [r14 + 0x5c], eax
xor r13d, r13d
mov dword [rsp + 0x50], r9d
jmp 0x140159bf9
mov bl, 1
mov sil, 3
test dl, 1
jne 0x14015abf6
mov edx, dword [rsp + 0x788]
mov r8d, 0xffffff38
add edx, r8d
cmp dx, 0xff9c
setb r15b
mov sil, 0xa
jmp 0x14015aea1
jmp 0x14015aea1
mov dword [r14 + 0x58], ecx
mov ecx, dword [r14 + 0x5c]
sub ecx, eax
lea rsi, [0x140223360]
jo 0x1401597c5
mov dword [r14 + 0x5c], ecx
mov edx, dword [r14 + 0x5c]
lea ecx, [rax + rdx]
shl rcx, 0x20
add eax, edx
movabs rax, 0x300000001
cmovo rcx, rax
test cl, cl
jne 0x14015ac3d
shr rcx, 0x20
mov dword [r14 + 0x5c], ecx
movabs rax, 0xffffffff00000000
and r8, rax
or r8, 5
xor r10d, r10d
mov rsi, r8
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x1f0], eax
jmp 0x1401597c5
mov r8, qword [rsi + 0x58]
test r8, r8
je 0x14015ac85
cmp qword [rsi + 0x60], 0
je 0x14015ac85
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov word [rsi + 0x50], 0x200
mov eax, dword [rsp + 0x140]
mov dword [rsi + 0x54], eax
mov dword [rsi + 0x58], edi
mov rax, qword [rsi + 0x90]
mov rcx, qword [rsi + 0x98]
mov qword [rsi + 0x90], 0
test rax, rax
je 0x14015acb9
call qword [rax + 8]
mov r12, r13
mov r15, rbx
mov rax, qword [rsi + 0xa8]
mov rcx, qword [rsi + 0xb0]
mov qword [rsi + 0xa8], 0
test rax, rax
je 0x14015ace0
call qword [rax + 8]
mov rsi, qword [rsp + 0x200]
mov r13d, dword [rsp + 0x208]
mov ebp, dword [rsp + 0x20c]
lea rdx, [r12 + 0x10]
lea rbx, [r14 + 0xb8]
mov rcx, rbx
lea r8, [rsp + 0x200]
call fcn.14016c890
mov rcx, qword [rsi + 0x10]
cmp rcx, r13
jbe 0x140160412
mov rax, qword [rsi]
test rax, rax
je 0x140160412
imul rdi, r13, 0x130
cmp dword [rax + rdi], 2
je 0x140160412
lea r8, [rax + rdi]
cmp dword [r8 + 0x114], ebp
jne 0x140160412
mov edx, dword [r8 + 0x84]
test edx, edx
jle 0x14015ad7b
mov dword [r8 + 0x84], 0
mov rcx, rbx
mov r8, rsi
mov r9, qword [rsp + 0x48]
call fcn.140051dc0
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x10]
cmp rcx, r13
jbe 0x140160412
cmp r8d, 0x3b9aca00
setne r8b
call fcn.14004af80
mov rcx, r13
call fcn.1401f2d54
mov r12, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x88]
mov rcx, r14
call fcn.1401f2d54
mov esi, 2
cmp bpl, 3
je case.0x14015808e.2
jmp 0x14015da11
test rbp, rbp
jne 0x14015ae74
mov r13b, 1
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x50], ebx
jmp 0x140159be2
cmp cl, 6
jb 0x14015aef0
lea ecx, [rax - 3]
cmp cl, 2
ja 0x14015aeb3
cmp cl, 1
jne 0x14015aef0
test rax, rax
je 0x14015aef0
cmp eax, 1
jne 0x14015aed2
lea rcx, [rdi + 0x70]
mov rax, qword [rdi + 0x58]
mov rdx, qword [rdi + 0x60]
mov r8, qword [rdi + 0x68]
call qword [rax + 0x10]
jmp 0x14015aef0
mov r8, qword [rdi + 0x58]
test r8, r8
je 0x14015aef0
cmp qword [rdi + 0x60], 0
je 0x14015aef0
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov byte [rdi + 0x50], sil
mov byte [rdi + 0x51], r15b
mov byte [rdi + 0x52], r12b
movdqu xmm0, xmmword [rsp + 0x990]
movdqu xmm1, xmmword [rsp + 0x9a0]
movdqu xmmword [rdi + 0x53], xmm0
movdqu xmmword [rdi + 0x63], xmm1
mov rax, qword [rsp + 0x9ad]
mov qword [rdi + 0x70], rax
test bl, bl
je 0x14015af44
mov r12, qword [rsp + 0x348]
mov r15d, dword [rsp + 0x350]
mov edi, dword [rsp + 0x354]
jmp 0x14015afda
mov eax, dword [rsp + 0x7a0]
cmp eax, dword [rbp + 0x94]
jbe 0x14015af59
mov dword [rbp + 0x94], eax
mov rax, qword [r14 + 0x178]
cmp qword [r14 + 0x170], rax
jbe 0x140160412
mov r12, qword [rsp + 0x348]
mov r15d, dword [rsp + 0x350]
cmp qword [r12 + 0x10], r15
jbe 0x140160412
mov rcx, qword [r12]
test rcx, rcx
je 0x140160412
imul rdx, r15, 0x130
cmp dword [rcx + rdx], 2
je 0x140160412
mov edi, dword [rsp + 0x354]
add rcx, rdx
cmp dword [rcx + 0x114], edi
jne 0x140160412
cmp qword [r12 + 0x10], r15
jbe 0x140160412
mov rax, qword [r12]
test rax, rax
je 0x140160412
imul r13, r15, 0x130
cmp dword [rax + r13], 2
je 0x140160412
add rax, r13
cmp dword [rax + 0x114], edi
jne 0x140160412
cmp dword [rax + 0x30], 1
je 0x14015b663
mov r15, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x50]
mov dword [rsp + 0x1e0], r11d
mov dword [rsp + 0x1e4], r10d
mov qword [rsp + 0x678], r9
mov qword [rsp + 0x7c0], r8
mov qword [rsp + 0x7c8], rdx
mov r13d, ecx
cmp qword [rsp + 0x6b0], 0
je 0x14015b154
mov r8, qword [rsp + 0x6a8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsp + 0x6c8]
test rdi, rdi
je 0x14015b1a4
mov rsi, qword [rsp + 0x6b8]
add rsi, 0x30
jmp 0x14015b18a
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x68
dec rdi
je 0x14015b1a4
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14015b16f
lea rcx, [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
jmp 0x14015b16f
cmp qword [rsp + 0x6c0], 0
je 0x14015b1c5
mov r8, qword [rsp + 0x6b8]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsp + 0x6e0]
test rdi, rdi
je 0x14015b1f9
mov rsi, qword [rsp + 0x6d0]
add rsi, 0x38
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
dec rdi
jne 0x14015b1de
cmp qword [rsp + 0x6d8], 0
mov esi, r13d
je 0x14015b21d
mov r8, qword [rsp + 0x6d0]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x6f0]
call fcn.140049a80
cmp ebx, 3
mov rdi, qword [rsp + 0x88]
je 0x14015b539
cmp ebx, 4
movzx edx, word [rsp + 0x94]
mov ecx, dword [rsp + 0x3a8]
mov r8d, dword [rsp + 0x3d4]
je 0x14015b5d0
mov al, 3
mov dword [rsp + 0x38], eax
cmp ebx, 5
je 0x14015b510
mov qword [rsp + 0xed0], rbx
mov byte [rsp + 0xed8], r8b
mov byte [rsp + 0xed9], sil
mov word [rsp + 0xeda], dx
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0xedc], eax
mov eax, dword [rsp + 0x1e4]
mov dword [rsp + 0xee0], eax
mov rax, qword [rsp + 0x868]
mov dword [rsp + 0xee4], eax
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0xee8], rax
mov rax, qword [rsp + 0x678]
shl rax, 0x20
mov ecx, ecx
or rcx, rax
mov qword [rsp + 0xef0], rcx
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0xef8], rax
movaps xmm0, xmmword [rsp + 0x420]
lea rcx, [rsp + 0xee8]
movups xmmword [rcx + 0x18], xmm0
mov qword [rsp + 0xf10], 8
movaps xmm0, xmmword [rsp + 0x640]
movups xmmword [rcx + 0x30], xmm0
mov word [rsp + 0xf28], 0
movzx eax, word [rsp + 0xca4]
mov word [rcx + 0x46], ax
mov eax, dword [rsp + 0xca0]
mov dword [rcx + 0x42], eax
mov byte [rsp + 0xf30], 0xb
mov rax, qword [rsp + 0xb9f]
mov qword [rcx + 0x58], rax
movups xmm0, xmmword [rsp + 0xb90]
movups xmmword [rcx + 0x49], xmm0
mov qword [rsp + 0xf48], 0
mov rax, qword [rsp + 0x6a0]
mov qword [rcx + 0x78], rax
movups xmm0, xmmword [rsp + 0x690]
movups xmmword [rcx + 0x68], xmm0
mov qword [rsp + 0xf68], 0
mov rax, qword [rsp + 0x9a0]
mov qword [rcx + 0x98], rax
movups xmm0, xmmword [rsp + 0x990]
movups xmmword [rcx + 0x88], xmm0
mov qword [rsp + 0xf88], 0
mov rax, qword [rsp + 0xce0]
mov qword [rcx + 0xb8], rax
movups xmm0, xmmword [rsp + 0xcd0]
movups xmmword [rcx + 0xa8], xmm0
mov qword [rsp + 0xfa8], 0
mov rax, qword [rsp + 0xb00]
mov qword [rcx + 0xd8], rax
movdqu xmm0, xmmword [rsp + 0xaf0]
movdqu xmmword [rcx + 0xc8], xmm0
mov word [rsp + 0xfc8], 0x1af
movzx eax, word [rsp + 0xc0c]
mov word [rcx + 0xe6], ax
mov eax, dword [rsp + 0xc08]
mov dword [rcx + 0xe2], eax
mov byte [rsp + 0xfd0], 0
mov eax, dword [rsp + 0xcc0]
mov dword [rcx + 0xf1], eax
mov rax, qword [rsp + 0xcb8]
mov qword [rcx + 0xe9], rax
mov byte [rsp + 0xfdd], 2
mov eax, dword [rsp + 0x918]
mov dword [rsp + 0xfe0], eax
mov byte [rsp + 0xfe4], 5
movzx eax, byte [rsp + 0x952]
mov byte [rcx + 0xff], al
movzx eax, word [rsp + 0x950]
mov word [rcx + 0xfd], ax
mov rax, qword [rsp + 0x8f0]
lea rcx, [rax + 0xa0]
mov r8, qword [rsp + 0xad8]
add rax, 0x140
mov qword [rsp + 0x28], rax
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0xed0]
lea rsi, [rsp + 0x348]
mov r9, rsi
call fcn.14019aca0
mov rax, qword [rsp + 0x8f0]
lea rcx, [rax + 0xa0]
add rax, 0x140
mov qword [rsp + 0x20], rax
mov rdx, rsi
mov r8d, 7
mov r9, rbx
call fcn.1400556e0
mov rcx, qword [rsp + 0x8f0]
mov rdx, rsi
mov esi, r13d
mov r8, rbx
call fcn.14004a220
movzx edx, word [rsp + 0x94]
mov rbx, qword [rsp + 0x48]
movzx r8d, byte [rsp + 0x6e]
mov r9, qword [rsp + 0x368]
movzx r10d, word [rsp + 0x92]
mov r11d, dword [rsp + 0x13c]
jmp 0x14015b9e4
mov rax, qword [rsp + 0x348]
mov ecx, dword [rsp + 0x350]
cmp qword [rax + 0x10], rcx
movzx edx, word [rsp + 0x94]
mov r9, qword [rsp + 0x368]
movzx r10d, word [rsp + 0x92]
mov r11d, dword [rsp + 0x13c]
jbe 0x140160412
mov rax, qword [rax]
test rax, rax
je 0x140160412
imul rcx, rcx, 0x130
cmp dword [rax + rcx], 2
je 0x140160412
mov r8d, dword [rsp + 0x354]
add rax, rcx
mov dword [rsp + 0x1e8], r8d
cmp dword [rax + 0x114], r8d
jne 0x140160412
mov dword [rsp + 0x3ac], 7
mov r8b, 1
mov dword [rsp + 0x38], 0
mov rbx, qword [rsp + 0x48]
jmp 0x14015b9e4
mov rbx, qword [rsp + 0x48]
mov eax, dword [rsp + 0x1e4]
mov edi, dword [rsp + 0x1e0]
jmp 0x14015b95d
add dword [rax], eax
add byte [rbx + rcx*4 - 0x64], al
and al, 0xe0
add dword [rax], eax
add byte [rax - 0x75], cl
insb byte [rdi], dx
and al, 0x50
jbe 0x140160412
mov rax, qword [r12]
test rax, rax
je 0x140160412
cmp dword [rax + r13], 2
je 0x140160412
add rax, r13
cmp dword [rax + 0x114], edi
jne 0x140160412
movaps xmmword [rsp + 0x420], xmm6
movaps xmmword [rsp + 0x640], xmm6
and al, 0x20
add al, 0
add byte [rdi], cl
sub dword [rsp + 0x640], esi
xor ebx, ebx
mov edx, 8
mov r8d, 2
mov dword [rsp + 0x918], edi
mov dword [rsp + 0x3a8], 0
xor r9d, r9d
mov r12, qword [rsp + 0x60]
jmp 0x14015b108
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0xaf0]
call fcn.140049a80
mov eax, 1
mov sil, 1
xor r8d, r8d
movzx edx, word [rsp + 0x94]
mov rbx, qword [rsp + 0x48]
mov r15, r13
mov rcx, qword [rsp + 0x7c8]
mov r9, rcx
shr r9, 0x20
mov dword [rsp + 0x3d4], r8d
invalid
add eax, dword [rax]
add byte [rcx + rcx*4 + 0x44], al
and al, 0x38
mov r8d, esi
mov r10d, edx
mov dword [rsp + 0x1e0], edi
mov dword [rsp + 0x1e8], edi
mov dword [rsp + 0x1e4], eax
mov dword [rsp + 0x3ac], eax
mov rax, qword [rsp + 0x868]
mov r11d, eax
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0x668], rax
test byte [rax + rbp*2], ah
invalid
add byte [rax], al
mov eax, dword [rsp + 0x3a8]
mov dword [rsp + 0x4d8], eax
mov rax, qword [rsp + 0x678]
mov dword [rsp + 0x4d4], eax
mov eax, ecx
mov dword [rsp + 0x4d0], ecx
mov rdi, qword [rsp + 0x88]
invalid
test byte [rax + rbp*2], ah
invalid
mov byte [rsp + 0x6f], sil
mov word [rsp + 0x94], dx
cmp byte [rsp + 0x38], 0
mov byte [rsp + 0x6e], r8b
mov qword [rsp + 0x368], r9
mov word [rsp + 0x92], r10w
mov dword [rsp + 0x13c], r11d
je 0x14015ba8f
mov eax, r9d
mov dword [rsp + 0x7fc], r9d
mov eax, dword [rsp + 0x4d0]
mov dword [rsp + 0x7f8], eax
mov eax, dword [rsp + 0x4d4]
mov dword [rsp + 0x7f4], eax
mov eax, dword [rsp + 0x4d8]
fadd dword [rax + rax]
add byte [rcx + 0x7f02484], cl
add byte [rax], al
fadd dword [rax + rax]
add byte [rcx + 0x7f02484], cl
add byte [rax], al
mov rsi, qword [rsp + 0x668]
mov qword [rsp + 0x960], rsi
mov eax, r11d
mov qword [rsp + 0x8d8], rax
mov eax, dword [rsp + 0x3ac]
add byte [rcx + 0x1dc2484], cl
add byte [rax], al
add byte [rcx + 0x1dc2484], cl
add byte [rax], al
mov r13d, dword [rsp + 0x1e8]
mov word [rsp + 0x4fc], r10w
mov byte [rsp + 0x87], r8b
jmp 0x14015baea
mov r9, qword [rsp + 0xad8]
mov rax, qword [rsp + 0x8f0]
lea rcx, [rax + 0xa0]
add rax, 0x140
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x348]
mov qword [rsp + 0x20], rax
mov edx, dword [rsp + 0x3ac]
call fcn.140199e90
mov al, 3
mov dword [rsp + 0x38], eax
mov r13d, dword [rsp + 0x1ec]
mov rsi, qword [rsp + 0x668]
mov qword [rsp + 0x668], rsi
cmp dword [rsp + 0x128], 0x3b9aca00
setne r8b
mov rcx, qword [rsp + 0x78]
lea rdx, [rsp + 0x348]
call fcn.14004af80
mov rcx, rbp
call fcn.1401f2d54
mov dword [rsp + 0x1ec], r13d
mov rcx, r14
call fcn.1401f2d54
mov esi, 2
cmp byte [rsp + 0x38], 3
jne 0x14015db24
nop dword [rax + rax]
mov edx, dword [rsp + 0x58]
movzx eax, byte [rsp + 0x376]
mov byte [rsp + 0x386], al
movzx eax, word [rsp + 0x374]
mov word [rsp + 0x384], ax
lea ecx, [rsi - 2]
lea rax, [rcx + 1]
cmp ecx, 2
mov ecx, 0
cmovae rax, rcx
test rax, rax
mov qword [rsp + 0x88], rdi
je 0x14015bba0
cmp rax, 1
jne 0x14015d495
mov rsi, qword [rsp + 0xa8]
jmp 0x1401531a8
test byte [rsp + 0x107], 1
jne 0x14015bcbc
cmp dword [r12 + 0x478], 2
mov eax, dword [rsp + 0x808]
movzx ecx, byte [rsp + 0x1c8]
jne 0x140160412
mov dword [r12 + 0x478], esi
mov byte [r12 + 0x47c], cl
mov ecx, dword [rsp + 0x4f4]
mov byte [r12 + 0x47d], cl
mov ecx, dword [rsp + 0x4f0]
mov word [r12 + 0x47e], cx
mov ecx, dword [rsp + 0x800]
mov dword [r12 + 0x480], ecx
mov ecx, dword [rsp + 0x804]
mov dword [r12 + 0x484], ecx
mov dword [r12 + 0x488], r15d
mov qword [r12 + 0x48c], rdi
mov ecx, dword [rsp + 0x15c]
mov dword [r12 + 0x494], ecx
mov ecx, dword [rsp + 0x68]
mov dword [r12 + 0x498], ecx
mov dword [r12 + 0x49c], edx
mov dword [r12 + 0x4a0], eax
mov eax, dword [rsp + 0x930]
mov dword [r12 + 0x4a4], eax
mov eax, dword [rsp + 0x934]
mov dword [r12 + 0x4a8], eax
mov eax, dword [rsp + 0x938]
mov dword [r12 + 0x4ac], eax
movzx eax, byte [rsp + 0x107]
mov byte [r12 + 0x4b0], al
movzx eax, word [rsp + 0x384]
mov rcx, qword [rsp + 0xc98]
mov word [rcx], ax
movzx eax, byte [rsp + 0x386]
mov byte [rcx + 2], al
mov rsi, qword [rsp + 0xa8]
jmp 0x1401531a8
cmp dword [r12 + 0x438], 1
jne 0x14015d58b
cmp dword [r12 + 0x45c], 0
je 0x14015bcf7
mov eax, dword [r12 + 0x460]
lea rcx, [rax - 0x4000]
cmp rcx, 0xffc000
jae 0x140160412
mov qword [r12 + 0x10], rax
cmp dword [r12 + 0x464], 0
je 0x14015bd12
mov eax, dword [r12 + 0x468]
mov qword [r12 + 0x370], rax
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x58], edx
cmp dword [r12 + 0x43c], 0
je 0x14015bd5e
mov eax, dword [r12 + 0x440]
mov rcx, qword [r12 + 0x1d0]
cmp rcx, rax
cmovbe rcx, rax
cmp qword [r12 + 0x1c8], 0
cmove rcx, rax
mov qword [r12 + 0x1c8], 1
mov qword [r12 + 0x1d0], rcx
mov rsi, qword [r12 + 0x400]
lea r14, [rsi + 0x10]
mov rcx, r14
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rsi + 0x18]
test al, al
mov r15d, dword [rsp + 0x68]
jne 0x140160412
cmp dword [r12 + 0x46c], 0
je 0x14015bd9e
cmp dword [r12 + 0x470], 0
setne byte [rsi + 0xbd]
cmp dword [r12 + 0x454], 0
mov dword [rsp + 0x68], r15d
je 0x14015bfb0
mov edx, dword [r12 + 0x458]
mov ecx, dword [rsi + 0xac]
mov dword [rsi + 0xac], edx
xor r8d, r8d
mov eax, edx
sub eax, ecx
setne r8b
mov r9d, 0xff
cmovb r8d, r9d
test r8b, r8b
je 0x14015bfb0
movzx r8d, r8b
cmp r8d, 1
jne 0x14015bee0
mov rcx, qword [rsi + 0x1f8]
test rcx, rcx
je 0x14015bfb0
mov rdx, qword [rsi + 0x210]
mov r8, rcx
xor r9d, r9d
nop
cmp rdx, r9
jbe 0x140160412
mov r15, rbx
mov r11, qword [rsi + 0x200]
mov rdi, r9
shl rdi, 4
mov ebx, dword [r11 + rdi + 0xc]
cmp qword [rsi + 0x1c8], rbx
jbe 0x140160412
mov r10, qword [rsi + 0x1b8]
test r10, r10
je 0x140160412
imul rbx, rbx, 0x130
cmp dword [r10 + rbx], 2
je 0x140160412
mov r11d, dword [r11 + rdi + 8]
add r10, rbx
cmp dword [r10 + 0x114], r11d
jne 0x140160412
mov r11d, dword [r10 + 0xa0]
add r11d, eax
jo 0x14015d4af
mov ebx, dword [r10 + 0xa4]
lea edi, [rax + rbx]
add ebx, eax
mov dword [r10 + 0xa0], r11d
movabs r11, 0x300000001
jo 0x14015bea9
shl rdi, 0x20
mov r11, rdi
mov rdi, r11
shr rdi, 0x20
test r11b, 1
mov rbx, r15
jne 0x14015d4b7
cmp rcx, r8
sbb r9, 0xffffffffffffffff
cmp rcx, r8
mov dword [r10 + 0xa4], edi
sbb r8, 0
cmp r9, r8
jb 0x14015be10
jmp 0x14015bfb0
mov rax, qword [rsi + 0x1f8]
test rax, rax
je 0x14015bfb0
sub ecx, edx
mov rdx, qword [rsi + 0x210]
mov r8, rax
xor r9d, r9d
nop
cmp rdx, r9
jbe 0x140160412
mov r15, rbx
mov r11, qword [rsi + 0x200]
mov rdi, r9
shl rdi, 4
mov ebx, dword [r11 + rdi + 0xc]
cmp qword [rsi + 0x1c8], rbx
jbe 0x140160412
mov r10, qword [rsi + 0x1b8]
test r10, r10
je 0x140160412
imul rbx, rbx, 0x130
cmp dword [r10 + rbx], 2
je 0x140160412
mov r11d, dword [r11 + rdi + 8]
add r10, rbx
cmp dword [r10 + 0x114], r11d
jne 0x140160412
mov r11d, dword [r10 + 0xa0]
sub r11d, ecx
mov edi, 3
mov rbx, r15
jo 0x14015d4b7
mov dword [r10 + 0xa0], r11d
mov r11d, dword [r10 + 0xa4]
sub r11d, ecx
jo 0x14015d4b7
cmp rax, r8
sbb r9, 0xffffffffffffffff
cmp rax, r8
mov dword [r10 + 0xa4], r11d
sbb r8, 0
cmp r9, r8
jb 0x14015bf00
mov rcx, r14
call fcn.1401f2d54
mov dword [r12 + 0x438], 2
mov edx, dword [rsp + 0x58]
mov r15, qword [rsp + 0x70]
mov rsi, qword [rsp + 0xa8]
jmp 0x1401531a8
mov dword [rsp + 0x1dc], 5
mov ecx, r15d
mov dword [rsp + 0x1ec], r15d
mov byte [rsp + 0x87], 1
mov rdx, qword [rsp + 0x7b8]
mov r15, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x88]
mov qword [rsp + 0x7b8], rdx
mov dword [rsp + 0x38], eax
jmp 0x1401590f7
lea eax, [r15 + 2]
mov ecx, eax
shr ecx, 0x1f
mov dword [r14 + 0x10], ecx
mov dword [r14 + 0x14], eax
mov rax, qword [r14 + 0x170]
cmp rax, qword [r14 + 0x178]
jbe 0x14015c82c
movabs rax, 0xffffffff00000000
mov rcx, qword [rsp + 0x7b8]
and rcx, rax
or rcx, r15
mov qword [rsp + 0x7b8], rcx
mov eax, dword [r14 + 0x9c]
mov ecx, dword [r14 + 0x11c]
mov dword [rsp + 0x314], r15d
mov byte [rsp + 0x250], 6
mov word [rsp + 0x320], 0
mov qword [rsp + 0x278], 0
mov dword [rsp + 0x2b8], 0
mov dword [rsp + 0x280], ecx
mov dword [rsp + 0x318], 0
mov qword [rsp + 0x200], 0
mov dword [rsp + 0x2c4], 0
mov dword [rsp + 0x2d0], 0
mov dword [rsp + 0x2dc], 0
lea rcx, [rsp + 0x210]
mov byte [rcx + 0x116], 0
mov dword [rcx + 0x112], 0
movups xmmword [rcx + 0x74], xmm6
mov dword [rcx + 0x84], 0
mov dword [rsp + 0x2a0], eax
mov dword [rsp + 0x2a4], eax
mov dword [rsp + 0x31c], 0
mov dword [rsp + 0x2e8], 0
mov word [rsp + 0x327], 0x100
mov dword [rsp + 0x248], 0x3b9aca00
mov dword [rsp + 0x2f4], 0
mov qword [rsp + 0x218], 0
mov qword [rsp + 0x2a8], 0
mov dword [rsp + 0x300], 0
mov qword [rsp + 0x230], 0
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x200]
call fcn.140053650
mov esi, eax
mov r13d, edx
jmp 0x140159056
mov dword [rdx + 0x18], 1
mov dword [rdx + 0x1c], r15d
mov al, 3
mov dword [rsp + 0x38], eax
mov ebx, dword [rsp + 0x3b4]
mov edi, dword [rsp + 0x3c0]
mov r12d, dword [rsp + 0x3bc]
mov ebp, dword [rsp + 0x3b8]
mov r13, qword [rsp + 0x850]
mov r14, qword [rsp + 0x848]
mov eax, dword [rsp + 0x4e0]
mov dword [rsp + 0x78], eax
movzx esi, byte [rsp + 0x97]
jmp case.0x14013fc1f.74
mov dword [r14 + 0x18], 1
mov dword [r14 + 0x1c], r15d
mov al, 3
mov r12, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x7b8]
mov rbx, qword [rsp + 0x48]
jmp 0x14015c289
mov rax, qword [rsp + 0x688]
mov qword [rax], rdi
movdqa xmm0, xmmword [rsp + 0x690]
movdqa xmm1, xmmword [rsp + 0x6a0]
mov rax, qword [rsp + 0x988]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov byte [rsp + 0x3f8], 4
mov dword [rsp + 0x58], edx
mov rdi, qword [r12 + 0x400]
lea rsi, [rdi + 0x10]
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
mov qword [rsp + 0x38], rdi
movzx eax, byte [rdi + 0x18]
test al, al
jne 0x140160412
mov qword [rsp + 0x858], rsi
mov rsi, qword [r12 + 0x408]
lea rcx, [rsi + 0x10]
mov qword [rsp + 0xc78], rcx
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rsi + 0x18]
test al, al
jne 0x140160412
mov rdx, rsi
mov rcx, qword [rsp + 0x38]
mov eax, dword [rcx + 0x68]
mov esi, dword [rcx + 0x6c]
sub esi, eax
mov qword [rsp + 0x48], rbx
mov rbx, rcx
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x490], rdx
jle 0x14015d62b
mov rax, qword [rsp + 0x500]
mov rdx, qword [rsp + 0x508]
mov r8, qword [rsp + 0x510]
lea rcx, [rsp + 0x518]
call qword [rax + 0x10]
lea rcx, [rsp + 0x3f8]
mov rdx, rsi
call fcn.14004ca40
mov edx, dword [rsp + 0x58]
movzx r9d, byte [rsp + 0x3f8]
cmp r9b, 4
jne 0x14015f61c
jmp 0x14015d290
mov byte [rsp + 0x3f8], 4
mov r9b, 4
mov edx, dword [rsp + 0x58]
cmp r9b, 4
jne 0x14015f61c
jmp 0x14015d290
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x400], eax
mov rax, qword [rsp + 0x3e0]
mov dword [rsp + 0x404], eax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x408], rax
mov eax, dword [rsp + 0x168]
mov dword [rsp + 0x410], eax
mov eax, dword [rsp + 0x16c]
mov dword [rsp + 0x414], eax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x418], eax
mov eax, dword [rsp + 0x170]
mov dword [rsp + 0x41c], eax
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0x3f8], eax
mov ecx, dword [rsp + 0x160]
mov dword [rsp + 0x3fc], ecx
mov r9d, eax
mov edx, dword [rsp + 0x58]
cmp r9b, 4
jne 0x14015f61c
jmp 0x14015d290
mov byte [rsp + 0x3f8], 3
mov r9b, 3
cmp r9b, 4
jne 0x14015f61c
jmp 0x14015d290
mov edi, 3
mov rbx, r15
movaps xmmword [rsp + 0x200], xmm6
mov rcx, r14
call fcn.1401f2d54
movdqa xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x500], xmm0
lea rax, [0x140235200]
mov edx, dword [rsp + 0x58]
mov r15, qword [rsp + 0x70]
mov byte [rsp + 0x3f9], 1
mov dword [rsp + 0x3fc], edi
mov qword [rsp + 0x400], rax
lea rax, str.combase.dll
mov qword [rsp + 0x408], rax
movdqa xmm0, xmmword [rsp + 0x500]
lea rax, [rsp + 0x410]
movdqu xmmword [rax], xmm0
mov byte [rsp + 0x3f8], 1
mov r9b, 1
cmp r9b, 4
jne 0x14015f61c
jmp 0x14015d290
movaps xmmword [rsp + 0x500], xmm6
mov edi, 1
lea rax, [0x1402a0ef0]
jmp 0x14015d4e9
mov rcx, r14
call fcn.1401f2d54
mov bpl, 1
mov dword [rsp + 0x4c8], 1
mov dword [rsp + 0x4cc], 0
lea rax, [0x14029fee8]
mov qword [rsp + 0x8c8], rax
lea rax, str.combase.dll
mov qword [rsp + 0x8c0], rax
mov dword [rsp + 0x38], ebp
mov rax, qword [rsp + 0x8c8]
mov r15, rax
shr r15, 0x20
xor edx, edx
xor r8d, r8d
xor r11d, r11d
mov edi, dword [rsp + 0x4cc]
mov r9, qword [rsp + 0x8c0]
mov r10d, eax
mov al, 1
mov ebp, dword [rsp + 0x4c8]
jmp 0x14015f57e
mov rcx, qword [rsp + 0x7d0]
mov r15, rcx
shr r15, 0x20
xor edx, edx
xor r8d, r8d
xor r11d, r11d
xor edi, edi
lea r9, str.combase.dll
mov al, 1
mov r10d, ecx
mov ebp, dword [rsp + 0x1f0]
jmp 0x14015f57e
mov rax, qword [rsp + 0x690]
mov rdx, qword [rsp + 0x698]
mov r8, qword [rsp + 0x6a0]
lea rcx, [rsp + 0x6a8]
call qword [rax + 0x10]
lea rcx, [0x1402357d8]
mov r15, rcx
shr r15, 0x20
mov ebp, 1
xor edx, edx
xor r8d, r8d
xor r11d, r11d
xor edi, edi
lea r9, str.combase.dll
mov al, 1
mov r10d, ecx
jmp 0x14015f57e
mov rax, qword [rsp + 0x850]
mov r15, rax
shr r15, 0x20
mov edx, dword [rsp + 0x3b8]
mov r8d, dword [rsp + 0x3bc]
mov r11d, dword [rsp + 0x3c0]
mov edi, dword [rsp + 0x3b4]
mov dword [rsp + 0x4e0], ebp
mov r9, qword [rsp + 0x848]
mov r10d, eax
movzx eax, word [rsp + 0x1fe]
mov ecx, eax
movzx eax, byte [rsp + 0x97]
jmp 0x14015f57e
mov edx, dword [rsp + 0x7fc]
mov r8d, dword [rsp + 0x7f8]
mov r11d, dword [rsp + 0x7f4]
mov edi, dword [rsp + 0x7f0]
mov r9, qword [rsp + 0x960]
mov rax, qword [rsp + 0x8d8]
mov r15d, eax
mov r10d, dword [rsp + 0x1dc]
mov ebp, dword [rsp + 0x1ec]
movzx eax, word [rsp + 0x4fc]
mov ecx, eax
movzx eax, byte [rsp + 0x87]
jmp 0x14015f57e
and byte [rcx], al
add byte [rax], al
add byte [rdi], cl
test esp, edi
sbb al, 0
add byte [rcx - 1], cl
ror dword [rcx + rcx*4 - 0x75], 0x78
add dword [rax], eax
add byte [rcx - 0x3a], al
and byte [rax], 1
add byte [rax], al
add dword [rax - 0x75], ecx
mov word [rax + rbp*4], fs
add dword [rax], eax
add byte [rax - 0x73], cl
xchg esp, eax
and al, 0xf0
sldt word [rax]
call fcn.140052d70
jmp 0x14015ecdb
add byte [rax], al
add byte [rax - 0x39], cl
test byte [rax + riz], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rbx - 0x7bf0fdc7], al
scasd eax, dword [rdi]
sbb al, 0
add byte [rcx + rdi - 0x6f], al
adc al, 1
add byte [rax], al
jne 0x140160412
mov r15d, r11d
mov rax, qword [rsp + 0x38]
mov r9, qword [rax + 0xd0]
mov r10d, dword [rcx + 0x84]
test r10d, r10d
mov r8d, 0
cmovg r8d, r10d
mov rax, qword [rcx + 0x88]
cmp r8, r9
cmovae r8, r9
mov r11, r8
sub r11, rax
mov edx, 0
cmovae rdx, r11
test ebp, ebp
je 0x14015e7ca
mov r11d, dword [rcx + 0x80]
sub r11d, ebp
jl 0x140160412
jno 0x14015eb16
mov r11d, r15d
mov r10d, ebp
sub rax, r10
mov qword [rcx + 0x88], rax
sub dword [rcx + 0x118], ebp
sub r8, rax
mov eax, 0
cmovae rax, r8
sar byte [rcx], 0xc2
sar byte [rcx], 0xc2
mov qword [rsp + 0x488], r10
jae 0x14015e82e
mov byte [rcx + 0x123], 1
mov rdx, qword [rcx + 0x90]
mov rax, qword [rcx + 0x98]
mov qword [rcx + 0x90], 0
test rdx, rdx
je 0x14015e82e
mov rcx, rax
call qword [rdx + 8]
mov r10, qword [rsp + 0x488]
mov r11d, r15d
mov rax, qword [rsp + 0x38]
mov ecx, dword [rax + 0xcc]
lea eax, [rcx + rbp]
shl rax, 0x20
add ecx, ebp
movabs rcx, 0x300000001
cmovo rax, rcx
test al, 1
jne 0x14015e863
shr rax, 0x20
mov rcx, qword [rsp + 0x38]
mov dword [rcx + 0xcc], eax
mov rdx, qword [rsp + 0x200]
cmp rdx, 2
mov r9d, dword [rsp + 0x1b0]
je 0x14015e90e
mov rcx, qword [rsp + 0x208]
mov rax, qword [rsp + 0x210]
test rdx, rdx
test edx, edx
add byte [rax - 0x75], cl
test byte [rax + rdx], ah
add al, byte [rax]
add byte [rax - 0x7b], cl
test edx, edx
je 0x14015e8a4
mov rdx, qword [rax + 0x10]
test edx, edx
je 0x14015e8a4
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0x218]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0x200]
mov eax, dword [rsp + 0x200]
mov eax, dword [rsp + 0x200]
cmp rax, 2
mov r9d, dword [rsp + 0x1b0]
add byte [rax], al
add byte [rax], al
mov r11d, r15d
mov r10, qword [rsp + 0x488]
add al, 0
invalid
je 0x14015e90e
add al, 0
add byte [rbx + rdi + 0x48], dh
test eax, eax
test rax, rax
je 0x14015e90e
mov rax, qword [rsp + 0x208]
lock dec qword [rax]
add al, byte [rax]
add al, dh
dec qword [rax]
jne 0x14015e90e
mov rcx, qword [rsp + 0x208]
mov rdx, qword [rsp + 0x210]
add al, byte [rax]
add al, ch
jne 0x14015e8df
invalid
invalid
add al, byte [rax]
add al, ch
jne 0x14015e8df
invalid
mov r10, qword [rsp + 0x488]
mov r11d, r15d
mov r9d, dword [rsp + 0x1b0]
test ebp, ebp
mov edx, dword [rsp + 0x154]
je 0x14015e94d
mov rax, qword [rsp + 0x8d0]
ror byte [rax], 1
add byte [rax], al
mov eax, dword [rax]
sub eax, ebp
jl 0x140160412
out 0x1a, eax
add byte [rax], al
out 0x1a, eax
add byte [rax], al
jo 0x14015e94d
mov rcx, qword [rsp + 0x38]
mov dword [rcx + 0xc8], eax
mov eax, dword [rcx + 0xcc]
sub eax, ebp
jo 0x14015e94d
mov rcx, qword [rsp + 0x38]
and al, 0x38
mov dword [rcx + 0xcc], eax
test r13, r13
je 0x14015e978
mov eax, edi
mov dword [rsp + 0x1f8], eax
cmp r13, 1
jne 0x14015e990
pshufd xmm0, xmm13, 0xee
jo 0x14015e92b
out dx, al
movq rax, xmm0
sub rax, rsi
invalid
mov esi, 0
cmovae rsi, rax
invalid
mov eax, edi
and al, 0xfe
cmp rsi, r10
movzx ecx, dil
movzx eax, al
ror byte [rdi], 0x46
ror dword [rcx + 0x1f82484], 0
invalid
ror byte [rdi], 0x46
ror dword [rcx + 0x1f82484], 0
add byte [rcx + rcx*4 - 0x18], cl
mov rax, r13
shr rax, 0x20
mov qword [rsp + 0x4a8], rax
and dil, 1
mov ecx, dword [rsp + 0xaf8]
mov word [rax + rdi*8], fs
or al, byte [rax]
add byte [rbx + rcx*4 - 0x6c], al
and al, 0xfc
cld
or al, byte [rax]
add byte [rcx], dh
test byte [rcx + 0x248c89c8], 0xf0
add byte [rax], al
invalid
mov word [rax + rdi*8], fs
or al, byte [rax]
add byte [rbx + rcx*4 - 0x6c], al
and al, 0xfc
cld
cld
or al, byte [rax]
add byte [rcx], dh
test byte [rcx + 0x248c89c8], 0xf0
add byte [rax], al
add byte [rcx + rcx*4 - 0x30], al
mov eax, r10d
mov eax, r10d
mov dword [rsp + 0xf4], r10d
mov r15d, edi
mov dword [rsp + 0x4dc], ebx
mov byte [rsp + 0xa5], r14b
mov byte [rsp + 0xa5], dh
mov byte [rsp + 0xa5], dh
mov byte [rsp + 0xa4], r11b
mov eax, r13d
call 0xc9e37332
test byte [rsp + rbp*8], ah
add byte [rax], al
add byte [rsi + 0x45], ah
movq mm1, mm5
call 0xc9e37332
test byte [rsp + rbp*8], ah
add byte [rax], al
add byte [rsi + 0x45], ah
movq mm1, mm5
movdqa xmm8, xmm12
mov rbx, qword [rsp + 0x38]
pop rsp
and al, 0x38
invalid
pop rsp
and al, 0x38
invalid
cmp cl, ch
xor byte [rbx], al
add byte [rax], al
mov eax, dword [rsp + 0x694]
mov edi, dword [rsp + 0x698]
mov ebx, dword [rsp + 0x69c]
and al, 0x9c
invalid
add byte [rax], al
movdqu xmm10, xmmword [rsp + 0x6a0]
invalid
add byte [rax], al
movdqu xmm11, xmmword [rsp + 0x6b0]
outsd dx, dword [rsi]
pushfq
and al, 0xb0
invalid
add byte [rax], al
mov r14, qword [rsp + 0x6c0]
add byte [rbx + 0x6c824ac], cl
add byte [rax], al
jmp 0x14015ed33
and al, 0x9c
invalid
invalid
outsd dx, dword [rsi]
pushfq
and al, 0xb0
invalid
add byte [rbx + 0x6c824ac], cl
add byte [rax], al
mov r8d, dword [rsp + 0x6cc]
mov ecx, esi
dec ecx
test byte [rsp + rcx*8], ah
invalid
lea rdx, [0x1401fd1c0]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov dword [rsp + 0xc0], r8d
mov rax, qword [rsp + 0x7a8]
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x968], rax
mov eax, dword [rsp + 0x7a4]
add byte [rax], al
add byte [rax], al
mov dword [rsp + 0xf8], eax
movzx eax, byte [rsp + 0x6de]
mov dh, 0x84
and al, 0xde
invalid
add byte [rax], al
mov dword [rsp + 0x1f8], eax
movzx eax, byte [rsp + 0x6dd]
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0x6dc]
invalid
add byte [rax], al
mov dh, 0x84
and al, 0xde
invalid
invalid
mov byte [rsp + 0xa5], al
and al, 0xa5
add byte [rax], al
add byte [rbx + 0x6d82484], cl
mov eax, dword [rsp + 0x6d8]
mov eax, dword [rsp + 0x6d8]
mov dword [rsp + 0x4dc], eax
movzx r15d, byte [rsp + 0x6d0]
lea rcx, [rsp + 0x6d1]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
add ecx, dword [rcx + 0x4202484]
add byte [rax], al
add ecx, dword [rcx + 0x4202484]
add byte [rax], al
test byte [rax + riz], ah
add al, 0
add byte [rcx + 0x423248c], cl
add byte [rax], al
mov dword [rsp + 0x423], ecx
mov r8d, 0xc5
lea rcx, [rsp + 0x990]
lea rdx, [rsp + 0x6df]
call sub.msvcrt.dll_memcpy
mov r10, qword [rsp + 0x1c8]
xchg esp, eax
and al, 0xc8
add dword [rax], eax
add byte [rbx + rcx*4 - 0x74], al
and al, 0xb0
add dword [rax], eax
add byte [rcx - 0x7b76b728], cl
and al, 0xa8
add al, 0
add cl, ch
add al, byte [rcx]
add byte [rax], al
xchg esp, eax
and al, 0xc8
add dword [rax], eax
add byte [rbx + rcx*4 - 0x74], al
and al, 0xb0
add dword [rax], eax
add byte [rcx - 0x7b76b728], cl
and al, 0xa8
add al, 0
add cl, ch
add al, byte [rcx]
add byte [rax], al
mov dword [rcx + 0x80], r11d
sub r10d, ebp
mov r11d, r15d
jo 0x14015e7cd
mov dword [rcx + 0x84], r10d
test r10d, r10d
mov r8d, 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
cmovle r10d, r8d
cmp r10, r9
cmovb r9, r10
mov r8, r9
jmp 0x14015e7cd
add dword [rbx + 0x100bb], eax
add byte [rax], al
je 0x14015ecb9
mov r8d, dword [rbx + 0x10c]
add byte [rax], al
cmp qword [rdx + 0x10], r8
jbe 0x140160412
add byte [rax], al
add byte [rax], al
mov rdx, qword [rdx]
test rdx, rdx
je 0x140160412
imul r8, r8, 0x130
cmp dword [rdx + r8], 2
je 0x140160412
mov r9d, dword [rbx + 0x110]
add dword [rax], eax
add byte [rcx + rax - 0x3e], cl
add byte [rax], al
add rdx, r8
cmp dword [rdx + 0x114], r9d
jne 0x140160412
add dword [rax], eax
add byte [rdi], cl
test dword [rbp + 0x18], ebx
add byte [rax], al
mov dword [rdx + 0xd0], 1
mov dword [rdx + 0xd4], eax
invalid
invalid
add byte [rax], al
add byte [rcx + 0xd88a], cl
fadd dword [rax]
add byte [rax], al
invalid
invalid
fadd dword [rax]
add byte [rax], al
jmp 0x14015eccf
add byte [rax], al
add byte [rcx - 0x7376b727], cl
mov ecx, ebx
mov qword [rsp + 0x4a8], rcx
mov dword [rsp + 0x154], eax
test byte [rsp + rdx*2], ah
add dword [rax], eax
invalid
mov ecx, ebx
mov qword [rsp + 0x4a8], rcx
mov dword [rsp + 0x154], eax
test byte [rsp + rdx*2], ah
add dword [rax], eax
invalid
test byte [rsp + rdx*2], ah
add dword [rax], eax
add byte [rbx + 0xf024ac], cl
add byte [rax], al
mov ebp, dword [rsp + 0xf0]
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xc0], eax
and al, 0xc0
add byte [rax], al
add byte [rcx + 0xec24bc], cl
add byte [rax], al
and al, 0xc0
add byte [rax], al
add byte [rcx + 0xec24bc], cl
add byte [rax], al
jmp 0x14015ec7d
add byte [rax], al
mov ecx, ebx
mov qword [rsp + 0x4a8], rcx
mov dword [rsp + 0x154], eax
mov qword [rsp + 0x488], r14
mov dword [rsp + 0xec], edi
jmp 0x14015ec87
mov byte [rsp + 0x642], cl
movzx ecx, word [rdx - 0x17]
mov word [rsp + 0x640], cx
movzx ecx, di
mov edx, dword [rsp + 0xec]
and edx, 0xffff0000
or edx, ecx
retf 0x9489
and al, 0xec
add byte [rax], al
add byte [rcx + 0x1542484], cl
add byte [rax], al
mov ebp, dword [rsp + 0xf0]
add byte [rax], al
retf 0x9489
add byte [rax], al
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xc0], eax
movdqa xmm10, xmm9
movdqa xmm11, xmm8
mov rbx, qword [rsp + 0x38]
jmp 0x14015ed8a
mov dword [rbx + 0x100], 1
mov dword [rbx + 0x104], eax
mov dword [rbx + 0x108], ecx
mov dword [rbx + 0x10c], eax
mov dword [rbx + 0x110], ecx
mov dword [rsp + 0xf8], esi
mov eax, dword [rsp + 0xb90]
mov ecx, dword [rsp + 0xb93]
mov dword [rsp + 0x423], ecx
mov dword [rsp + 0x420], eax
mov r8d, 0xc5
lea rcx, [rsp + 0x990]
lea rdx, [rsp + 0x200]
call sub.msvcrt.dll_memcpy
mov sil, 3
mov edx, dword [rsp + 0x154]
mov r9d, dword [rsp + 0x1b0]
mov r10, qword [rsp + 0x1c8]
movzx eax, byte [rsp + 0x690]
cmp rax, 9
mov dword [rsp + 0x154], edx
je 0x14015ed6b
test rax, rax
je 0x14015ed6b
cmp eax, 3
je 0x14015ed6b
lea rcx, [rsp + 0x690]
mov edi, r9d
mov r14, r10
call fcn.14016cc40
mov r10, r14
mov r9d, edi
mov ebp, dword [rsp + 0xf0]
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xc0], eax
movdqa xmm10, xmm9
movdqa xmm11, xmm8
mov rax, qword [rsp + 0xaf0]
mov ecx, r13d
cmp qword [rax + 0x10], rcx
jbe 0x140160412
mov rax, qword [rax]
test rax, rax
je 0x140160412
imul rdx, rcx, 0x130
mov rcx, qword [rax + rdx]
cmp rcx, 2
je 0x140160412
add rax, rdx
cmp dword [rax + 0x114], r10d
jne 0x140160412
test rcx, rcx
jne 0x14015eddb
cmp byte [rax + 0x50], 5
jne 0x14015edf6
mov rcx, qword [rsp + 0x1a8]
lea rdx, [rsp + 0xaf0]
mov edi, r9d
call fcn.140052d70
mov r9d, edi
cmp r9d, 0x3b9aca00
setne r8b
mov rcx, qword [rsp + 0x1c0]
lea rdx, [rsp + 0xaf0]
call fcn.14004af80
movzx eax, byte [rsp + 0x642]
mov byte [rsp + 0x34a], al
movzx eax, word [rsp + 0x640]
mov word [rsp + 0x348], ax
mov eax, dword [rsp + 0x420]
mov ecx, dword [rsp + 0x423]
mov dword [rsp + 0x880], eax
mov dword [rsp + 0x883], ecx
mov r8d, 0xc5
lea rcx, [rsp + 0xed0]
lea rdx, [rsp + 0x990]
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0xdb0]
cmp rdx, 2
je 0x14015ef29
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rsp + 0xdc0]
test rdx, rdx
je 0x14015eea5
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xdc8]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xdb0]
cmp rdx, 2
je 0x14015ef29
mov rcx, qword [rsp + 0xdb8]
mov rax, qword [rsp + 0xdc0]
test rdx, rdx
je 0x14015eee5
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0xdc8]
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0xdb0]
cmp rax, 2
je 0x14015ef29
mov dword [rsp + 0xf0], ebp
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0xf4], eax
movdqa xmm9, xmm10
movdqa xmm8, xmm11
mov rdx, qword [rsp + 0xcd0]
cmp rdx, 2
mov dword [rsp + 0x144], ebp
je 0x14015f021
mov rcx, qword [rsp + 0xcd8]
mov rax, qword [rsp + 0xce0]
test rdx, rdx
je 0x14015ef88
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [rsp + 0xce8]
call qword [rax + 0x68]
mov rdx, qword [rsp + 0xcd0]
cmp rdx, 2
mov ebp, dword [rsp + 0x144]
je 0x14015f021
mov rcx, qword [rsp + 0xcd8]
mov rax, qword [rsp + 0xce0]
test rdx, rdx
je 0x14015efcf
test sil, sil
mov byte [rsp + 0xa7], r15b
je 0x14015f092
movzx eax, sil
cmp eax, 9
jne 0x14015f0af
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x130]
call fcn.1401711d0
test rax, rax
jne 0x14015f278
mov dword [rbx + 0x114], 1
mov dword [rbx + 0x118], ebp
mov eax, dword [rsp + 0xc0]
mov dword [rbx + 0x11c], eax
mov byte [rsp + 0x200], sil
movzx eax, byte [rsp + 0x34a]
lea rdx, [rsp + 0x210]
mov byte [rdx - 0xd], al
movzx eax, word [rsp + 0x348]
mov word [rdx - 0xf], ax
mov eax, dword [rsp + 0x154]
mov dword [rsp + 0x204], eax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x4a8]
mov dword [rsp + 0x20c], eax
movdqu xmmword [rsp + 0x210], xmm10
movdqu xmmword [rsp + 0x220], xmm11
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x230], rax
mov eax, dword [rsp + 0x144]
mov dword [rsp + 0x238], eax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x23c], eax
mov byte [rsp + 0x240], r15b
mov eax, dword [rsp + 0x880]
mov ecx, dword [rsp + 0x883]
mov dword [rdx + 0x34], ecx
mov dword [rdx + 0x31], eax
mov eax, dword [rsp + 0x4dc]
mov dword [rsp + 0x248], eax
movzx eax, byte [rsp + 0xa5]
mov byte [rsp + 0x24c], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x24d], al
mov eax, dword [rsp + 0x1f8]
mov byte [rsp + 0x24e], al
mov r8d, 0xc5
lea rcx, [rsp + 0x24f]
lea rdx, [rsp + 0xed0]
call sub.msvcrt.dll_memcpy
mov esi, dword [rsp + 0xf8]
mov dword [rsp + 0x314], esi
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0x318], rax
mov rcx, qword [rsp + 0xe0]
lea rdx, [rsp + 0x200]
call fcn.14016f7c0
cmp al, 0xc
jne 0x140160412
cmp dword [r12 + 0x100], 4
jne 0x14015f216
mov ebp, 3
mov r12, qword [rsp + 0x60]
jmp 0x14015f543
lea esi, [rdi + 0x10]
mov rcx, rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
jne 0x140160412
mov edi, dword [rdi + 0xb4]
mov rcx, rsi
call fcn.1401f2d54
mov dword [rsp + 0x220], edi
mov dword [rsp + 0x224], 0
lea rax, [0x14029eac8]
mov qword [rsp + 0x200], rax
test byte [rax + rax], ah
add al, byte [rax]
add byte [rax - 0x73], cl
add eax, 0x166c1a
test byte [rax + rax], ah
add al, byte [rax]
add byte [rax - 0x73], cl
add eax, 0x166c1a
mov qword [rsp + 0x208], rax
lea rax, [rsp + 0x210]
movups xmmword [rax], xmm6
mov byte [r12 + 0x3d4], 1
cmp dword [r12 + 0x3c8], 0
je 0x14015f478
mov eax, dword [r12 + 0x3cc]
cmp eax, edi
mov edx, dword [rsp + 0x58]
jne 0x14015f434
cmp dword [r12 + 0x3d0], 0
je 0x14015f531
movdqu xmm0, xmmword [rsp + 0x200]
movdqu xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x510], xmm1
movdqa xmmword [rsp + 0x500], xmm0
xor ecx, ecx
cmp edi, eax
setne cl
mov eax, 0xff
cmovb ecx, eax
cmp cl, 0xff
je 0x14015f4ae
movzx eax, cl
test eax, eax
je 0x14015f4ae
jmp 0x140160412
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x208]
mov ecx, dword [rsp + 0x208]
mov ecx, dword [rsp + 0x208]
movdqu xmm0, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x510], xmm0
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], rcx
mov edx, dword [rsp + 0x58]
mov dword [r12 + 0x3c8], 1
mov dword [r12 + 0x3cc], edi
add byte [rcx - 0x39], al
test byte [rax + rdx*8], ah
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rcx - 0x39], al
test byte [rax + rdx*8], ah
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov rax, qword [r12 + 0x3a0]
test rax, rax
je 0x14015f4fa
mov rdx, qword [r12 + 0x3a8]
mov r8, qword [r12 + 0x3b0]
mov rcx, qword [rsp + 0x978]
call qword [rax + 0x10]
mov edx, dword [rsp + 0x58]
movdqa xmm0, xmmword [rsp + 0x500]
add byte [rax], al
mov rax, qword [r12 + 0x3a0]
test rax, rax
je 0x14015f4fa
mov rdx, qword [r12 + 0x3a8]
mov r8, qword [r12 + 0x3b0]
mov rcx, qword [rsp + 0x978]
call qword [rax + 0x10]
mov edx, dword [rsp + 0x58]
movdqa xmm0, xmmword [rsp + 0x500]
add byte [rax], al
movdqa xmm1, xmmword [rsp + 0x510]
mov rax, qword [rsp + 0x688]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov dword [r12 + 0x3c0], edi
mov dword [r12 + 0x3c4], 0
mov rdi, qword [rsp + 0x3a0]
jmp 0x140152d00
mov ebp, 1
mov rcx, r13
call fcn.1401f2d54
mov rcx, r14
call fcn.1401f2d54
lea rcx, [0x14029fee8]
mov r15, rcx
shr r15, 0x20
xor edx, edx
xor r8d, r8d
xor r11d, r11d
xor edi, edi
lea r9, str.combase.dll
mov al, 1
mov r10d, ecx
mov sil, 1
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x4f4], eax
mov byte [rsp + 0x3f9], al
mov dword [rsp + 0x4f0], ecx
add byte [rax], al
add byte [rax], al
mov word [rsp + 0x3fa], cx
mov dword [rsp + 0x3fc], ebp
mov dword [rsp + 0x804], r10d
mov dword [rsp + 0x400], r10d
xchg esp, eax
and al, 0
add al, 0
add byte [rcx + rcx*4 - 0x44], al
and al, 4
add al, 0
add byte [rcx + rcx*4 - 0x74], cl
mov word [rax + rcx*4], fs
add byte [rax], al
add byte [rcx + rcx*4 - 0x74], cl
and al, 8
add al, 0
add byte [rcx + 0x15c24bc], cl
add byte [rax], al
xchg esp, eax
and al, 0
add al, 0
add byte [rcx + rcx*4 - 0x44], al
and al, 4
add al, 0
add byte [rcx + rcx*4 - 0x74], cl
invalid
mov word [rax + rcx*4], fs
and al, 0x88
add byte [rax], al
add byte [rcx + rcx*4 - 0x74], cl
and al, 8
add al, 0
add byte [rcx + 0x15c24bc], cl
add byte [rax], al
mov dword [rsp + 0x410], edi
mov dword [rsp + 0x68], r11d
mov dword [rsp + 0x414], r11d
mov dword [rsp + 0x418], r8d
add byte [rcx + 0x8082494], cl
add byte [rax], al
add byte [rcx + 0x8082494], cl
add byte [rax], al
mov dword [rsp + 0x41c], edx
mov r9d, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
mov byte [rsp + 0x3f8], r9b
mov dword [rsp + 0x800], ebp
mov edx, r8d
cmp r9b, 4
je 0x14015d290
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x48], rbx
mov r14, r12
movzx r12d, byte [rsp + 0x3f9]
movsb byte [rdi], byte [rsi]
and al, 0xf9
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x54], al
and al, 0xfc
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x64], al
and al, 0
add al, 0
add byte [rbx + 0x40424b4], cl
add byte [rax], al
movsb byte [rdi], byte [rsi]
and al, 0xf9
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x54], al
and al, 0xfc
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x64], al
and al, 0
add al, 0
add byte [rbx + 0x40424b4], cl
add byte [rax], al
mov rbx, qword [rsp + 0x408]
movdqu xmm12, xmmword [rsp + 0x410]
mov rdi, qword [r14 + 0x400]
mov rbp, qword [r14 + 0x408]
lea r8, [rdi + 0x10]
lea r10, [rbp + 0x10]
mov qword [rsp + 0x520], r8
mov qword [rsp + 0x528], r10
mov byte [rsp + 0x530], 0
mov rax, qword [rsp + 0x8e8]
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x688]
and al, 0x88
invalid
add byte [rax], al
mov qword [rsp + 0x508], rax
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0x510], rax
adc byte [0xcb5df6bb], al
test byte [rax + rbp*8], ah
and al, 0xe8
invalid
add byte [rax], al
mov qword [rsp + 0x518], rax
and al, 0x88
invalid
adc byte [0xcb5df6bb], al
test byte [rax + rbp*8], ah
and al, 0xe8
and al, 0xe8
invalid
movzx eax, r9b
lea rcx, [0x1401fd1b0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
invalid
loopne 0x14015f72a
mov qword [rsp + 0x78], r11
mov dword [rsp + 0x78], ebx
mov qword [rsp + 0x38], r10
mov dword [rsp + 0x58], edx
push rsp
and al, 0x58
push rsp
and al, 0x58
mov qword [rsp + 0xc8], r8
mov rcx, r8
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
jne 0x140160412
lea rax, [rdi + 0x20]
mov qword [rsp + 0x50], rax
lea rax, [rdi + 0x1b8]
mov qword [rsp + 0x128], rax
add dword [rax], eax
add byte [rax - 0x73], cl
xchg eax, esp
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rcx*8], ah
add dword [rax], eax
invalid
add dword [rax], eax
add byte [rax - 0x73], cl
xchg eax, esp
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rcx*8], ah
add dword [rax], eax
add byte [rax - 0x75], cl
invalid
enter 1, 0
mov rcx, qword [rdi + 0x218]
mov rdx, qword [rdi + 0x220]
mov r8d, r13d
call fcn.14004c8c0
mov r8, qword [rdi + 0x200]
mov rcx, qword [rdi + 0x210]
mov rdx, qword [rdi + 0x1e0]
mov r9, qword [rdi + 0x1e8]
mov r10, rax
shr r10, 0x39
movd xmm0, r10d
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r10d, r10d
mov r11, rax
and r11, r9
movdqu xmm1, xmmword [rdx + r11]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb ebx, xmm2
nop word cs:[rax + rax]
test bx, bx
je 0x14015f7e8
tzcnt r12d, ebx
add r12, r11
fmul qword [rbp + 0x21]
int3
lea rsi, [r12*8]
mov r14, rdx
sub r14, rsi
sub esi, esi
fmul qword [rbp + 0x21]
int3
sub esi, esi
mov r14, qword [r14 - 8]
cmp rcx, r14
jbe 0x140160412
lea r15d, [rbx - 1]
and r15d, ebx
mov rsi, r14
shl rsi, 4
add al, 0x44
mov ebx, edi
add al, 0x44
mov ebx, edi
cmp dword [r8 + rsi + 8], r13d
jne 0x14015f7a0
or byte [rbp - 0x43], dh
jmp 0x14015f922
pcmpeqb xmm1, xmm7
pmovmskb esi, xmm1
test esi, esi
jne 0x14015fd18
invalid
invalid
add byte [rax], al
and byte [0x14162f7fa], al
ror dword [rcx - 0x7d], cl
ret
add r11, r10
add r11, 0x10
add r10, 0x10
jmp 0x14015f780
mov rbp, r8
mov r15d, edx
mov dword [rsp + 0xed0], r11d
mov dword [rsp + 0xed4], esi
mov qword [rsp + 0xed8], rbx
movdqu xmmword [rsp + 0xee0], xmm12
mov rax, qword [rsp + 0xed0]
movq r9, xmm12
lea rcx, [rsp + 0x698]
lea rdx, [rsp + 0xee8]
mov r8, rbx
call qword [rax]
mov dword [rsp + 0x694], r13d
mov byte [rsp + 0x691], r12b
mov byte [rsp + 0x690], 1
cmp dword [r14 + 0x3c8], 0
je 0x14015fada
cmp dword [r14 + 0x3d0], r13d
jne 0x14015fada
mov byte [r14 + 0x3f8], 1
mov byte [r14 + 0x3f9], r12b
mov dword [r14 + 0x3fc], r13d
mov rax, qword [rsp + 0x698]
mov rdx, qword [rsp + 0x6a0]
mov r8, qword [rsp + 0x6a8]
test byte [rax + rbp*4], ah
invalid
add byte [rax], al
lea rcx, [rsp + 0x6b0]
call qword [rax + 0x10]
mov rax, qword [rsp + 0xed0]
mov rdx, qword [rsp + 0xed8]
mov r8, qword [rsp + 0xee0]
and al, 0xe0
invalid
add byte [rax], al
lea rcx, [rsp + 0xee8]
call qword [rax + 0x10]
mov r12, r14
mov rdi, qword [rsp + 0x3a0]
mov edi, dword [rsp + 0x3a0]
test byte [rax + rbp*4], ah
invalid
and al, 0xe0
invalid
mov edi, dword [rsp + 0x3a0]
mov edx, r15d
mov r15, qword [rsp + 0x70]
jmp 0x140152d00
mov word [r14 + 0x3f8], 0x101
mov dword [r14 + 0x3fc], 0
mov r12, r14
mov rdi, qword [rsp + 0x3a0]
mov r15, qword [rsp + 0x70]
jmp 0x140152d00
neg r12
lea rax, [rdx + r12*8]
mov rdx, qword [rsp + 0x1c8]
mov qword [rsp + 0x698], rdx
mov qword [rsp + 0x6a0], rax
mov dword [rsp + 0x6a8], r13d
cmp r14, rcx
jae 0x140160412
mov rax, qword [rdi + 0x200]
mov r15d, dword [rax + rsi + 8]
mov ebx, dword [rax + rsi + 0xc]
mov rcx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x128]
mov dword [rsp + 0x698], ebx
mov dword [rsp + 0x69c], r15d
mov qword [rsp + 0x690], rsi
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rbp + 0x18]
test al, al
jne 0x140160412
mov esi, ebx
cmp qword [rdi + 0x1c8], rsi
mov ecx, dword [rsp + 0x68]
mov rdx, qword [rsp + 0x78]
jbe 0x140160412
mov rax, qword [rdi + 0x1b8]
test rax, rax
je 0x140160412
imul r13, rsi, 0x130
cmp dword [rax + r13], 2
je 0x140160412
add rax, r13
cmp dword [rax + 0x114], r15d
jne 0x140160412
mov dword [rsp + 0x68], ecx
add rbp, 0x20
lea rbx, [rdi + 0x170]
mov r12d, dword [rax + 0x48]
lea rcx, [rdi + 0xc0]
lea rax, [rdi + 0x160]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
lea r14, [rsp + 0x690]
mov qword [rsp + 0x20], r14
mov r8b, 1
mov r9, rbp
call fcn.140199e90
mov rcx, qword [rsp + 0x50]
mov rdx, r14
mov r8, rbx
call fcn.14004a220
cmp qword [rdi + 0x1c8], rsi
jbe 0x140160412
mov rax, qword [rdi + 0x1b8]
test rax, rax
je 0x140160412
cmp dword [rax + r13], 2
je 0x140160412
add rax, r13
cmp dword [rax + 0x114], r15d
jne 0x140160412
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x220], rax
movzx eax, byte [rsp + 0x690]
movzx ecx, byte [rsp + 0x691]
movzx edx, word [rsp + 0x692]
mov r8d, dword [rsp + 0x694]
mov r9, qword [rsp + 0x698]
movups xmm0, xmmword [rsp + 0x6a0]
movaps xmmword [rsp + 0x210], xmm0
mov byte [rsp + 0x200], al
mov byte [rsp + 0x201], cl
mov word [rsp + 0x202], dx
mov dword [rsp + 0x204], r8d
mov qword [rsp + 0x208], r9
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x200]
call fcn.14019aa10
movdqu xmm0, xmmword [rsp + 0xed0]
movdqu xmm1, xmmword [rsp + 0xee0]
movdqa xmmword [rsp + 0x210], xmm1
movdqa xmmword [rsp + 0x200], xmm0
mov r14, rbp
mov rcx, rbp
call sub.kernel32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
mov rbx, qword [rsp + 0x70]
jne 0x140160412
mov esi, dword [rdi + 0xb4]
mov rcx, r14
call fcn.1401f2d54
mov dword [rsp + 0x220], esi
mov dword [rsp + 0x224], r13d
mov r12, qword [rsp + 0x60]
mov byte [r12 + 0x3d4], 1
cmp dword [r12 + 0x3c8], 0
je 0x14015fc1f
mov eax, dword [r12 + 0x3cc]
cmp eax, esi
mov rdi, qword [rsp + 0x3a0]
jne 0x14015fc50
cmp dword [r12 + 0x3d0], r13d
jne 0x14015fc50
mov rax, qword [rsp + 0x200]
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
lea rcx, [rsp + 0x218]
call qword [rax + 0x10]
mov edx, r15d
mov r15, rbx
jmp 0x140152d00
movdqa xmm0, xmmword [rsp + 0x200]
movdqa xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x9a0], xmm1
movdqa xmmword [rsp + 0x990], xmm0
mov rdi, qword [rsp + 0x3a0]
mov edx, r15d
jmp 0x14015fc96
movdqa xmm0, xmmword [rsp + 0x200]
movdqa xmm1, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0x9a0], xmm1
movdqa xmmword [rsp + 0x990], xmm0
xor ecx, ecx
cmp esi, eax
setne cl
mov eax, 0xff
cmovb ecx, eax
cmp cl, 0xff
mov edx, r15d
je 0x14015fc96
movzx eax, cl
test eax, eax
jne 0x140160412
mov dword [r12 + 0x3c8], 1
mov dword [r12 + 0x3cc], esi
mov dword [r12 + 0x3d0], r13d
mov rax, qword [r12 + 0x3a0]
test rax, rax
je 0x14015fcdd
mov rdx, qword [r12 + 0x3a8]
mov r8, qword [r12 + 0x3b0]
mov rcx, qword [rsp + 0x978]
call qword [rax + 0x10]
mov edx, r15d
movdqa xmm0, xmmword [rsp + 0x990]
movdqa xmm1, xmmword [rsp + 0x9a0]
mov rax, qword [rsp + 0x688]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov dword [r12 + 0x3c0], esi
mov dword [r12 + 0x3c4], r13d
mov r15, rbx
jmp 0x140152d00
mov rcx, qword [rsp + 0x1c8]
mov qword [rsp + 0x690], rcx
mov qword [rsp + 0x698], rax
mov dword [rsp + 0x6a0], r13d
mov rsi, qword [rsp + 0x128]
mov qword [rsp + 0x6a8], rsi
test r13d, r13d
je 0x140160412
test r13b, 1
sete al
cmp byte [rdi + 0x1b0], 0
sete cl
xor cl, al
je 0x14015fd8f
cmp dword [rdi + 0xc0], 0
add byte [rax], al
jne 0x14015fdae
cmp dword [rdi + 0xc4], r13d
ja 0x14015fdae
lea eax, [r13 + 2]
mov ecx, eax
shr ecx, 0x1f
mov dword [rdi + 0xc0], ecx
mov dword [rdi + 0xc4], eax
jmp 0x14015fdae
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0
jne 0x14015fdae
cmp dword [rdi + 0x24], r13d
ja 0x14015fdae
lea eax, [r13 + 2]
mov ecx, eax
shr ecx, 0x1f
mov dword [rdi + 0x20], ecx
mov dword [rdi + 0x24], eax
mov dword [rsp + 0x314], r13d
mov byte [rsp + 0x250], 6
mov dword [rsp + 0x2b8], 0
mov qword [rsp + 0x200], 0
mov dword [rsp + 0x2c4], 0
mov dword [rsp + 0x2d0], 0
mov dword [rsp + 0x2dc], 0
mov qword [rsp + 0x2a0], 0
mov dword [rsp + 0x2e8], 0
lea rax, [rsp + 0x210]
movups xmmword [rax + 0x78], xmm6
movups xmmword [rax + 0x68], xmm6
movups xmmword [rax + 0x108], xmm6
mov dword [rsp + 0x248], 0x3b9aca00
mov dword [rsp + 0x2f4], 0
mov qword [rsp + 0x218], 0
mov byte [rsp + 0x328], 1
add byte [rax], al
add dword [rax - 0x39], ecx
test byte [rax + rbp*4], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add bh, al
test byte [rax + rax], ah
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
test byte [rax + rsi], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x73], cl
mov word [rax + rdx*4], fs
invalid
add byte [rax], al
lea rdx, [rsp + 0x200]
call fcn.140053650
mov ebx, eax
mov r15d, edx
add byte [rax], al
add dword [rax - 0x39], ecx
test byte [rax + rbp*4], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add bh, al
test byte [rax + rax], ah
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
test byte [rax + rsi], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x73], cl
mov word [rax + rdx*4], fs
invalid
mov rcx, qword [rsp + 0x38]
jmp 0x14015f96f
mov rcx, qword [rsp + 0x3e8]
call fcn.14004ca40
mov r8, qword [rsp + 0xab0]
cmp r8, 2
jne 0x140160156
jmp 0x140160201
mov edi, dword [r12 + 0x3fc]
movzx ebx, byte [r12 + 0x3f9]
mov rcx, qword [rsp + 0x870]
mov ecx, dword [rsp + 0x870]
mov ecx, dword [rsp + 0x870]
mov rax, qword [rcx + 0x20]
mov qword [rsp + 0x220], rax
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x200], xmm0
mov qword [r12 + 0x410], 0
mov rax, qword [rsp + 0x200]
test rax, rax
je 0x14015ffba
lea rsi, [rsp + 0x218]
mov r8, qword [rsp + 0x208]
mov r9, qword [rsp + 0x210]
lea rcx, [rsp + 0x500]
mov rdx, rsi
call qword [rax]
mov ebp, dword [rsp + 0x224]
mov rax, qword [rsp + 0x200]
movups xmm0, xmmword [rsp + 0x500]
movups xmm1, xmmword [rsp + 0x510]
movaps xmmword [rsp + 0x6a0], xmm1
invalid
add byte [rax], al
movaps xmmword [rsp + 0x690], xmm0
test rax, rax
je 0x14015ff81
invalid
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
mov rcx, rsi
call qword [rax + 0x10]
mov eax, ebp
or eax, edi
je 0x14016002a
lahf
add byte [rax], al
invalid
lahf
add byte [rax], al
add byte [rbp - 0x787bf013], al
add byte [rax], al
add byte [rsi + 0xf], ah
outsd dx, dword [rsi]
test byte [rax + rdx*4], ah
invalid
test ebp, ebp
je 0x14016001a
movdqa xmm0, xmmword [rsp + 0x690]
movdqa xmm1, xmmword [rsp + 0x6a0]
movdqa xmmword [rsp + 0x200], xmm1
mov bl, 2
mov sil, 1
mov edi, ebp
jmp 0x14016006c
lea rax, [0x14029eac8]
mov qword [rsp + 0x500], rax
lea rax, str.combase.dll
mov qword [rsp + 0x508], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x510], xmm0
mov dword [rsp + 0x520], 0
movaps xmmword [rsp + 0x6a0], xmm0
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x698], rax
test edi, edi
je 0x14016002a
xorps xmm0, xmm0
movaps xmmword [rsp + 0x200], xmm0
mov sil, 1
jmp 0x14016002d
mov sil, 3
lea rcx, [rsp + 0x6a8]
mov rax, qword [rsp + 0x690]
mov rdx, qword [rsp + 0x698]
mov r8, qword [rsp + 0x6a0]
call qword [rax + 0x10]
lea rax, str.combase.dll
movq xmm1, rax
enter 0xffffffffffff8d48, 5
invalid
invalid
adc eax, dword [rax]
movq xmm0, rax
punpcklqdq xmm0, xmm1
enter 0xffffffffffff8d48, 5
invalid
mov rax, qword [rsp + 0x3e8]
mov byte [rax], sil
mov byte [rax + 1], bl
mov dword [rax + 4], edi
movdqu xmmword [rax + 8], xmm0
jg 0x1401600c1
or byte [rsi + 0xf], ah
outsd dx, dword [rsi]
test byte [rax + rax], ah
add al, byte [rax]
add bl, dh
movq qword [rax + 0x18], mm0
jg 0x1401600c1
or byte [rsi + 0xf], ah
outsd dx, dword [rsi]
test byte [rax + rax], ah
add al, byte [rax]
add bl, dh
movq qword [rax + 0x18], mm0
mov r8, qword [rsp + 0xab0]
cmp r8, 2
jne 0x140160156
and al, 0xb0
or al, byte [rax]
add byte [rcx - 0x7d], cl
clc
add cl, byte [rdi]
test dword [rax + rax + 0x5ae90000], esi
add dword [rax], eax
add byte [rax - 0x3f], cl
shl rsi, 0x20
jmp 0x140160201
shl rsi, 0x20
or rsi, r11
je 0x140160318
movq rdi, xmm12
test rdi, rdi
je 0x14016031d
add byte [rdi], cl
mov byte [rdx + 3], cl
add byte [rax], al
js 0x140160412
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x1401600f3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x140160412
mov rcx, rax
mov qword [0x1402d9150], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x140160323
jmp 0x140160412
mov ecx, dword [rsp + 0x3e8]
mov rdx, rbp
call fcn.14004ca40
mov r8, qword [rsp + 0xab0]
cmp r8, 2
jne 0x140160156
jmp 0x140160201
mov rax, qword [rsp + 0x3e8]
mov byte [rax], 4
mov r8, qword [rsp + 0xab0]
cmp r8, 2
je 0x140160201
lea rdx, [rsp + 0xac8]
mov rcx, qword [rsp + 0xab8]
mov rax, qword [rsp + 0xac0]
test r8, r8
je 0x140160185
mov r8, qword [rax + 0x10]
dec r8
and r8, 0xfffffffffffffff0
add rcx, r8
add rcx, 0x10
call qword [rax + 0x68]
mov r8, qword [rsp + 0xab0]
cmp r8, 2
je 0x140160201
mov rdx, qword [rsp + 0xac8]
mov rcx, qword [rsp + 0xab8]
mov rax, qword [rsp + 0xac0]
test r8, r8
test eax, eax
test eax, eax
je 0x1401601c5
mov r8, qword [rax + 0x10]
dec r8
and r8, 0xfffffffffffffff0
add rcx, r8
add rcx, 0x10
call qword [rax + pe_nt_image_headers64]
mov rax, qword [rsp + 0xab0]
cmp rax, 2
je 0x140160201
test rax, rax
je 0x140160201
and al, 0xb8
or al, byte [rax]
add byte [rax - 0x75], cl
xchg esp, eax
and al, 0xc0
or al, byte [rax]
add al, ch
outsd dx, dword [rsi]
int 0xfe
dec dword [rbx + rcx*4 - 0x7c]
and al, 0x20
or byte [rax], al
add byte [rcx - 0x7d], cl
clc
add cl, byte [rdi]
test byte [rbx + 0x48000000], ch
lea edx, [rsp + 0x838]
mov r8, qword [rsp + 0x820]
cmp r8, 2
je 0x1401602be
lea rdx, [rsp + 0x838]
mov rcx, qword [rsp + 0x828]
mov rax, qword [rsp + 0x830]
test r8, r8
je 0x140160242
invalid
adc cl, byte [rbx + rcx*4 + 0x40]
adc byte [rcx - 1], cl
enter 0xffffffffffff8349, 0xffffffffffffffe0
invalid
mov r8, qword [rax + 0x10]
dec r8
and r8, 0xfffffffffffffff0
add rcx, r8
add rcx, 0x10
call qword [rax + 0x68]
mov r8, qword [rsp + 0x820]
cmp r8, 2
je 0x1401602be
movaps xmm6, xmmword [rsp + 0x10d0]
sub byte [rsp + 0x10d0], dh
movaps xmm7, xmmword [rsp + 0x10e0]
movaps xmm8, xmmword [rsp + 0x10f0]
movaps xmm9, xmmword [rsp + 0x1100]
movaps xmm10, xmmword [rsp + 0x1110]
movaps xmm11, xmmword [rsp + 0x1120]
sub byte [rsp + 0x1120], bl
sub byte [rsp + 0x1120], bl
movaps xmm12, xmmword [rsp + 0x1130]
movaps xmm13, xmmword [rsp + 0x1140]
add rsp, 0x1158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r14d, r14d
jmp 0x140160331
mov r14d, 1
mov rcx, r14
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x201], r12b
mov qword [rsp + 0x208], r14
pshufd xmm0, xmm12, 0x44
movdqu xmmword [rsp + 0x210], xmm0
mov byte [rsp + 0x200], 2
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x520]
call fcn.14019aa10
mov eax, dword [rsp + 0x200]
mov dword [rsp + 0xdb0], eax
movzx eax, word [rsp + 0x204]
mov word [rsp + 0xdb4], ax
mov rcx, qword [rsp + 0x3e8]
mov byte [rcx + 1], r12b
mov eax, dword [rsp + 0xdb0]
mov dword [rcx + 2], eax
movzx eax, word [rsp + 0xdb4]
mov word [rcx + 6], ax
mov qword [rcx + 8], rsi
mov qword [rcx + 0x10], rbx
movq qword [rcx + 0x18], xmm12
mov byte [rcx], 2
mov r8, qword [rsp + 0xab0]
mov eax, dword [rsp + 0xab0]
mov eax, dword [rsp + 0xab0]
cmp r8, 2
jne 0x140160156
jmp 0x140160201
call sub.kernel32.dll_GetLastError
ud2
fld1
xlatb
mov dh, 0xfe
dec dword [rax - 0x39]
add eax, dword [rdx]
add byte [rax], al
add byte [rax - 0x75], cl
test byte [rax + rbx*8], ah
add eax, dword [rax]
add byte [rax - 0x77], cl
or byte [r8 - 0x73], cl
xchg esp, eax
and al, 0
add al, byte [rax]
add byte [rcx - 0x48], al
and byte [rcx], al
add byte [rax], al
mov rcx, rsi
call sub.msvcrt.dll_memcpy
ud2
call fcn.1400385e0
ud2
xor byte [rbp - 0x1a], sil
and ecx, 5
cmp ecx, 1
jne 0x140162e4d
mov rax, qword [rdx + 0x20]
mov rcx, qword [rdx + 0x28]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x138]
test rax, rax
je 0x140162e70
lock dec qword [rax]
jne 0x140162e70
mov rcx, qword [rsi + 0x138]
add rsp, 0x20
pop rsi
jmp fcn.14014da20
nop
add rsp, 0x20
pop rsi
ret
and byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
js 0x140162edc
jmp 0x140162eb9
lea rdi, [rbx + 0x10]
mov rcx, qword [rbx + 0x10]
lea rdx, [rcx - 0xb]
add rcx, 0xfffffffffffffff6
xor eax, eax
cmp rdx, 2
cmovb rax, rcx
cmp rax, 1
je 0x140162ee8
test rax, rax
jne 0x140162f24
mov rcx, rdi
call fcn.140161c60
jmp 0x140162f24
cmp qword [rbx + 0x18], 0
je 0x140162f24
mov r14, qword [rbx + 0x20]
test r14, r14
je 0x140162f24
mov rbx, qword [rbx + 0x28]
mov rcx, r14
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140162f24
cmp qword [rbx + 0x10], 0x11
jb 0x140162f13
mov r14, qword [r14 - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
invalid
mov r8d, 0x1b8
mov rcx, rdi
mov rdx, rsi
call sub.msvcrt.dll_memcpy
xor ecx, ecx
call fcn.1401d91c0
test rax, rax
je 0x140162f45
movups xmmword [rax + 0x20], xmm6
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x38
add esp, 0x38
add esp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
nop word cs:[rax + rax]
jns 0x140162f80
test eax, eax
and byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
js 0x140162fbc
add dword [rdi + rcx + 0x48], esi
test eax, eax
add byte [rbp + rsi + 0x4c], dh
mov esi, dword [rbx + 0x18]
adc dword [rax + 0x20], esi
mov rsi, rcx
mov rdi, qword [rcx]
mov edi, dword [rcx]
mov edi, dword [rcx]
test rdi, rdi
je 0x1401630aa
mov rcx, rdi
call fcn.14004b270
mov rax, qword [rdi]
lock dec qword [rax]
jne 0x140163076
mov rcx, qword [rdi]
call fcn.140062b90
mov rax, qword [rdi + 0x10]
lock dec qword [rax]
jne 0x140163089
mov rcx, qword [rdi + 0x10]
call case.0x14013fc1f.13
invalid
invalid
invalid
add rdi, 0x18
mov rcx, rdi
call fcn.14014f700
mov r8, qword [rsi]
mov eax, dword [rsi]
mov eax, dword [rsi]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
movzx eax, byte [rsi + 0x20]
lea rdi, [rsi + 8]
cmp al, 2
je 0x140163148
mov rax, qword [rsi + 0x10]
lock dec qword [rax + 0x40]
jne 0x140163122
mov rdx, qword [rsi + 0x10]
mov rax, qword [rdx + 0x38]
test rax, rax
jns 0x1401630dd
push rsi
adc byte [rax - 0x75], cl
cmp byte [rax - 0x7b], cl
sar byte [rcx + 0xf], 0x48
mov eax, 0xffffffff
invalid
movabs rax, 0x7fffffffffffffff
lock and qword [rdx + 0x38], rax
invalid
mov rax, qword [rdx + 0x58]
nop word cs:[rax + rax]
mov rcx, rax
or rcx, 2
lock cmpxchg qword [rdx + 0x58], rcx
jne 0x1401630f0
test rax, rax
jne 0x140163122
invalid
sal byte [rbp + 0x1e], 0x48
mov eax, dword [rdx + 0x48]
invalid
mov rax, qword [rdx + 0x48]
mov rcx, qword [rdx + 0x50]
mov qword [rdx + 0x48], 0
lock and qword [rdx + 0x58], 0xfffffffffffffffd
test rax, rax
je 0x140163122
call qword [rax + 8]
mov rax, qword [rsi + 0x10]
lock dec qword [rax]
jne 0x140163135
mov rcx, qword [rsi + 0x10]
call fcn.14014de70
mov rax, qword [rsi + 0x18]
lock dec qword [rax]
jne 0x140163148
mov rcx, qword [rsi + 0x18]
call fcn.1400626f0
mov rax, qword [rdi]
test rax, rax
je 0x140163164
invalid
lock dec qword [rax]
jne 0x140163164
mov rcx, rdi
add rsp, 0x28
invalid
invalid
pop rdi
invalid
pop rsi
jmp fcn.14014bfd0
nop
add rsp, 0x28
add esp, 0x28
add esp, 0x28
pop rdi
pop rsi
ret
mov ah, 0x24
push rax
or al, byte [rax]
add byte [rax - 0x77], cl
xlatb
mov rsi, rcx
movzx eax, byte [rcx + 0xa48]
lea rcx, [0x1401fd1e0]
lea ecx, [0x1401fd1e0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
invalid
loopne 0x1401631eb
lea rdx, [rsi + 0x10]
lea edx, [rsi + 0x10]
movups xmm6, xmmword [rsi]
mov byte [rsi + 0xa49], 1
mov rax, qword [rsi + 0x528]
mov qword [rsi + 0xa50], rax
lea rcx, [rsi + 0xa58]
mov r8d, 0x518
call sub.msvcrt.dll_memcpy
movups xmmword [rsi + 0xf70], xmm6
lea r14, [rsi + 0xa58]
lea rcx, [rsp + 0x20]
and al, 0x20
and al, 0x20
mov rdx, r14
mov r8, rdi
call fcn.14014a240
cmp dword [rsp + 0x20], 5
jo 0x1401631eb
inc dword [rbx + 0x520247c]
jne 0x1401631fe
mov al, 1
mov cl, 3
jmp 0x1401633a5
lea rbx, [rsi + 0x530]
lea rdx, [rsp + 0x20]
mov r8d, 0x518
mov rcx, rbx
call sub.msvcrt.dll_memcpy
cmp dword [rsi + 0xf70], 3
je 0x140163236
mov rcx, r14
int1
call fcn.140163660
test byte [rsi + 0xf70], 1
jne 0x1401633f7
cmp dword [rbx], 4
je 0x140163313
lea rcx, [rsp + 0x538]
mov r8d, 0x518
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov byte [rsi + 0xa49], 0
mov rbx, qword [rsi + 0xa50]
mov bpl, 1
mov al, 1
xchg byte [rbx + 0x40], al
mov al, 1
xchg byte [rbx + 0x20], al
test al, al
jne 0x140163291
mov rax, qword [rbx + 0x10]
mov rcx, qword [rbx + 0x18]
mov qword [rbx + 0x10], 0
xor edx, edx
xchg byte [rbx + 0x20], dl
test rax, rax
test eax, eax
test eax, eax
je 0x140163291
call qword [rax + 8]
xchg byte [rbx + 0x38], bpl
test bpl, bpl
jne 0x1401632b7
mov rax, qword [rbx + 0x28]
mov rcx, qword [rbx + 0x30]
mov qword [rbx + 0x28], 0
test rax, rax
je 0x1401632b2
call qword [rax + 0x18]
sbb byte [rcx], dh
xor eax, eax
xchg byte [rbx + 0x38], al
rol byte [rsi - 0x72b3c7bd], 0xb6
push rax
or al, byte [rax]
add al, dh
dec qword [rbx]
lea r14, [rsi + 0xa50]
lock dec qword [rbx]
jne 0x1401632cc
mov rcx, rbx
call fcn.140062b30
lea rdx, [rsp + 0x538]
mov r8d, 0x518
mov rcx, r14
call sub.msvcrt.dll_memcpy
add cl, byte [rcx]
add byte [rax - 0x73], cl
lea rbx, [rsi + 0xa50]
mov rcx, rbx
lea rbx, [rsi + 0xa50]
mov rcx, rbx
mov rdx, rdi
call fcn.140176940
cmp al, 2
jne 0x140163301
mov al, 1
mov cl, 4
jmp 0x1401633a5
mov rcx, rbx
call fcn.140163660
cmp qword [rsi + 0x530], 4
jne 0x140163320
test byte [rsi + 0x540], 1
jne 0x1401633c1
cmp byte [rsi + 0xa49], 0
je 0x14016339a
mov rdi, qword [rsi + 0xa50]
mov bl, 1
mov al, 1
xchg byte [rdi + 0x40], al
mov al, 1
xchg byte [rdi + 0x20], al
test al, al
jne 0x14016335d
mov rax, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x18]
mov qword [rdi + 0x10], 0
xor edx, edx
xchg byte [rdi + 0x20], dl
test rax, rax
je 0x14016335d
call qword [rax + 8]
xchg byte [rdi + 0x38], bl
test bl, bl
jne 0x140163381
mov rax, qword [rdi + 0x28]
mov rcx, qword [rdi + 0x30]
mov qword [rdi + 0x28], 0
test rax, rax
je 0x14016337c
call qword [rax + 0x18]
xor eax, eax
xchg byte [rdi + 0x38], al
mov rax, qword [rsi + 0xa50]
lock dec qword [rax]
jne 0x14016339a
mov rcx, qword [rsi + 0xa50]
call fcn.140062b30
mov byte [rsi + 0xa49], 0
mov cl, 1
xor eax, eax
mov byte [rsi + 0xa48], cl
movaps xmm6, xmmword [rsp + 0xa50]
add byte [rax], al
add byte [rax], al
add rsp, 0xa60
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
lea rdi, [rsi + 0x548]
mov rcx, rdi
call fcn.140163da0
mov rax, qword [rsi + 0x548]
add byte [rax], al
add byte [rax], al
test rax, rax
je 0x140163320
lock dec qword [rax]
jne 0x140163320
invalid
dec dword [rax - 0x75]
psubsb mm7, qword [rsi - 0x56]
invalid
mov rcx, qword [rdi]
mov ecx, dword [rdi]
call fcn.14014de70
jmp 0x140163320
lea r14, [rsi + 0xf78]
mov rcx, r14
call fcn.140163da0
mov rax, qword [rsi + 0xf78]
test rax, rax
je 0x140163236
lock dec qword [rax]
jne 0x140163236
mov rcx, qword [r14]
call fcn.14014de70
jmp 0x140163236
ud2
ud2
mov rax, qword [rsi + 0x70]
mov rcx, qword [rsi + 0x78]
cmp rcx, rax
ja 0x140169bd0
jne 0x140169b3b
mov rcx, r12
mov rdx, rsi
call fcn.140166040
mov eax, dword [rsp + 0x20]
cmp eax, 1
jne 0x140169aaa
mov r13, qword [rsi + 0xf8]
test r13, r13
je 0x140169a84
mov r14, qword [rsi + 0x98]
xor ebx, ebx
lea rax, [r14 + r14]
cmp rax, r13
cmova r13, rax
cmp r13, 0x401
cmovb r13, rdi
mov rbp, qword [rsi + 0x90]
sub r13, rbp
jbe 0x14016998f
mov rax, qword [rsi + 0x88]
sub rax, rbp
cmp rax, r13
jb 0x140169a3a
mov rdi, qword [rsi + 0x80]
lea rcx, [rdi + rbp]
cmp r13, 2
jb 0x14016997d
lea r8, [r13 - 1]
xor edx, edx
call sub.msvcrt.dll_memset
add rbp, r13
dec rbp
add rdi, rbp
mov rcx, rdi
mov edi, 0x400
mov byte [rcx], 0
inc rbp
mov qword [rsi + 0x90], rbp
sub rbp, r14
jb 0x140169bd0
mov rax, qword [rsi + 0x80]
add rax, r14
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], rbp
mov rdx, qword [rsi + 0x38]
test rdx, rdx
je 0x140169bd0
mov rcx, r15
mov r8, r12
call fcn.1401d59a0
mov r13, rdx
test rax, rax
movabs rax, 0xd00000003
cmovne r13, rax
test r13, r13
jne 0x140169ac1
mov rax, qword [rsp + 0x30]
cmp rax, qword [rsp + 0x28]
ja 0x140169bd0
add r14, rax
mov qword [rsi + 0x98], r14
mov rcx, qword [rsi + 0xf8]
mov rdx, rcx
sub rdx, rax
mov r13d, 0
cmovae r13, rdx
mov qword [rsi + 0xf8], r13
scasb al, byte [rdi]
clc
add byte [rax], al
add byte [rax - 0x7b], cl
invalid
je 0x140169a70
scasb al, byte [rdi]
clc
add byte [rax], al
add byte [rax - 0x7b], cl
sal byte [rsp + rax*2 + 0x48], 1
ret
add rbx, rax
cmp rcx, rax
ja 0x140169920
jmp 0x140169a70
lea rcx, [rsi + 0x80]
mov rdx, rbp
mov r8, r13
call fcn.140089e50
mov rbp, qword [rsi + 0x90]
mov rdi, qword [rsi + 0x80]
lea rcx, [rdi + rbp]
cmp r13, 2
jae 0x140169966
jmp 0x14016997d
test rbx, rbx
je 0x140169b3b
mov qword [rsi + 0xf8], 0
mov rcx, r12
mov rdx, rsi
call fcn.140167060
cmp byte [rsp + 0x20], 0
jne 0x140169bb9
cmp byte [rsp + 0x21], 0
je 0x1401698d8
jmp 0x140169b3b
cmp eax, 2
jne 0x140169b3b
mov r13, qword [rsp + 0x28]
test r13, r13
je 0x140169b95
mov rcx, r13
mov ecx, ebp
call fcn.1400837b0
cmp al, 0xd
jne 0x140169b98
mov qword [rsi + 0x38], 0
mov eax, r13d
and eax, 3
mov esi, 1
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x140169b39
test rax, rax
je 0x140169b39
lea rdi, [r13 - 1]
mov rbx, qword [r13 - 1]
mov r14, qword [r13 + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140169b28
cmp qword [r14 + 0x10], 0x11
jb 0x140169b17
adc dword [rdx + 4], esi
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
jmp 0x140169ba2
mov rbx, qword [rsi + 0x70]
mov rdi, qword [rsi + 0x78]
js 0x140169b8d
mov edi, ebx
js 0x140169b8d
mov edi, ebx
sub r15, rdi
jb 0x140169bd0
mov rdx, qword [rsi + 0x60]
mov edx, dword [rsi + 0x60]
add rdx, rdi
mov rax, qword [rsp + 0x48]
cmp rax, r15
cmovb r15, rax
mov rcx, qword [rsp + 0x50]
mov r8, r15
call sub.msvcrt.dll_memcpy
add rdi, r15
cmp rdi, rbx
ja 0x140169bd0
mov qword [rsi + 0x78], rdi
mov rcx, qword [rsp + 0x40]
add rcx, r15
jb 0x140169bd0
cmp rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
and al, 0x60
ja 0x140169bd0
mov qword [rax + 0x10], rcx
xor r13d, r13d
mov qword [rsi + 0x38], 0
xor esi, esi
mov rax, rsi
mov rdx, r13
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, qword [rsp + 0x28]
mov rcx, r13
call fcn.1400837b0
cmp al, 0xd
je 0x140169ad1
jmp 0x140169b98
ud2
ud2
iretd
add byte [rax], al
add byte [rax], al
jmp rax
add byte [rax], al
add byte [rax], al
invalid
or byte [rax], al
mov eax, dword [rax]
dec dword [rdi]
invalid
invalid
adc byte [r15], r9b
adc byte [rdi + 0x20], dl
movups xmm3, xmmword [rdi + 0x30]
movaps xmmword [rsp + 0x60], xmm3
movaps xmmword [rsp + 0x50], xmm2
and al, 0x50
and al, 0x50
movaps xmmword [rsp + 0x40], xmm1
movaps xmmword [rsp + 0x30], xmm0
mov r14, qword [rsi + 0x20]
lock inc qword [r14]
inc dword [rsi]
jle 0x14016b1ec
mov r12, qword [rsi + 0x28]
mov r13, qword [rsi + 0x30]
lock inc qword [r12]
jle 0x14016b1ec
jne 0x14016b076
add byte [rax], al
jne 0x14016b076
add byte [rax], al
add byte [rdi], cl
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14016b0a2
mov dh, 5
loop 0x14016b05c
invalid
call sub.kernel32.dll_GetProcessHeap
test rax, rax
ror byte [rdi], 0x84
push rsp
add dword [rax], eax
invalid
ror byte [rdi], 0x84
push rsp
add dword [rax], eax
add byte [rax - 0x77], cl
ror dword [rax - 0x77], 5
scasb al, byte [rdi]
loopne 0x14016b0b7
mov rcx, rax
mov qword [0x1402d9150], rax
add byte [rcx - 0x48], al
mov eax, 0x3100000e
shr al, cl
sbb eax, 0x4800087c
test eax, eax
mov r8d, 0xeb8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14016b1ec
test byte [rcx + rax], dh
add byte [rax], al
add byte [rax - 0x77], cl
invalid
mov rdi, rax
mov rax, qword [rsp + 0x80]
mov qword [rdi + 0x50], rax
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rdi + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x30]
sub byte [rsp + 0x30], al
sub byte [rsp + 0x30], al
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
movaps xmm3, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x30], xmm3
movups xmmword [rdi + 0x20], xmm2
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
mov qword [rdi + 0x58], r14
mov qword [rdi + 0x60], r12
mov qword [rdi + 0x68], r13
mov byte [rdi + 0xeb0], 0
cmp qword [rsi], 0
je 0x14016b125
mov r14, rbp
mov rcx, qword [rsi + 8]
call sub.crypt32.dll_CertDuplicateCertificateContext
mov qword [rsp + 0x28], rax
mov r13d, 1
jmp 0x14016b12b
mov r14, rbp
xor r13d, r13d
in eax, dx
in eax, dx
mov rcx, qword [rsi + 0x10]
call sub.crypt32.dll_CertDuplicateStore
mov r12, rax
movzx ebp, byte [rsi + 0x1c]
movzx ebx, byte [rsi + 0x1d]
movsd xmm6, qword [rsi + 0x18]
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
test ecx, ecx
test ecx, ecx
jne 0x14016b16f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14016b1ec
sbb byte [rbx + 8], bh
add byte [rax - 0x7b], cl
ror byte [rdi], 0x84
xchg dword [rax], eax
add byte [rax], al
mov rcx, rax
mov qword [0x1402d9150], rax
add eax, 0x16dfe1
add eax, 0x16dfe1
mov r8d, 0x338
cmp byte [rbx], al
add byte [rax], al
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14016b1ec
mov rsi, rax
mov qword [rax], r13
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], r12
adc bl, dh
movups xmmword [rsi + 0x18], xmm6
invalid
adc bl, dh
movups xmmword [rsi + 0x18], xmm6
invalid
sbb byte [rax - 0x78], al
outsb dx, byte [rsi]
sbb al, 0x88
pop rsi
sbb eax, 0x207e8948
mov byte [rsi + 0x1c], bpl
mov byte [rsi + 0x1d], bl
mov qword [rsi + 0x20], rdi
lea rax, [0x14029e918]
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], r15
jle 0x14016b1e3
add byte [rax - 0x77], cl
sub byte [rcx + r9*4 + 0x7e], r9b
jle 0x14016b1e3
mov qword [rsi + 0x38], r14
mov qword [rsi + 0x40], r14
mov eax, dword [rsp + 0x24]
jle 0x14016b1e3
mov qword [rsi + 0x38], r14
mov qword [rsi + 0x40], r14
mov eax, dword [rsp + 0x24]
mov byte [rsi + 0x48], al
mov byte [rsi + 0x49], 0
lea rdx, [0x14029f698]
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x90]
and al, 0x90
add byte [rax], al
add byte [rax - 0x7f], cl
invalid
test al, 0
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
and al, 0x90
add byte [rax], al
add byte [rax - 0x7f], cl
invalid
pop r12
pop r13
pop r14
pop r15
ret
ud2
push rdi
sub rsp, 0x28
cmp byte [rcx + 0x10], 0
je 0x14016b203
add rsp, 0x28
pop rdi
pop rsi
ret
mov rsi, qword [rcx]
mov rdi, qword [rcx + 8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14016b1fc
cmp qword [rdi + 0x10], 0x11
jb 0x14016b221
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rsi
add rsp, 0x28
pop rdi
pop rsi
jmp sub.kernel32.dll_HeapFree
test byte [rax], al
add byte [rax], al
add byte [rax], al
cmp byte [rdx + 0x10], 0
jp 0x14016b253
add byte [rbp + 0x16], dh
jp 0x14016b253
add byte [rbp + 0x16], dh
mov qword [rcx], 3
movups xmm0, xmmword [rdx]
movups xmmword [rcx + 8], xmm0
or dh, al
adc byte [rcx], al
mov byte [rdx + 0x10], 1
mov rax, rcx
ret
ud2
sub rsp, 0x20
mov rsi, rcx
movzx eax, byte [rcx + 0x49]
test eax, eax
je 0x14016b2b5
and byte [rax - 0x77], cl
invalid
cmp eax, 3
je 0x14016b29f
cmp eax, 4
jne 0x14016b31f
movzx eax, byte [rsi + 0x330]
mov dh, 0x86
xor byte [rbx], al
add byte [rax], al
cmp eax, 3
je case.0x14015808e.40
invalid
add byte [rbp + 0x485175c0], al
lea ecx, [rsi + 0x50]
test eax, eax
jne 0x14016b2e5
lea rcx, [rsi + 0x50]
call fcn.140131ff0
jmp 0x14016b2e5
mov rdi, qword [rsi + 0x50]
mov rbx, qword [rsi + 0x58]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
cmp dword [rbx + 8], 0
cmp dword [rbx + 8], 0
jne 0x14016b2c9
jmp 0x14016b2e5
mov rdi, qword [rsi + 0x20]
mov rbx, qword [rsi + 0x28]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14016b2e5
cmp qword [rbx + 0x10], 0x11
jb 0x14016b2d4
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
cmp qword [rsi], 0
je 0x14016b2f4
mov rcx, qword [rsi + 8]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rsi + 0x10]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
cmp qword [rsi + 0x38], 0
je 0x14016b31f
mov r8, qword [rsi + 0x30]
mov rcx, qword [0x1402d9150]
xor edx, edx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp sub.kernel32.dll_HeapFree
nop
add rsp, 0x20
add esp, 0x20
add esp, 0x20
pop rbx
pop rdi
pop rsi
ret
movzx eax, byte [rsi + 0x200]
cmp eax, 4
je 0x14016b34b
cmp eax, 3
je 0x14016b362
test eax, eax
jne 0x14016b2e5
sal byte [rbp - 0x58], 0x48
lea ecx, [rsi + 0x90]
lea rcx, [rsi + 0x90]
call fcn.140131ff0
jmp 0x14016b2e5
cmp dword [rsi + 0x208], 2
je 0x14016b36b
mov esi, 0x208
add dh, byte [rdi + rdx + 0x48]
lea ecx, [rsi + 0x208]
lea rcx, [rsi + 0x208]
call fcn.140164420
invalid
jmp 0x14016b36b
or dword [rbx + 0x208be], eax
add byte [rdx], al
cmp dword [rsi + 0x208], 2
mov esi, 0x208
add dh, byte [rbp + 0xc]
jne 0x14016b377
mov byte [rsi + 0x201], 0
jmp 0x14016b2e5
lea rcx, [rsi + 0x208]
call fcn.140131ff0
cld
inc esi
xchg byte [rcx], al
add al, byte [rax]
add byte [rax], al
invalid
cld
inc esi
xchg byte [rcx], al
add al, byte [rax]
add byte [rax], al
invalid
add byte [rax], al
add cl, ch
push rsi
invalid
jmp 0x14016b2e5
push rbx
sub rsp, 0xd18
add byte [rax], al
add byte [rax], al
movaps xmmword [rsp + 0xd00], xmm6
sub dword [rsp + 0xd00], esi
mov ah, 0x24
add byte [0xc963b3ad], cl
invalid
mov r15, r8
mov rdi, rdx
mov rsi, rcx
movzx eax, byte [rdx + 0x49]
lea rcx, [0x1401fd204]
lea rcx, [0x1401fd204]
lea ecx, [0x1401fd204]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x28]
mov qword [rdi + 0x50], rdx
mov qword [rdi + 0x58], rax
jmp 0x14016b429
lea r9, [rdi + 0x330]
add byte [rax], al
movzx eax, byte [rdi + 0x330]
test eax, eax
je 0x14016b590
cmp eax, 3
jne case.0x14016b3c6.1
lea r10, [rdi + 0x200]
movzx eax, byte [rdi + 0x200]
add byte [rdx], al
add byte [rax], al
add al, byte [rax]
add byte [rdi], cl
mov dh, 0x87
add byte [rdx], al
add byte [rax], al
lea rcx, [0x1401fd218]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov qword [rsp + 0x38], rsi
jmp 0x14016b688
mov rdx, qword [rdi + 0x50]
mov rax, qword [rdi + 0x58]
lea rcx, [rsp + 0x2b0]
mov r8, r15
call qword [rax + 0x18]
mov r14, qword [rsp + 0x2b0]
cmp r14, 3
jne 0x14016b453
mov qword [rsi], 4
mov al, 3
jmp 0x14016c097
mov r12, r15
mov r13, qword [rsp + 0x2b8]
add byte [rax - 0x75], cl
lodsb al, byte [rsi]
and al, 0xc0
add al, byte [rax]
add byte [rdi], cl
adc byte [rsp + 0x2c8], al
add byte [rax - 0x75], cl
lodsb al, byte [rsi]
and al, 0xc0
add al, byte [rax]
add byte [rdi], cl
adc byte [rsp + 0x2c8], al
movaps xmmword [rsp + 0xe0], xmm0
mov r15, qword [rdi + 0x50]
mov rbx, qword [rdi + 0x58]
mov rcx, r15
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14016b4a6
cmp qword [rbx + 0x10], 0x11
jb 0x14016b495
mov r15, qword [r15 - 8]
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
cmp r14d, 2
jne 0x14016b533
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x2b0], xmm0
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14016b4eb
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14016b3c6.1
mov r14, rax
mov qword [rax], r13
mov qword [rax + 8], rbp
movaps xmm0, xmmword [rsp + 0x2b0]
movups xmmword [rax + 0x10], xmm0
lea r13, [0x1402a0130]
mov r15d, 3
cmp qword [rdi], 0
jne 0x14016bf0c
jmp 0x14016bf15
add byte [rax], al
cmp byte [rdi + 0x48], 0
je 0x14016bb73
mov rcx, qword [rdi + 0x30]
mov rax, qword [rdi + 0x40]
mov qword [rdi + 0x50], r14
mov qword [rdi + 0x58], r13
mov qword [rdi + 0x60], rbp
movaps xmm0, xmmword [rsp + 0xe0]
loopne 0x14016b557
add byte [rax], al
loopne 0x14016b557
add byte [rax], al
movups xmmword [rdi + 0x68], xmm0
mov qword [rdi + 0x78], rdi
mov qword [rdi + 0x80], rcx
mov qword [rdi + 0x88], rax
mov dword [rdi + 0x88], eax
mov dword [rdi + 0x88], eax
lea r9, [rdi + 0x330]
mov byte [rdi + 0x330], 0
movq xmm0, rdi
movq xmm1, rcx
punpcklqdq xmm0, xmm1
mov r15, r12
jmp 0x14016b59c
movdqu xmm0, xmmword [rdi + 0x78]
mov rax, qword [rdi + 0x88]
mov rcx, qword [rdi + 0x70]
mov qword [rdi + 0xb0], rcx
mov rcx, qword [rdi + 0x50]
mov rdx, qword [rdi + 0x58]
push rdi
pop rax
push rdi
pop rax
movups xmm1, xmmword [rdi + 0x60]
movups xmmword [rdi + 0xa0], xmm1
mov qword [rdi + 0x90], rcx
mov qword [rdi + 0x98], rdx
movdqu xmmword [rdi + 0xb8], xmm0
mov qword [rdi + 0xc8], rax
mov dword [rdi + 0xc8], eax
mov dword [rdi + 0xc8], eax
lea r10, [rdi + 0x200]
mov byte [rdi + 0x200], 0
mov qword [rsp + 0x38], rsi
mov byte [rdi + 0x201], 0
mov rax, qword [rdi + 0xc8]
mov qword [rsp + 0x2e8], rax
movups xmm0, xmmword [rdi + 0xb8]
movups xmmword [rsp + 0x2d8], xmm0
mov rax, qword [rdi + 0xb0]
mov qword [rsp + 0x2d0], rax
movups xmm0, xmmword [rdi + 0x90]
movups xmm1, xmmword [rdi + 0xa0]
movaps xmmword [rsp + 0x2b0], xmm0
movaps xmmword [rsp + 0x2c0], xmm1
movaps xmm2, xmmword [rsp + 0x2e0]
movaps xmmword [rsp + 0x550], xmm2
movaps xmm3, xmmword [rsp + 0x2d0]
movaps xmmword [rsp + 0x540], xmm3
movaps xmmword [rsp + 0x530], xmm1
movaps xmmword [rsp + 0x520], xmm0
movups xmmword [rdi + 0x238], xmm2
movups xmmword [rdi + 0x228], xmm3
movups xmmword [rdi + 0x218], xmm1
movups xmmword [rdi + 0x208], xmm0
mov rax, qword [rdi + 0x208]
mov rbx, qword [rdi + 0x230]
mov r12, qword [rdi + 0x238]
mov rsi, qword [rdi + 0x240]
mov qword [rdi + 0x208], 2
cmp rax, 2
je case.0x14016b3c6.1
movups xmm0, xmmword [rdi + 0x210]
movups xmm1, xmmword [rdi + 0x220]
movups xmmword [rsp + 0xc8], xmm1
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x50], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movzx eax, byte [rbx + 0x1c]
movzx r8d, byte [rbx + 0x1d]
cmp r8, 5
mov qword [rsp + 0x40], r15
jne 0x14016b725
xor ecx, ecx
jmp 0x14016b73c
mov rdx, r8
inc rdx
xor ecx, ecx
cmp r8b, 4
lea r8, [0x1402467f0]
cmovb rcx, r8
test rcx, rcx
mov r8d, 4
cmovne r8, rdx
lea r13, [0x1402467f0]
cmovne r13, rcx
cmp rax, 5
sete cl
mov r14, r8
sub r14, rax
setb dl
xor r15d, r15d
or dl, cl
cmovne r14, r8
cmove r15, rax
test r14, r14
mov qword [rsp + 0x48], r9
mov qword [rsp + 0xa8], r10
je 0x14016b7cb
js case.0x14016b3c6.1
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14016b7b4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
mov rcx, rax
mov qword [0x1402d9150], rax
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapAlloc
mov rbp, rax
test rax, rax
jne 0x14016b7d0
jmp case.0x14016b3c6.1
mov ebp, 1
add r13, r15
mov rcx, rbp
mov rdx, r13
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], r14
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x90], r14
cmp qword [rbx], 0
je 0x14016b82d
mov rcx, qword [rbx + 8]
call sub.crypt32.dll_CertDuplicateCertificateContext
mov r14, rax
lea rcx, [rsp + 0x50]
xor edx, edx
call fcn.1401b5ab0
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
mov qword [rax + rcx*8], r14
inc rcx
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x50]
and al, 0x50
call fcn.1401b5d60
mov r14, rdx
test rax, rax
je 0x14016b9ee
mov r8, qword [rsp + 0x68]
test r8, r8
je 0x14016b863
cmp qword [rsp + 0x70], 0
je 0x14016b863
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x80]
test r8, r8
mov rsi, qword [rsp + 0x38]
je 0x14016b88e
cmp qword [rsp + 0x88], 0
je 0x14016b88e
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r15, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x14016b8b1
xor r12d, r12d
mov rcx, qword [r15 + r12*8]
inc r12
call sub.crypt32.dll_CertFreeCertificateContext
cmp rbx, r12
jne 0x14016b8a0
cmp qword [rsp + 0x58], 0
je 0x14016b8ca
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0xb0]
call fcn.140131ff0
lea rcx, [rsp + 0x678]
lea rdx, [rsp + 0x560]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
add byte [rax], al
add al, ch
sbb dword [rdi - 4], esp
dec dword [rax - 0x73]
mov word [rax + rdi*2], fs
invalid
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x2b0]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
mov ebx, 2
add byte [rax], al
add byte [rbp - 0x77], cl
hlt
add byte [rax], al
add byte [rbp - 0x77], cl
hlt
lea r15, [rdi + 0x208]
mov byte [rdi + 0x201], 1
mov qword [rdi + 0xd0], rbx
mov qword [rdi + 0xd8], r12
mov qword [rdi + 0xe0], r14
movaps xmm0, xmmword [rsp + 0x560]
movaps xmm1, xmmword [rsp + 0x570]
movups xmmword [rdi + 0xe8], xmm0
movups xmmword [rdi + 0xf8], xmm1
mov rax, qword [rsp + 0x580]
mov qword [rdi + 0x108], rax
mov qword [rdi + 0x110], 0
lea r12, [rdi + 0x118]
lea rdx, [rsp + 0x2b0]
mov r8d, 0xe8
mov rcx, r12
call sub.msvcrt.dll_memcpy
cmp dword [rdi + 0x208], 2
je 0x14016b9a5
mov rcx, r15
call fcn.140131ff0
mov rbx, qword [rdi + 0xd0]
test rbx, rbx
je 0x14016baeb
cmp rbx, 1
jne 0x14016bb61
lea rdx, [rdi + 0xd8]
mov r8d, 0x128
mov rcx, r15
call sub.msvcrt.dll_memcpy
mov rbx, qword [rdi + 0x208]
mov qword [rdi + 0x208], 2
cmp rbx, 2
jne 0x14016bbc1
mov qword [rsp + 0x3f8], 0
mov word [rsp + 0x438], 1
mov qword [rsp + 0x410], 0
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
test byte [rax + riz], ah
add al, 0
add byte [rax], al
add byte [rax], al
add byte [rax - 0x75], cl
adc r8b, bpl
pcmpeqb mm1, qword [rax]
add byte [rax - 0x39], cl
test byte [rax + rbp*8], ah
add eax, dword [rax]
add byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
test byte [rax + rsi*8], ah
add eax, dword [rax]
add byte [rax - 0x73], cl
mov word [rax + rbp*8], fs
add eax, dword [rax]
add byte [rcx + rcx*4 - 0x1e], cl
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
test byte [rax + riz], ah
add al, 0
add byte [rax], al
add byte [rax], al
add byte [rax - 0x75], cl
adc r8b, bpl
pcmpeqb mm1, qword [rax]
add byte [rax - 0x39], cl
test byte [rax + rbp*8], ah
add eax, dword [rax]
add byte [rcx], al
add byte [rax], al
add byte [rax - 0x77], cl
test byte [rax + rsi*8], ah
add eax, dword [rax]
add byte [rax - 0x73], cl
mov word [rax + rbp*8], fs
add eax, dword [rax]
add byte [rcx + rcx*4 - 0x1e], cl
mov r8, rsi
call fcn.1401b6020
movzx eax, byte [rbx + 0x18]
mov byte [rsp + 0x438], al
movzx ecx, byte [rbx + 0x19]
mov byte [rsp + 0x439], cl
cmp byte [rbx + 0x1a], 0
je 0x14016c0b9
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
mov rsi, qword [rsp + 0x38]
jne 0x14016ba9c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x10
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14016b3c6.1
mov r15, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov rax, qword [rsp + 0x410]
test rax, rax
je 0x14016c15c
lock dec qword [rax]
lea rbx, [0x14029f1c0]
add byte [rdi], cl
test byte [rdi + 6], bl
add byte [rax], al
add byte [rdi], cl
test byte [rdi + 6], bl
add byte [rax], al
jmp 0x14016c16c
mov r15, qword [rdi + 0xd8]
mov r14, qword [rdi + 0xe0]
mov byte [rdi + 0x201], 0
mov r13, qword [rdi + 0xe8]
call 0x18816bb08
mov eax, dword [rdi + 0xf0]
call 0x18816bb08
mov eax, dword [rdi + 0xf0]
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rdi + 0xf8]
add byte [rax], al
add byte [rdi], cl
sub dword [rsp + 0x2a0], eax
add byte [rax], al
add byte [rdi], cl
sub dword [rsp + 0x2a0], eax
mov rax, qword [rdi + 0x108]
mov qword [rsp + 0x40], rax
mov rbp, qword [rdi + 0x110]
lea rcx, [rsp + 0x790]
mov r8d, 0xe8
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov byte [rdi + 0x200], 1
cmp r15, 3
jne 0x14016bded
invalid
add cl, ch
and eax, 0x4c000005
mov esi, dword [rdi + 0xd8]
jmp 0x14016c086
mov r14, qword [rdi + 0xd8]
mov r15d, 2
jmp 0x14016bdb2
mov qword [rsp + 0x38], rbp
movaps xmm0, xmmword [rsp + 0xe0]
add byte [rdi], cl
sub dword [rsp + 0x290], eax
add byte [rdi], cl
sub dword [rsp + 0x290], eax
mov r15d, 2
jmp 0x14016bedb
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r9
mov rbx, qword [rdi + 0x208]
mov qword [rdi + 0x208], 2
cmp rbx, 2
je case.0x14016b3c6.1
lea r15, [rdi + 0x248]
movups xmm0, xmmword [rdi + 0x210]
movups xmm1, xmmword [rdi + 0x220]
movups xmm2, xmmword [rdi + 0x230]
movups xmmword [rsp + 0x168], xmm2
movups xmmword [rsp + 0x158], xmm1
movups xmmword [rsp + 0x148], xmm0
lea rcx, [rsp + 0x180]
mov r8d, 0xe8
mov rdx, r15
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x140], rbx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x178], rax
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x140]
call fcn.140165f50
cmp qword [rsp + 0x2b0], 0
je 0x14016bcb8
mov r13, qword [rsp + 0x2b8]
mov r14, qword [rsp + 0x2c0]
cmp r13, 2
jne 0x14016bf7f
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xf0], xmm0
lea rcx, [rsp + 0x560]
lea rdx, [rsp + 0x140]
mov r8d, 0xf0
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0x678]
lea rdx, [rsp + 0x2b0]
mov r8d, 0xf0
call sub.msvcrt.dll_memcpy
mov r15d, 2
jmp 0x14016bd6e
mov r15, qword [rsp + 0x2b8]
mov r14, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x2d0]
movups xmm0, xmmword [rsp + 0x2d8]
movaps xmmword [rsp + 0xf0], xmm0
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x2f0]
lea rbx, [rsp + 0x560]
mov r8d, 0xf0
mov rcx, rbx
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0x678]
mov r8d, 0xf0
mov rdx, rbx
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x270], xmm0
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0x3e8]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
cmp r15, 3
je 0x14016c07b
mov qword [rsp + 0x38], r12
lea rbx, [rdi + 0x208]
movaps xmm0, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x500], xmm0
lea rcx, [rsp + 0xb30]
lea rdx, [rsp + 0x3e8]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
cmp dword [rbx], 2
je 0x14016bdb2
mov rcx, rbx
call fcn.140164420
mov byte [rdi + 0x201], 0
movaps xmm0, xmmword [rsp + 0x500]
movaps xmmword [rsp + 0x2a0], xmm0
lea rcx, [rsp + 0x790]
lea rdx, [rsp + 0xb30]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
mov byte [rdi + 0x200], 1
xor ebp, ebp
movaps xmm0, xmmword [rsp + 0x2a0]
movaps xmmword [rsp + 0x4d0], xmm0
lea rbx, [rsp + 0xc18]
lea rdx, [rsp + 0x790]
mov r8d, 0xe8
mov rcx, rbx
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x48]
mov byte [rax], 1
movaps xmm0, xmmword [rsp + 0x4d0]
movaps xmmword [rsp + 0x4e0], xmm0
lea rcx, [rsp + 0x960]
mov r8d, 0xe8
mov rdx, rbx
call sub.msvcrt.dll_memcpy
cmp r15, 2
jne 0x14016beab
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14016be7a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14016b3c6.1
mov qword [rax], r14
lea r13, [0x1402a0298]
mov r14, rax
mov r15d, 3
cmp qword [rdi], 0
jne 0x14016bf0c
jmp 0x14016bf15
movaps xmm0, xmmword [rsp + 0x4e0]
movaps xmmword [rsp + 0x290], xmm0
lea rcx, [rsp + 0x878]
lea rdx, [rsp + 0x960]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
mov rbx, qword [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x290]
movaps xmmword [rsp + 0x4f0], xmm0
lea rcx, [rsp + 0xa48]
lea rdx, [rsp + 0x878]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
cmp qword [rdi], 0
je 0x14016bf15
mov rcx, qword [rdi + 8]
call sub.crypt32.dll_CertFreeCertificateContext
mov rcx, qword [rdi + 0x10]
xor edx, edx
call sub.crypt32.dll_CertCloseStore
cmp qword [rdi + 0x38], 0
je 0x14016bf39
mov r8, qword [rdi + 0x30]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov qword [rsi], r15
mov qword [rsi + 8], r14
mov qword [rsi + 0x10], r13
mov rax, qword [rsp + 0x38]
mov qword [rsi + 0x18], rax
movaps xmm0, xmmword [rsp + 0x4f0]
movups xmmword [rsi + 0x20], xmm0
mov qword [rsi + 0x30], rbx
mov qword [rsi + 0x38], rbp
lea rcx, [rsi + 0x40]
lea rdx, [rsp + 0xa48]
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
mov al, 1
jmp 0x14016c097
movups xmm6, xmmword [rsp + 0x2c8]
movups xmm0, xmmword [rsp + 0x2d8]
movaps xmmword [rsp + 0x50], xmm0
mov rbp, qword [rsp + 0x2e8]
lea rdx, [rsp + 0x2f0]
lea rbx, [rsp + 0x140]
mov r8d, 0xf0
mov rcx, rbx
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0xf0], xmm0
lea r12, [rsp + 0x560]
mov r8d, 0xf0
mov rcx, r12
mov rdx, rbx
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x140], xmm0
lea rbx, [rsp + 0x2b0]
mov r8d, 0xf0
mov rcx, rbx
mov rdx, r12
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0x678]
mov r8d, 0xf0
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov qword [rdi + 0x208], r13
mov qword [rdi + 0x210], r14
movups xmmword [rdi + 0x218], xmm6
movaps xmm0, xmmword [rsp + 0xb0]
movups xmmword [rdi + 0x228], xmm0
mov qword [rdi + 0x238], rbp
lea rdx, [rsp + 0x680]
mov r8d, 0xe8
mov rcx, r15
call sub.msvcrt.dll_memcpy
mov qword [rdi + 0x240], 0
invalid
add byte [rax - 0x75], cl
test byte [rax + rbp*4], ah
add byte [rax], al
add dh, al
add byte [rax + rcx*2], al
mov eax, dword [rsp + 0x48]
mov rax, qword [rsp + 0xa8]
mov byte [rax], 4
mov rax, qword [rsp + 0x48]
mov byte [rax], 3
mov qword [rsi], 4
mov al, 4
mov byte [rdi + 0x49], al
mov rax, rsi
movaps xmm6, xmmword [rsp + 0xd00]
add rsp, 0xd18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp byte [rbx + 0x1b], 0
mov rsi, qword [rsp + 0x38]
je 0x14016c184
jnp 0x14016c0d7
add byte [rax - 0x75], cl
je 0x14016c0e5
cmp byte [rdi], cl
test byte [rax + rax - 0x74b80000], bh
adc r8b, bpl
invalid
mov rcx, qword [rbx + 0x10]
call sub.crypt32.dll_CertDuplicateStore
insd dword [rdi], dx
or byte [rax], al
insd dword [rdi], dx
or byte [rax], al
mov r12, rax
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
test eax, edx
invalid
jne 0x14016c0ff
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
mov rcx, rax
mov qword [0x1402d9150], rax
mov r8d, 0x18
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x14016b3c6.1
mov r15, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], r12
mov rax, qword [rsp + 0x410]
test rax, rax
je 0x14016c165
lock dec qword [rax]
lea rbx, [0x14029f160]
jne 0x14016c16c
mov rcx, qword [rsp + 0x410]
mov rdx, qword [rsp + 0x418]
call fcn.14014cf70
jmp 0x14016c16c
lea rbx, [0x14029f1c0]
jmp 0x14016c16c
lea rbx, [0x14029f160]
mov qword [rsp + 0x410], r15
mov qword [rsp + 0x418], rbx
movzx eax, byte [rsp + 0x438]
mov esp, 0x41024
add byte [rax - 0x77], cl
pushfq
and al, 0x18
add al, 0
add byte [rdi], cl
mov dh, 0x84
and al, 0x38
add al, 0
add byte [rdi], cl
adc byte [rsp + 0xb0], al
movups xmm0, xmmword [rsp + 0xb0]
movups xmm1, xmmword [rsp + 0xc0]
movups xmm2, xmmword [rsp + 0xd0]
add byte [rax], al
add byte [rax], al
movaps xmmword [rsp + 0x110], xmm2
movaps xmmword [rsp + 0x100], xmm1
movaps xmmword [rsp + 0xf0], xmm0
test byte [rax + rsi*8], ah
add byte [rax], al
add byte [rbp + 0x31], al
rol byte [rax + rax*8 + 0x24848b48], 0xf8
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x74], cl
and al, 0x20
add al, 0
add byte [rdi + rcx + 0x45], cl
ror byte [rax - 0x7b], 0xc0
test byte [rax + rsi*8], ah
add byte [rax], al
add byte [rbp + 0x31], al
rol byte [rax + rax*8 + 0x24848b48], 0xf8
add eax, dword [rax]
add byte [rbx + rcx*4 - 0x74], cl
and al, 0x20
add al, 0
add byte [rdi + rcx + 0x45], cl
ror byte [rax - 0x7b], 0xc0
cmove r8, rax
mov rax, qword [rsp + 0x430]
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x140]
mov rdx, r14
call fcn.1401b6630
movsb byte [rdi], byte [rsi]
add al, 0
movsb byte [rdi], byte [rsi]
add al, 0
mov r15, qword [rsp + 0x150]
cmp r15, 2
jne 0x14016c24b
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x2b8], 2
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2b0], 1
lea rcx, [rsp + 0xf0]
call fcn.140131ff0
lock dec qword [r14]
jne 0x14016c62d
mov rcx, r14
call fcn.14014d0d0
jmp 0x14016c62d
movaps xmm6, xmmword [rsp + 0x140]
mov eax, dword [rsp + 0x158]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x3e8], 0
je 0x14016c30e
mov rcx, qword [rsp + 0x3f0]
call sub.crypt32.dll_CertDuplicateStore
mov qword [rsp + 0x128], rax
mov ebx, 1
add byte [rax], al
add byte [rax], al
mov r12, qword [rsp + 0x3f8]
test r12, r12
mov qword [rsp + 0x138], rbx
invalid
je 0x14016c325
add byte [rax + rdi*2 + 0x48], dh
mov ebp, dword [rsp + 0x408]
mov rbp, qword [rsp + 0x408]
test rbp, rbp
je 0x14016c331
mov rax, rbp
shr rax, 0x3e
jne case.0x14016b3c6.1
xor ebx, ebx
mov r12, qword [rsp + 0x3f8]
test r12, r12
mov qword [rsp + 0x138], rbx
jne 0x14016c2ad
xor eax, eax
mov qword [rsp + 0xa0], rax
jmp 0x14016c354
lea r13, [rbp*2]
mov eax, 2
mov rcx, rax
mov qword [rsp + 0xa0], rax
mov rdx, r12
mov r8, r13
call sub.msvcrt.dll_memcpy
movzx r13d, byte [rsp + 0x438]
movzx eax, byte [rsp + 0x439]
mov rbx, qword [rsp + 0x410]
add al, 0
add byte [rax - 0x7b], cl
invalid
je 0x14016c38d
add al, 0
add byte [rax - 0x7b], cl
invalid
and byte [rcx], al
add byte [rax], al
lock inc qword [rbx]
jg 0x14016c38d
jmp case.0x14016b3c6.1
movaps xmm0, xmmword [rsp + 0xf0]
sub byte [rsp + 0xf0], al
movaps xmm1, xmmword [rsp + 0x100]
movaps xmm2, xmmword [rsp + 0x110]
add dword [rax], eax
add byte [rdi], cl
sub dword [rsp + 0x2d0], edx
add dword [rax], eax
add byte [rdi], cl
sub dword [rsp + 0x2d0], edx
movaps xmmword [rsp + 0x2c0], xmm1
movaps xmmword [rsp + 0x2b0], xmm0
sub dword [rsp + 0x2b0], eax
sub dword [rsp + 0x2b0], eax
test byte [rax + rsi*4], ah
add al, byte [rax]
add byte [rbp - 0x7b], cl
dec dword [rax + 0x74372444]
pop rsp
test r15, r15
mov byte [rsp + 0x37], al
je 0x14016c422
mov byte [rsp + 0x36], r13b
lea r13, str.combase.dll
mov r15, qword [rsp + 0x130]
test r15, r15
cmovne r13, qword [rsp + 0x38]
je 0x14016c43c
movzx eax, byte [0x1402d9160]
mov rcx, qword [0x1402d9150]
test rcx, rcx
jne 0x14016c40c
mov dh, 5
je 0x14016c3b7
invalid
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x14016b3c6.1
push 0xffffffff85480008
sal byte [rsp + rbx + 0x48], 0x89
ror dword [rax - 0x77], 5
int 0x16
invalid
add byte [rcx], dh
ror byte [rbp - 0x77], cl
clc
mov rcx, rax
mov qword [0x1402d9150], rax
invalid
invalid
invalid
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapAlloc
mov r12, rax
test rax, rax
jne 0x14016c442
ud2
mov r12d, 1
xor r15d, r15d
mov rdx, qword [rsp + 0x420]
test rdx, rdx
jne 0x14016c46d
xor eax, eax
jmp 0x14016c49a
mov r12d, 1
mov rcx, r12
mov rdx, r13
mov r8, r15
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x38]
call sub.secur32.dll_FreeContextBuffer
movzx r13d, byte [rsp + 0x36]
mov rdx, qword [rsp + 0x420]
test rdx, rdx
je 0x14016c438
mov r8, qword [rsp + 0x430]
lea rcx, [rsp + 0x140]
call fcn.140169700
mov rax, qword [rsp + 0x140]
movups xmm0, xmmword [rsp + 0x148]
movaps xmmword [rsp + 0x510], xmm0
mov qword [rsp + 0x218], rbp
mov qword [rsp + 0x220], rbp
movaps xmm0, xmmword [rsp + 0x2b0]
movaps xmm1, xmmword [rsp + 0x2c0]
movaps xmm2, xmmword [rsp + 0x2d0]
movups xmmword [rsp + 0x150], xmm0
movups xmmword [rsp + 0x160], xmm1
movups xmmword [rsp + 0x170], xmm2
movups xmm0, xmmword [rsp + 0x270]
jo 0x14016c4e2
add byte [rax], al
jo 0x14016c4e2
add byte [rax], al
movups xmmword [rsp + 0x185], xmm0
mov ecx, dword [rsp + 0x27f]
mov dword [rsp + 0x194], ecx
movaps xmm0, xmmword [rsp + 0x510]
movups xmmword [rsp + 0x250], xmm0
mov rcx, qword [rsp + 0x138]
mov word [rax + rdi], fs
add dword [rax], eax
add byte [rax - 0x77], cl
mov word [rax + rax*2], fs
add dword [rax], eax
add byte [rax - 0x75], cl
mov word [rax + rbp], fs
add dword [rax], eax
add byte [rax], al
mov word [rax + rdi], fs
add dword [rax], eax
add byte [rax - 0x77], cl
mov word [rax + rax*2], fs
add dword [rax], eax
add byte [rax - 0x75], cl
mov word [rax + rbp], fs
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x148], rcx
mov dword [rsp + 0x180], 0x10000
mov byte [rsp + 0x184], 0
add byte [rax], al
mov qword [rsp + 0x148], rcx
mov dword [rsp + 0x180], 0x10000
mov byte [rsp + 0x184], 0
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a8], xmm0
mov qword [rsp + 0x1b8], 0
mov qword [rsp + 0x1c0], 1
movups xmmword [rsp + 0x1c8], xmm0
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x1e0], r12
mov qword [rsp + 0x1e8], r15
mov qword [rsp + 0x1f0], r15
mov qword [rsp + 0x1f8], 0
movups xmmword [rsp + 0x200], xmm6
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x210], rcx
adc byte [rdx], al
add byte [rax], al
adc byte [rdx], al
add byte [rax], al
mov qword [rsp + 0x228], rbx
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], 1
mov qword [rsp + 0x240], 0
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x77], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax + rcx*4 - 0x54], al
and al, 0x60
invalid
add al, byte [rax]
add byte [rdi], cl
mov dh, 0x44
and al, 0x37
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x77], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax + rcx*4 - 0x54], al
and al, 0x60
invalid
add al, byte [rax]
add byte [rdi], cl
mov dh, 0x44
and al, 0x37
invalid
mov byte [rsp + 0x261], al
mov word [rsp + 0x262], 0x100
lea rcx, [rsp + 0x2b0]
lea rdx, [rsp + 0x140]
call fcn.140165f50
cdq
invalid
invalid
cdq
invalid
cmp qword [rsp + 0x2b0], 0
je 0x14016c68b
mov r12, qword [rsp + 0x2b8]
add byte [rax], al
mov r14, qword [rsp + 0x2c0]
cmp r12, 2
je 0x14016c669
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x140]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x560]
lea rdx, [rsp + 0x140]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
mov ebx, 1
jmp 0x14016c6b8
mov r12, qword [rsp + 0x2b8]
mov r14, qword [rsp + 0x2c0]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x560]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
xor ebx, ebx
lea rcx, [rsp + 0x3e8]
call fcn.140164680
mov r8, qword [rsp + 0x68]
mov word [rax + rbp*8], fs
add eax, dword [rax]
add al, ch
mov ebx, 0x4cffff7f
mov eax, dword [rsp + 0x68]
test r8, r8
je 0x14016c6e5
invalid
invalid
cmp qword [rsp + 0x70], 0
je 0x14016c6e5
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r8, qword [rsp + 0x80]
mov eax, dword [rsp + 0x80]
test r8, r8
je 0x14016c70b
cmp qword [rsp + 0x88], 0
je 0x14016c70b
add byte [rsi + rcx + 0x48], dh
mov ecx, dword [0x1402d9150]
mov rcx, qword [0x1402d9150]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov r15, qword [rsp + 0x50]
mov r13, qword [rsp + 0x60]
test r13, r13
je 0x14016c731
xor ebp, ebp
nop dword [rax]
mov rcx, qword [r15 + rbp*8]
inc rbp
call sub.crypt32.dll_CertFreeCertificateContext
cmp r13, rbp
jne 0x14016c720
cmp qword [rsp + 0x58], 0
je 0x14016c74a
mov rcx, qword [0x1402d9150]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x678]
lea rdx, [rsp + 0x560]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
test rbx, rbx
je 0x14016c801
cmp r12, 2
je 0x14016b8f2
lea r15, [rsp + 0x2b0]
lea rdx, [rsp + 0x678]
mov r8d, 0x118
mov rcx, r15
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x140]
mov r8d, 0x118
mov rdx, r15
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
add byte [rax], al
add byte [rax], al
movaps xmmword [rsp + 0x560], xmm0
movaps xmmword [rsp + 0x570], xmm1
mov rax, qword [rsp + 0x160]
test byte [rax + riz*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rax*4], ah
add eax, 0x8d480000
xchg esp, eax
and al, 0x70
add dword [rax], eax
add byte [rax - 0x73], cl
mov word [rax + rsi*4], fs
add al, byte [rax]
add byte [rcx - 0x48], al
invalid
add byte [rax], al
invalid
test byte [rax + riz*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rax*4], ah
add eax, 0x8d480000
xchg esp, eax
and al, 0x70
add dword [rax], eax
add byte [rax - 0x73], cl
mov word [rax + rsi*4], fs
add al, byte [rax]
add byte [rcx - 0x48], al
call 0x12816c7f3
call sub.msvcrt.dll_memcpy
invalid
call sub.msvcrt.dll_memcpy
mov ebx, 1
jmp 0x14016b915
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x678]
mov r8d, 0x118
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x140]
movups xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x560], xmm0
movaps xmmword [rsp + 0x570], xmm1
mov word [rax + rsi*2], fs
add eax, 0x8b480000
test byte [rax + riz*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rax*4], ah
invalid
add byte [rax], al
add dword [rax], eax
add byte [rax - 0x73], cl
xchg esp, eax
and al, 0x78
invalid
mov word [rax + rsi*2], fs
add eax, 0x8b480000
test byte [rax + riz*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rax*4], ah
add eax, 0x8d480000
add byte [rax], al
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x2b0]
add byte [rax], al
mov r8d, 0xe8
invalid
jns 0x14016c8d2
add byte [rax], al
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x2b0]
add byte [rax], al
add byte [rax], al
mov r8d, 0xe8
call sub.msvcrt.dll_memcpy
or byte [rax], al
xor ebx, ebx
jmp 0x14016b915
ud2
add byte [rax], al
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x48], 2
and al, 0x48
add al, byte [rax]
add byte [rax], al
and al, 0x48
add al, byte [rax]
add byte [rax], al
mov qword [rsp + 0x68], 0
mov r10, qword [r8]
mov r9d, dword [r8 + 8]
mov eax, dword [r8 + 0xc]
mov dword [rsp + 0x24], eax
mov rax, qword [rdx]
mov qword [rsp + 0x38], rax
cmp byte [rax - 0x75], cl
invalid
invalid
cmp byte [rax - 0x75], cl
adc byte [rax - 0x77], cl
test byte [rax + rcx*4], ah
add byte [rax], al
add byte [rbx + rcx*4 + 0x62], cl
and byte [rax - 0x77], cl
mov qword [rsp + 0x80], rdx
mov rdi, qword [rdx + 0x18]
mov edi, dword [rdx + 0x18]
mov eax, dword [rdx + 0x10]
mov qword [rsp + 0x88], rax
mov r12, qword [rdx + 0x20]
mov qword [rsp + 0x80], rdx
mov rdi, qword [rdx + 0x18]
mov edi, dword [rdx + 0x18]
mov edi, dword [rdx + 0x18]
dec rdi
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r10
mov r13, qword [rsp + 0x38]
mov rcx, qword [r10 + 0x10]
mov ecx, dword [rdx + 0x10]
mov ecx, dword [rdx + 0x10]
cmp rcx, r9
leave
jbe 0x14016cc34
nop dword [rax]
mov rax, qword [r10]
test rax, rax
je 0x14016cc34
imul r11, r9, 0x130
mov rdx, qword [rax + r11]
cmp rdx, 2
je 0x14016cc34
lea rbx, [rax + r11]
mov r8d, dword [rsp + 0x24]
cmp dword [rbx + 0x114], r8d
add byte [rdi], cl
test ebp, ebp
add al, byte [rax]
invalid
add byte [rdi], cl
test ebp, ebp
add al, byte [rax]
add byte [rax - 0x7b], cl
ror byte [rdi], cl
test byte [rsi + 1], bl
add byte [rax], al
test rdx, rdx
je 0x14016caae
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x78], r11
mov r15, qword [rbx + 8]
cmp qword [rsp + 0x88], r15
jbe 0x14016cc34
mov rsi, qword [rbx + 0x10]
imul rdi, r15, 0x130
mov r14, qword [r13 + rdi]
mov rax, qword [r13 + rdi + 8]
cmp eax, 0x44894808
and al, 0x40
cmp eax, 0x44894808
and al, 0x40
movzx eax, byte [r13 + rdi + 0x10]
movzx eax, byte [rbp + rdi + 0x10]
mov byte [rsp + 0x23], al
lea rbp, [r13 + rdi + 0x11]
mov r8d, 0x11f
lea rcx, [rsp + 0x98]
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov qword [r13 + rdi], 2
cmp eax, 0x200
add byte [rbp - 0x77], cl
cmp eax, 0xfe834908
add cl, byte [rdi]
test byte [rax], dh
add al, byte [rax]
invalid
cmp eax, 0x200
add byte [rbp - 0x77], cl
cmp eax, 0xfe834908
add cl, byte [rdi]
test byte [rax], dh
add al, byte [rax]
add byte [rcx - 0x48], al
invalid
mov r8d, 0x11f
add byte [rax], al
lea r12, [rsp + 0x2d9]
mov rcx, r12
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x80]
mov eax, dword [rsp + 0x80]
mov eax, dword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
mov qword [rax + 0x18], rdi
mov dword [rax + 0x18], edi
mov dword [rax + 0x18], edi
mov qword [rax + 0x20], r15
cmp r15, rsi
jne 0x14016ca10
test r14, r14
jne 0x14016cc34
invalid
add al, byte [rax]
invalid
invalid
mov qword [rbx], 0
add byte [rax], al
jmp 0x14016ca29
test r14, r14
je 0x14016cc34
mov qword [rbx], 1
mov rax, qword [rsp + 0x40]
mov qword [rbx + 8], rax
lea rsi, [rsp + 0x1ba]
movzx ebx, byte [rsp + 0x23]
add byte [rdi], cl
mov dh, 0x5c
and al, 0x23
mov r8d, 0x11f
mov rcx, rsi
mov rdx, r12
call sub.msvcrt.dll_memcpy
cmp bl, 9
je 0x14016ca98
mov byte [rsp + 0x98], bl
mov r8d, 0x11f
lea rcx, [rsp + 0x99]
add byte [rax - 0x77], cl
bnd call sub.msvcrt.dll_memcpy
add byte [rax - 0x77], cl
bnd call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x98]
call fcn.14016cc40
dec rdi
mov r12, r15
mov r9, qword [rsp + 0x30]
mov r10, qword [rsp + 0x28]
mov rcx, qword [r10 + 0x10]
cmp rcx, r9
ja case.0x14013a6a6.228
invalid
invalid
invalid
jmp 0x14016cc34
mov r10, qword [rsp + 0x28]
push rsp
and al, 0x28
mov rax, qword [r10]
mov rcx, qword [r10 + 0x10]
mov r9, qword [rsp + 0x30]
mov r11, qword [rsp + 0x78]
cmp rcx, r9
jbe 0x14016cc34
test rax, rax
je 0x14016cc34
add dword [rax], eax
invalid
add dword [rax], eax
add byte [rdx - 0x7d], al
cmp dword [rax + r11], 2
invalid
cmp dword [rax + r11], 2
je 0x14016cc34
test byte [rcx + 1], ch
add byte [rax], al
test byte [rcx + 1], ch
add byte [rax], al
add rax, r11
mov ecx, dword [rsp + 0x24]
cmp dword [rax + 0x114], ecx
jne 0x14016cc34
mov qword [rax + 0x88], 0
cmp qword [r10 + 0x10], r9
adc byte [rdi], cl
xchg byte [rcx + 1], al
add dword [rax], eax
invalid
adc byte [rdi], cl
xchg byte [rcx + 1], al
add dword [rax], eax
invalid
add dword [rax], eax
add byte [rcx - 0x75], cl
add cl, byte [rax - 0x7b]
ror byte [rdi], 0x84
xor eax, 0x42000001
cmp dword [rax + rbx], 2
mov rax, qword [r10]
test rax, rax
je 0x14016cc34
cmp dword [rax + r11], 2
je 0x14016cc34
add rax, r11
mov ecx, dword [rsp + 0x24]
cmp dword [rax + 0x114], ecx
jne 0x14016cc34
invalid
add bh, al
sbb byte [rax], 1
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov dword [rax + 0x118], 0
mov rax, qword [rsp + 0x70]
cmp dword [rax + 0x4c], 1
jne 0x14016cb48
cmp r9d, dword [rax + 0x50]
jne 0x14016cb48
mov ecx, dword [rsp + 0x24]
cmp ecx, dword [rax + 0x54]
jne 0x14016cb48
mov dword [rax + 0x4c], 2
mov r8, qword [rsp + 0x48]
cmp r8, 2
je 0x14016cbe1
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
test r8, r8
je 0x14016cb7d
mov r8, qword [rax + 0x10]
dec r8
and r8, 0xfffffffffffffff0
add rcx, r8
add rcx, 0x10
call qword [rax + 0x68]
mov r8, qword [rsp + 0x48]
cmp r8, 2
je 0x14016cbe1
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
test r8, r8
je 0x14016cbb1
mov r8, qword [rax + 0x10]
dec r8
and r8, 0xfffffffffffffff0
add rcx, r8
add rcx, 0x10
call qword [rax + pe_nt_image_headers64]
add byte [rax], al
mov rax, qword [rsp + 0x48]
cmp rax, 2
clc
invalid
clc
add dh, byte [rdi + rbx + 0x48]
je 0x14016cbe1
test rax, rax
je 0x14016cbe1
test rax, rax
je 0x14016cbe1
mov rax, qword [rsp + 0x50]
and al, 0x50
lock dec qword [rax]
jne 0x14016cbe1
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.14014cf70
nop
add rsp, 0x3f8
invalid
clc
add eax, dword [rax]
add byte [rbx + 0x5d], bl
pop rdi
pop rsi
pop r12
pop r13
pop rbp
invalid
pop rbp
pop r14
pop r15
ret
mov rbx, qword [rsp + 0x38]
pop rsp
and al, 0x38
add rbx, rdi
mov rcx, rbx
call fcn.14014bac0
mov qword [rbx], 2
mov rax, qword [rsp + 0x40]
mov qword [rbx + 8], rax
invalid
invalid
or byte [r15], cl
mov dh, 0x44
and al, 0x23
movzx eax, byte [rsp + 0x23]
mov byte [rbx + 0x10], al
lea rdx, [rsp + 0x98]
mov r8d, 0x11f
invalid
add dword [rax], eax
add byte [rax - 0x77], cl
jmp 0x14880791b
invalid
or byte [rax], al
invalid
imul ecx, dword [rax], 0xf0b0f00
or ecx, dword [rdi]
invalid
ud2
test byte [rax], al
add byte [rax], al
add byte [rax], al
clc
invalid
or dword [rax], eax
in eax, dx
dec dword [rax - 0x75]
mov rax, qword [rcx + 8]
cmp rax, 1
je 0x14016cc9f
test rax, rax
adc byte [rax - 0x75], cl
push rcx
sbb byte [rax - 0x75], cl
adc byte [rbx + rcx*4 + 0x41], cl
and byte [rax - 0x7d], cl
shr dword [rax], 0x48
jmp rax