Function at 0x1400196d0
Capabilities:
Check for debugger via api
Check for process debug object
Check processdebugflags
Check processdebugport
Encode data using xor
Encrypt data using salsa20 or chacha
Inspect section memory permissions
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x978
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x8e0], xmm11
movdqa xmmword [rbp + 0x8d0], xmm10
movdqa xmmword [rbp + 0x8c0], xmm9
movdqa xmmword [rbp + 0x8b0], xmm8
movdqa xmmword [rbp + 0x8a0], xmm7
movdqa xmmword [rbp + 0x890], xmm6
and rsp, 0xffffffffffffffe0
call fcn.1400274d0
mov rdi, rax
mov esi, edx
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.kernel32.dll_CreateWaitableTimerExW
test rax, rax
je 0x1400197a8
mov rbx, rax
mov qword [rsp + 0x200], 0xffffffffeb236c80
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x200]
mov rcx, rax
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_SetWaitableTimer
test eax, eax
je 0x1400197a0
mov rcx, rbx
mov edx, 0xffffffff
call sub.kernel32.dll_WaitForSingleObject
mov r14d, eax
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
cmp r14d, 0xffffffff
jne 0x1400197b2
jmp 0x1400197a8
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov ecx, 0x88b8
call sub.kernel32.dll_Sleep
call fcn.1400274d0
mov rbx, rax
mov r14d, edx
mov r8, qword [0x14009b068]
test r8, r8
jne 0x140019802
mov qword [rsp + 0x200], 0
lea rcx, [rsp + 0x200]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x14001c7dd
mov r8, qword [rsp + 0x200]
mov qword [0x14009b068], r8
test r8, r8
je 0x14001c7e2
cmp r8, 0x3b9aca00
ja 0x140019817
mov eax, 0x3b9aca00
xor edx, edx
div r8d
jmp 0x140019819
xor eax, eax
lea ecx, [rax - 0x3b9aca00]
xor edx, edx
cmp r8, 2
cmovae ecx, eax
setb al
xor r9d, r9d
cmp rdi, rbx
setne r9b
mov r8d, 0xff
cmovae r8d, r9d
test r8b, r8b
jne 0x140019851
cmp esi, r14d
setne r8b
jb 0x1400198f1
cmp r8b, 1
jne 0x1400198f1
mov r8, rdi
sub r8, rbx
jb 0x14001c7e2
cmp esi, r14d
jae 0x14001988d
test r8, r8
je 0x14001c7e2
dec r8
lea r9d, [rsi + 0x3b9aca00]
sub r9d, r14d
cmp r9d, 0x3b9aca00
jae 0x14001989c
jmp 0x1400198c1
mov r9d, esi
sub r9d, r14d
cmp r9d, 0x3b9aca00
jb 0x1400198c1
mov r10d, r9d
shr r10d, 9
imul r10, r10, 0x44b83
shr r10, 0x27
add r8, r10
jb 0x14001c7e2
imul r10d, r10d, 0x3b9aca00
sub r9d, r10d
mov dl, al
xor eax, eax
cmp r8, rdx
setne al
mov edx, 0xff
cmovb eax, edx
xor r8d, r8d
cmp r9d, ecx
setne r8b
cmovb r8d, edx
test al, al
cmovne r8d, eax
cmp r8b, 1
jne 0x14001c779
cmp rbx, rdi
jb 0x14001c779
sub rbx, rdi
cmp r14d, esi
jae 0x140019915
test rbx, rbx
je 0x14001c779
dec rbx
add r14d, 0x3b9aca00
sub r14d, esi
cmp r14d, 0x3b9aca00
jb 0x140019939
shr r14d, 9
imul rax, r14, 0x44b83
shr rax, 0x27
add rbx, rax
jb 0x14001c7e2
cmp rbx, 0x19
jb 0x14001c779
lea rcx, [rsp + 0x200]
call fcn.14003a240
cmp byte [rsp + 0x200], 0x12
jne 0x14001c7e2
call fcn.1400137e0
mov qword [rsp + 0x680], 0
mov dword [rsp + 0x1a0], 0
mov qword [rsp + 0x200], 0
mov dword [rsp + 0xd0], 0
call sub.kernel32.dll_GetCurrentProcess
lea rdx, [rsp + 0xd0]
mov rcx, rax
call sub.kernel32.dll_CheckRemoteDebuggerPresent
call sub.kernel32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x680]
mov rcx, rax
mov edx, 7
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
call sub.kernel32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea rbx, [rsp + 0x1a0]
mov rcx, rax
mov edx, 0x1f
mov r8, rbx
mov r9d, 4
call sub.ntdll.dll_NtQueryInformationProcess
call sub.kernel32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x200]
mov rcx, rax
mov edx, 0x1e
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
cmp dword [rsp + 0xd0], 0
jne 0x14001c779
cmp qword [rsp + 0x680], 0
jne 0x14001c779
cmp dword [rsp + 0x1a0], 0
je 0x14001c779
cmp qword [rsp + 0x200], 0
jne 0x14001c779
lea rax, [0x140095730]
mov rcx, rax
shr rcx, 8
mov byte [rsp + 0x200], al
mov rdx, rax
shr rdx, 0x38
mov byte [rsp + 0x207], dl
shr rax, 0x28
mov word [rsp + 0x205], ax
mov dword [rsp + 0x201], ecx
mov qword [rsp + 0x208], 0x20
lea rax, [0x140095750]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], 0x20
mov qword [rsp + 0x220], 1
mov qword [rsp + 0x228], 0
mov qword [rsp + 0x230], 1
mov qword [rsp + 0x238], 0
movdqa xmm0, xmmword [0x1400445f0]
movdqu xmmword [rsp + 0x240], xmm0
mov word [rsp + 0x250], 0x213
movabs rax, 0x4c0000004c00
mov qword [rsp + 0x258], rax
mov dword [rsp + 0x260], 0x1300
lea r13, [rsp + 0x680]
mov rcx, r13
mov edx, 1
mov r8d, 0x4c00
call fcn.140006310
lea r14, [rsp + 0x200]
mov rcx, r14
mov rdx, r13
call fcn.1400040c0
mov rsi, qword [rsp + 0x680]
mov r15, qword [rsp + 0x688]
mov rcx, r14
mov rdx, rsi
mov r8, r15
call fcn.140004ae0
lea rcx, [rsp + 0xd0]
mov rdx, r14
mov r8, rsi
mov r9, r15
call fcn.1400061a0
test r15, r15
je 0x140019b9b
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
movabs rax, 0x8000000000000000
mov r8, qword [rsp + 0xd0]
cmp r8, rax
je 0x14001c77e
movzx eax, byte [rsp + 0xd8]
movzx ecx, byte [rsp + 0xdf]
shl ecx, 0x10
movzx edx, word [rsp + 0xdd]
or edx, ecx
shl rdx, 0x20
mov r15d, dword [rsp + 0xd9]
or r15, rdx
shl r15, 8
or r15, rax
cmp qword [rsp + 0xe0], 0x20
jne 0x140019f69
mov qword [rsp + 0x558], r8
movzx eax, byte [r15]
mov byte [rsp + 0x64], al
movzx eax, byte [r15 + 1]
mov byte [rsp + 0x85], al
movzx eax, byte [r15 + 2]
mov byte [rsp + 0x74], al
movzx eax, byte [r15 + 3]
mov byte [rsp + 0x84], al
movzx eax, byte [r15 + 4]
mov byte [rsp + 0x60], al
movzx eax, byte [r15 + 5]
mov byte [rsp + 0x83], al
movzx eax, byte [r15 + 6]
mov byte [rsp + 0x72], al
movzx eax, byte [r15 + 7]
mov byte [rsp + 0x82], al
movzx eax, byte [r15 + 8]
mov byte [rsp + 0x5c], al
movzx eax, byte [r15 + 9]
mov byte [rsp + 0x81], al
movzx eax, byte [r15 + 0xa]
mov byte [rsp + 0x70], al
movzx eax, byte [r15 + 0xb]
mov byte [rsp + 0x80], al
movzx eax, byte [r15 + 0xc]
mov byte [rsp + 0x58], al
movzx eax, byte [r15 + 0xd]
mov byte [rsp + 0x7f], al
movzx eax, byte [r15 + 0xe]
mov byte [rsp + 0x6e], al
movzx eax, byte [r15 + 0xf]
mov byte [rsp + 0x7e], al
movzx eax, byte [r15 + 0x10]
mov byte [rsp + 0x54], al
movzx eax, byte [r15 + 0x11]
mov byte [rsp + 0x7d], al
movzx eax, byte [r15 + 0x12]
mov byte [rsp + 0x6c], al
movzx eax, byte [r15 + 0x13]
mov byte [rsp + 0x7c], al
movzx eax, byte [r15 + 0x14]
mov byte [rsp + 0x50], al
movzx eax, byte [r15 + 0x15]
mov byte [rsp + 0x7b], al
movzx eax, byte [r15 + 0x16]
mov byte [rsp + 0x6a], al
movzx eax, byte [r15 + 0x17]
mov byte [rsp + 0x7a], al
movzx eax, byte [r15 + 0x18]
mov byte [rsp + 0x4c], al
movzx eax, byte [r15 + 0x19]
mov byte [rsp + 0x79], al
movzx eax, byte [r15 + 0x1a]
mov byte [rsp + 0x68], al
movzx eax, byte [r15 + 0x1b]
mov byte [rsp + 0x78], al
movzx eax, byte [r15 + 0x1c]
mov byte [rsp + 0x48], al
movzx eax, byte [r15 + 0x1d]
mov byte [rsp + 0x77], al
movzx eax, byte [r15 + 0x1e]
mov byte [rsp + 0x66], al
movzx eax, byte [r15 + 0x1f]
mov byte [rsp + 0x76], al
movzx eax, byte [0x14009b108]
mov edx, 0x4ac10
xor ecx, ecx
call fcn.14002a8d0
test rax, rax
mov qword [rsp + 0xc8], r15
je 0x14001c7e2
lea rdx, [0x14004ab20]
mov r8d, 0x4ac10
mov qword [rsp + 0x550], rax
mov rcx, rax
call sub.msvcrt.dll_memcpy
movzx edx, byte [rsp + 0x64]
movzx eax, byte [rsp + 0x85]
mov byte [rsp + 0x158], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x9e], al
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x198], al
movzx eax, byte [rsp + 0x60]
mov byte [rsp + 0x190], al
movzx eax, byte [rsp + 0x83]
mov byte [rsp + 0x1f0], al
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x1e8], al
movzx eax, byte [rsp + 0x82]
mov byte [rsp + 0x9f], al
movzx eax, byte [rsp + 0x5c]
mov byte [rsp + 0x9d], al
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0x9c], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x9b], al
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x9a], al
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x99], al
movzx eax, byte [rsp + 0x7f]
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x97], al
movzx eax, byte [rsp + 0x7e]
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x54]
mov byte [rsp + 0x95], al
movzx eax, byte [rsp + 0x7d]
mov byte [rsp + 0x94], al
movzx ebx, byte [rsp + 0x6c]
movzx edi, byte [rsp + 0x7c]
movzx r12d, byte [rsp + 0x50]
movzx ecx, byte [rsp + 0x7b]
movzx r8d, byte [rsp + 0x6a]
movzx r9d, byte [rsp + 0x7a]
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x93], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x1f8], al
movzx r15d, byte [rsp + 0x79]
movzx r13d, byte [rsp + 0x4c]
movzx r10d, byte [rsp + 0x48]
movzx r11d, byte [rsp + 0x77]
movzx esi, byte [rsp + 0x66]
movzx r14d, byte [rsp + 0x76]
movzx eax, byte [section..data]
cmp al, 0xff
movzx eax, byte [rsp + 0x158]
jne 0x14001a01f
mov byte [rsp + 0x86], r13b
mov byte [rsp + 0x87], r15b
mov byte [rsp + 0x88], r14b
mov byte [rsp + 0x89], sil
mov byte [rsp + 0x8a], r11b
mov byte [rsp + 0x8b], r10b
mov byte [rsp + 0x8c], r9b
mov byte [rsp + 0x8d], r8b
mov byte [rsp + 0x8e], cl
mov byte [rsp + 0x8f], r12b
mov byte [rsp + 0x90], dil
mov byte [rsp + 0x91], bl
mov byte [rsp + 0x92], dl
lea rcx, [rsp + 0x680]
call fcn.140009170
lea rcx, [rsp + 0x200]
call fcn.1400091a0
mov r15d, dword [rsp + 0x688]
mov eax, r15d
not eax
test eax, 0xc000000
jne 0x140019f87
call fcn.140013660
not eax
test al, 6
sete al
jmp 0x140019f89
test r8, r8
je 0x14001c77e
mov dil, 0x14
xor r12d, r12d
movabs rsi, 0x8000000000000000
jmp 0x14001bca2
xor eax, eax
mov ecx, dword [rsp + 0x204]
and ecx, 0x20
shr ecx, 5
shr r15d, 0x1c
and r15b, al
and r15b, cl
mov byte [section..data], r15b
movzx edx, byte [rsp + 0x92]
movzx eax, byte [rsp + 0x158]
movzx ebx, byte [rsp + 0x91]
movzx edi, byte [rsp + 0x90]
movzx r12d, byte [rsp + 0x8f]
movzx ecx, byte [rsp + 0x8e]
movzx r8d, byte [rsp + 0x8d]
movzx r9d, byte [rsp + 0x8c]
movzx r10d, byte [rsp + 0x8b]
movzx r11d, byte [rsp + 0x8a]
movzx esi, byte [rsp + 0x89]
movzx r14d, byte [rsp + 0x88]
movzx r15d, byte [rsp + 0x87]
movzx r13d, byte [rsp + 0x86]
movups xmm0, xmmword [str.expand_32_byte_kntdll.dllNtAllocateVirtualMemoryNtProtectVirtualMemorydisplayName_u]
movaps xmmword [rsp + 0xd0], xmm0
mov byte [rsp + 0xe0], dl
mov byte [rsp + 0xe1], al
movzx eax, byte [rsp + 0x9e]
mov byte [rsp + 0xe2], al
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0xe3], al
movzx eax, byte [rsp + 0x190]
mov byte [rsp + 0xe4], al
movzx eax, byte [rsp + 0x1f0]
mov byte [rsp + 0xe5], al
movzx eax, byte [rsp + 0x1e8]
mov byte [rsp + 0xe6], al
movzx eax, byte [rsp + 0x9f]
mov byte [rsp + 0xe7], al
movzx eax, byte [rsp + 0x9d]
mov byte [rsp + 0xe8], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0xe9], al
movzx eax, byte [rsp + 0x9b]
mov byte [rsp + 0xea], al
movzx eax, byte [rsp + 0x9a]
mov byte [rsp + 0xeb], al
movzx eax, byte [rsp + 0x99]
mov byte [rsp + 0xec], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0xed], al
movzx eax, byte [rsp + 0x97]
mov byte [rsp + 0xee], al
movzx eax, byte [rsp + 0x96]
mov byte [rsp + 0xef], al
movzx eax, byte [rsp + 0x95]
mov byte [rsp + 0xf0], al
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0xf1], al
mov byte [rsp + 0xf2], bl
mov byte [rsp + 0xf3], dil
mov byte [rsp + 0xf4], r12b
mov byte [rsp + 0xf5], cl
mov byte [rsp + 0xf6], r8b
mov byte [rsp + 0xf7], r9b
mov byte [rsp + 0xf8], r13b
mov byte [rsp + 0xf9], r15b
movzx eax, byte [rsp + 0x1f8]
mov byte [rsp + 0xfa], al
movzx eax, byte [rsp + 0x93]
mov byte [rsp + 0xfb], al
mov byte [rsp + 0xfc], r10b
mov byte [rsp + 0xfd], r11b
mov byte [rsp + 0xfe], sil
mov byte [rsp + 0xff], r14b
movdqa xmm0, xmmword [0x140044600]
movdqa xmmword [rsp + 0x100], xmm0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
movdqa xmmword [rsp + 0x130], xmm0
movdqa xmmword [rsp + 0x120], xmm0
movdqa xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x150], 0
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmmword [rsp + 0xa0], xmm0
cmp dword [rsp + 0x100], 0xffffffff
je 0x14001c7e2
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], 0
movzx eax, byte [section..data]
cmp al, 1
mov rdi, qword [rsp + 0x550]
mov r15, qword [rsp + 0xc8]
jne 0x14001a25d
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0x200]
call fcn.1400129e0
movzx eax, byte [section..data]
cmp al, 1
jne 0x14001a282
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xd0]
call fcn.1400134a0
jmp 0x14001a410
movdqa xmm4, xmmword [rsp + 0xd0]
movdqa xmm2, xmmword [rsp + 0xe0]
movdqa xmm1, xmmword [rsp + 0xf0]
movdqa xmm0, xmmword [rsp + 0x100]
mov eax, 0xa
movdqa xmm6, xmm4
movdqa xmm3, xmm2
movdqa xmm5, xmm0
movdqa xmm7, xmm1
nop dword [rax + rax]
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x10
pslld xmm5, 0x10
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x14
pslld xmm3, 0xc
por xmm3, xmm8
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x18
pslld xmm5, 8
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x19
pslld xmm3, 7
por xmm3, xmm8
pshufd xmm7, xmm7, 0x39
pshufd xmm5, xmm5, 0x4e
pshufd xmm6, xmm6, 0x93
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x10
pslld xmm5, 0x10
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x14
pslld xmm3, 0xc
por xmm3, xmm8
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x18
pslld xmm5, 8
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x19
pslld xmm3, 7
por xmm3, xmm8
pshufd xmm7, xmm7, 0x93
pshufd xmm5, xmm5, 0x4e
pshufd xmm6, xmm6, 0x39
dec rax
jne 0x14001a2c0
paddd xmm6, xmm4
paddd xmm3, xmm2
paddd xmm7, xmm1
paddd xmm5, xmm0
movdqa xmmword [rsp + 0x110], xmm6
movdqa xmmword [rsp + 0x120], xmm3
movdqa xmmword [rsp + 0x130], xmm7
movdqa xmmword [rsp + 0x140], xmm5
movd eax, xmm0
inc eax
mov dword [rsp + 0x100], eax
movaps xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0xa0]
movaps xmm1, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0xb0], xmm1
mov byte [rsp + 0x150], 0x20
movzx eax, byte [0x140043001]
cmp al, 0xff
je 0x14001ac09
cmp al, 1
jne 0x14001ac68
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0xa0]
call fcn.14001f180
movaps xmm6, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm0, xmmword [rsp + 0x220]
movaps xmm1, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x5c0], xmm0
movaps xmmword [rsp + 0x5d0], xmm1
movaps xmm0, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x5e0], xmm0
movaps xmm0, xmmword [rsp + 0x250]
movaps xmmword [rsp + 0x5f0], xmm0
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x5c0]
mov r8, rdx
call fcn.14001f2d0
movaps xmm10, xmmword [rsp + 0x200]
movaps xmm11, xmmword [rsp + 0x210]
movaps xmm8, xmmword [rsp + 0x220]
movaps xmm9, xmmword [rsp + 0x230]
mov qword [rsp + 0x20], 0x3ffffff
lea r12, [rsp + 0x620]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r12
mov rdx, 0xffffffffffffffff
call fcn.14001f930
movaps xmmword [rsp + 0x610], xmm11
movaps xmmword [rsp + 0x600], xmm10
lea rsi, [rsp + 0x4e0]
lea rdx, [rsp + 0x600]
mov rcx, rsi
mov r8, r12
call fcn.14001fc80
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x660]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r12
call fcn.14001f930
movaps xmmword [rsp + 0x650], xmm11
movaps xmmword [rsp + 0x640], xmm10
lea r13, [rsp + 0x8c0]
lea rdx, [rsp + 0x640]
mov rcx, r13
mov r8, r12
call fcn.14001fca0
lea r12, [rsp + 0x580]
mov rcx, r12
mov rdx, r13
call fcn.14001fcc0
lea rcx, [rsp + 0x680]
mov rdx, rsi
mov r8, r12
call fcn.14001f9a0
movaps xmm10, xmmword [rsp + 0x680]
movaps xmm11, xmmword [rsp + 0x690]
movaps xmmword [rsp + 0x510], xmm11
movaps xmmword [rsp + 0x500], xmm10
lea rsi, [rsp + 0x520]
lea rdx, [rsp + 0x500]
mov rcx, rsi
call fcn.14001fcd0
lea r12, [rsp + 0x160]
mov rcx, r12
mov rdx, rsi
call fcn.14001fcc0
movaps xmmword [rsp + 0x570], xmm9
movaps xmmword [rsp + 0x560], xmm8
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x560]
mov r8, r12
call fcn.14001f9a0
movaps xmm8, xmmword [rsp + 0x680]
movaps xmm9, xmmword [rsp + 0x690]
mov qword [rsp + 0x20], 0xffffffffffffffff
lea r12, [rsp + 0x680]
mov edx, 0x3ffffff
mov rcx, r12
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001f930
movaps xmmword [rsp + 0x1b0], xmm11
movaps xmmword [rsp + 0x1a0], xmm10
lea rsi, [rsp + 0x5a0]
lea rdx, [rsp + 0x1a0]
mov rcx, rsi
mov r8, r12
call fcn.14001fc80
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x580]
mov edx, 0x40
mov r8d, 0x40
mov r9d, 0x40
mov rcx, r12
call fcn.14001f930
movaps xmmword [rsp + 0x4f0], xmm9
movaps xmmword [rsp + 0x4e0], xmm8
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x4e0]
mov r8, r12
call fcn.14001fca0
movaps xmm10, xmmword [rsp + 0x680]
movaps xmm11, xmmword [rsp + 0x690]
movaps xmmword [rsp + 0x510], xmm11
movaps xmmword [rsp + 0x500], xmm10
lea r12, [rsp + 0x560]
lea r8, [rsp + 0x500]
mov rcx, r12
mov rdx, rsi
call fcn.14001f9a0
movaps xmmword [rsp + 0x530], xmm11
movaps xmmword [rsp + 0x520], xmm10
lea rsi, [rsp + 0x160]
lea rdx, [rsp + 0x520]
mov rcx, rsi
call fcn.14001fcf0
lea rcx, [rsp + 0x680]
mov rdx, r12
mov r8, rsi
call fcn.14001f9a0
movaps xmm10, xmmword [rsp + 0x680]
movaps xmm11, xmmword [rsp + 0x690]
mov qword [rsp + 0x20], 0x3ffffff
lea rsi, [rsp + 0x680]
mov rcx, rsi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14001f930
movaps xmmword [rsp + 0x1b0], xmm9
movaps xmmword [rsp + 0x1a0], xmm8
lea r12, [rsp + 0x8c0]
lea rdx, [rsp + 0x1a0]
mov rcx, r12
mov r8, rsi
call fcn.14001fc80
mov qword [rsp + 0x20], 0x3ffffff
lea r13, [rsp + 0x640]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r13
mov rdx, 0xffffffffffffffff
call fcn.14001f930
movaps xmmword [rsp + 0x630], xmm11
movaps xmmword [rsp + 0x620], xmm10
lea rsi, [rsp + 0x5a0]
lea rdx, [rsp + 0x620]
mov rcx, rsi
mov r8, r13
call fcn.14001fc80
mov qword [rsp + 0x20], 0x1a
lea r13, [rsp + 0x4e0]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r13
call fcn.14001f930
movaps xmmword [rsp + 0x670], xmm11
movaps xmmword [rsp + 0x660], xmm10
lea rbx, [rsp + 0x580]
lea rdx, [rsp + 0x660]
mov rcx, rbx
mov r8, r13
call fcn.14001fca0
lea r13, [rsp + 0x500]
mov rcx, r13
mov rdx, rbx
call fcn.14001fcc0
lea rcx, [rsp + 0x680]
mov rdx, rsi
mov r8, r13
call fcn.14001f9a0
movaps xmm8, xmmword [rsp + 0x680]
movaps xmm9, xmmword [rsp + 0x690]
movaps xmmword [rsp + 0x530], xmm9
movaps xmmword [rsp + 0x520], xmm8
lea rsi, [rsp + 0x560]
lea rdx, [rsp + 0x520]
mov rcx, rsi
call fcn.14001fcd0
lea rbx, [rsp + 0x160]
mov rcx, rbx
mov rdx, rsi
call fcn.14001fcc0
lea rsi, [rsp + 0x600]
mov rcx, rsi
mov rdx, r12
mov r8, rbx
call fcn.14001f9a0
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rbx, [rsp + 0x680]
mov edx, 0x3ffffff
mov rcx, rbx
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001f930
movaps xmmword [rsp + 0x1b0], xmm9
movaps xmmword [rsp + 0x1a0], xmm8
lea r12, [rsp + 0x8e0]
lea rdx, [rsp + 0x1a0]
mov rcx, r12
mov r8, rbx
call fcn.14001fc80
lea rbx, [rsp + 0x560]
mov rcx, rbx
call fcn.14001fd10
lea r13, [rsp + 0x1a0]
mov rcx, r13
mov rdx, r12
mov r8, rbx
call fcn.14001f280
lea rbx, [rsp + 0x160]
mov rcx, rbx
call fcn.14001fd10
lea r12, [rsp + 0x680]
mov rcx, r12
mov rdx, rsi
mov r8, rbx
call fcn.14001f280
lea rcx, [rsp + 0x4e0]
mov rdx, r13
mov r8, r12
call fcn.14001fd20
lea rsi, [rsp + 0x3a0]
movdqa xmm8, xmmword [rsp + 0x4e0]
movdqa xmm9, xmmword [rsp + 0x4f0]
movdqa xmmword [rsp + 0x590], xmm9
movdqa xmmword [rsp + 0x580], xmm8
lea rbx, [rsp + 0x500]
lea rdx, [rsp + 0x580]
mov rcx, rbx
call fcn.14001f220
movdqa xmmword [rsp + 0x5b0], xmm9
movdqa xmmword [rsp + 0x5a0], xmm8
lea r12, [rsp + 0x520]
lea rdx, [rsp + 0x5a0]
mov rcx, r12
mov r8, rbx
call fcn.14001f200
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea rbx, [rsp + 0x560]
mov rcx, rbx
mov edx, 4
mov r8d, 3
mov r9d, 2
call fcn.14001f240
lea rcx, [rsp + 0x680]
mov rdx, r12
mov r8, rbx
call fcn.14001f280
movdqa xmm10, xmmword [rsp + 0x680]
movaps xmm11, xmmword [rsp + 0x690]
movdqa xmmword [rsp + 0x170], xmm9
movdqa xmmword [rsp + 0x160], xmm8
movaps xmmword [rsp + 0x1b0], xmm11
movdqa xmmword [rsp + 0x1a0], xmm10
lea rdx, [rsp + 0x160]
lea r8, [rsp + 0x1a0]
mov rcx, rsi
call fcn.14001f2a0
movaps xmmword [rsp + 0x690], xmm11
movdqa xmmword [rsp + 0x680], xmm10
lea rcx, [rsp + 0x3c0]
lea rdx, [rsp + 0x680]
call fcn.14001f2c0
movaps xmmword [rsp + 0x350], xmm7
movaps xmmword [rsp + 0x340], xmm6
movaps xmm0, xmmword [rsp + 0x5c0]
movaps xmm1, xmmword [rsp + 0x5d0]
movdqa xmm2, xmmword [rsp + 0x5e0]
movdqa xmm3, xmmword [rsp + 0x5f0]
movaps xmmword [rsp + 0x360], xmm0
movaps xmmword [rsp + 0x370], xmm1
movdqa xmmword [rsp + 0x380], xmm2
movdqa xmmword [rsp + 0x390], xmm3
mov byte [rsp + 0x200], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x3e0], xmm0
movaps xmmword [rsp + 0x3f0], xmm0
movaps xmmword [rsp + 0x400], xmm0
movaps xmmword [rsp + 0x410], xmm0
movups xmmword [rsp + 0x419], xmm0
movdqa xmm7, xmmword [rsp + 0x200]
movaps xmm6, xmmword [rsp + 0x210]
mov esi, dword [rsp + 0x220]
movdqu xmm0, xmmword [rsp + 0x224]
movdqa xmmword [rsp + 0x1a0], xmm0
mov eax, dword [rsp + 0x234]
mov dword [rsp + 0x1b0], eax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x680]
mov r8d, 0x208
call sub.msvcrt.dll_memcpy
jmp 0x14001acd9
lea rcx, [rsp + 0x680]
call fcn.140009170
lea rcx, [rsp + 0x200]
call fcn.1400091a0
mov esi, dword [rsp + 0x688]
mov eax, esi
not eax
test eax, 0xc000000
jne 0x14001ac43
call fcn.140013660
not eax
test al, 6
sete al
jmp 0x14001ac45
xor eax, eax
mov ecx, dword [rsp + 0x204]
and ecx, 0x20
shr ecx, 5
shr esi, 0x1c
and sil, al
and sil, cl
mov byte [0x140043001], sil
jne 0x14001a45f
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1a0], xmm0
mov dword [rsp + 0x1b0], 0
mov eax, dword [rsp + 0xa3]
shr eax, 2
mov ecx, dword [rsp + 0xa6]
shr ecx, 4
mov edx, dword [rsp + 0xa9]
shr edx, 6
movd xmm6, eax
punpcklqdq xmm6, xmmword [rsp + 0xa0]
movd xmm0, ecx
movd xmm1, edx
punpcklqdq xmm1, xmm0
shufps xmm6, xmm1, 0x22
andps xmm6, xmmword [0x140044610]
mov esi, dword [rsp + 0xac]
shr esi, 8
and esi, 0xfffff
movdqa xmm7, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0x200], xmm7
movaps xmmword [rsp + 0x210], xmm6
mov dword [rsp + 0x220], esi
movdqa xmm0, xmmword [rsp + 0x1a0]
movdqu xmmword [rsp + 0x224], xmm0
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x234], eax
lea rcx, [rsp + 0x238]
lea rdx, [rsp + 0x680]
mov r8d, 0x208
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0xa0], 0
mov byte [rsp + 0xa1], 0
mov byte [rsp + 0xa2], 0
mov byte [rsp + 0xa3], 0
mov byte [rsp + 0xa4], 0
mov byte [rsp + 0xa5], 0
mov byte [rsp + 0xa6], 0
mov byte [rsp + 0xa7], 0
mov byte [rsp + 0xa8], 0
mov byte [rsp + 0xa9], 0
mov byte [rsp + 0xaa], 0
mov byte [rsp + 0xab], 0
mov byte [rsp + 0xac], 0
mov byte [rsp + 0xad], 0
mov byte [rsp + 0xae], 0
mov byte [rsp + 0xaf], 0
mov byte [rsp + 0xb0], 0
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 0
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0xb5], 0
mov byte [rsp + 0xb6], 0
mov byte [rsp + 0xb7], 0
mov byte [rsp + 0xb8], 0
mov byte [rsp + 0xb9], 0
mov byte [rsp + 0xba], 0
mov byte [rsp + 0xbb], 0
mov byte [rsp + 0xbc], 0
mov byte [rsp + 0xbd], 0
mov byte [rsp + 0xbe], 0
mov byte [rsp + 0xbf], 0
mov dword [rsp + 0x100], 1
mov byte [rsp + 0x150], 0
lea rcx, [rsp + 0x440]
lea rdx, [rsp + 0xd0]
mov r8d, 0x84
call sub.msvcrt.dll_memcpy
movzx eax, byte [0x140043001]
movzx eax, byte [0x140043001]
cmp al, 1
jne 0x14001aedb
mov ebx, 0x4ac00
lea rsi, [rsp + 0x200]
mov r13, rdi
jmp 0x14001aeb9
mov rcx, rsi
mov rdx, r13
call fcn.14001fd40
lea rdx, [r13 + 0x10]
mov rcx, rsi
call fcn.14001fd40
lea rdx, [r13 + 0x20]
mov rcx, rsi
call fcn.14001fd40
lea rdx, [r13 + 0x30]
mov rcx, rsi
call fcn.14001fd40
add r13, 0x40
add rbx, 0xffffffffffffffc0
je 0x14001af09
cmp qword [rsp + 0x420], 0
jne 0x14001ae80
mov rcx, rsi
mov rdx, r13
call fcn.140020f90
add r13, 0x40
add rbx, 0xffffffffffffffc0
jne 0x14001aeb9
jmp 0x14001af09
xor ebx, ebx
lea rsi, [rsp + 0x200]
nop word cs:[rax + rax]
lea rdx, [rdi + rbx]
add rbx, 0x10
mov rcx, rsi
call fcn.140021550
cmp rbx, 0x4ac00
jne 0x14001aef0
mov qword [rsp + 0x680], 0
mov qword [rsp + 0x688], 0x4ac00
movzx eax, byte [0x140043001]
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x680]
cmp al, 1
jne 0x14001af43
call fcn.14001fd40
jmp 0x14001af48
call fcn.140021550
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x200]
mov r8d, 0x240
call sub.msvcrt.dll_memcpy
movzx eax, byte [0x140043001]
cmp al, 1
jne 0x14001af88
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0x680]
call fcn.140020340
jmp 0x14001b0f2
mov r11d, dword [rsp + 0x6a8]
mov eax, r11d
shr eax, 0x1a
and r11d, 0x3ffffff
add eax, dword [rsp + 0x6ac]
mov ecx, eax
shr ecx, 0x1a
and eax, 0x3ffffff
add ecx, dword [rsp + 0x6b0]
mov r8d, ecx
shr r8d, 0x1a
and ecx, 0x3ffffff
add r8d, dword [rsp + 0x6b4]
mov r9d, r8d
shr r9d, 0x1a
mov r14d, r8d
and r14d, 0x3ffffff
lea r10d, [r9 + r9*4]
add r10d, dword [rsp + 0x6a4]
mov r9d, r10d
shr r9d, 0x1a
add r9d, r11d
and r10d, 0x3ffffff
lea ebx, [r10 + 5]
mov r11d, ebx
shr r11d, 0x1a
add r11d, r9d
mov esi, r11d
shr esi, 0x1a
add esi, eax
mov r12d, esi
shr r12d, 0x1a
add r12d, ecx
mov r13d, r12d
shr r13d, 0x1a
lea edx, [r14 + r13]
add edx, 0xfc000000
add r13d, r14d
mov r14d, edx
sar r14d, 0x1f
shr edx, 0x1f
dec edx
mov r15d, edx
and r15d, 0x3ffffff
and ebx, r15d
and r11d, r15d
and esi, r15d
and r15d, r12d
and edx, r13d
and r10d, r14d
or r10d, ebx
and r9d, r14d
or r9d, r11d
and eax, r14d
or eax, esi
and ecx, r14d
or ecx, r15d
mov r15, qword [rsp + 0xc8]
and r14d, r8d
or r14d, edx
mov r8d, r9d
shl r8d, 0x1a
or r8d, r10d
shr r9d, 6
mov edx, eax
shl edx, 0x14
or edx, r9d
shr eax, 0xc
mov r9d, ecx
shl r9d, 0xe
or r9d, eax
shr ecx, 0x12
shl r14d, 8
or r14d, ecx
add r8d, dword [rsp + 0x680]
mov eax, dword [rsp + 0x684]
mov ecx, dword [rsp + 0x688]
adc rax, rdx
add rcx, r9
mov dword [rsp + 0xd0], r8d
mov dword [rsp + 0xd4], eax
shr rax, 0x20
add rax, rcx
add r14d, dword [rsp + 0x68c]
mov dword [rsp + 0xd8], eax
shr rax, 0x20
add eax, r14d
mov dword [rsp + 0xdc], eax
movzx eax, byte [rsp + 0xd0]
cmp al, byte [rdi + 0x4ac00]
sete cl
call fcn.140013650
mov esi, eax
movzx eax, byte [rsp + 0xd1]
cmp al, byte [rdi + 0x4ac01]
sete cl
call fcn.140013650
and sil, al
movzx eax, byte [rsp + 0xd2]
cmp al, byte [rdi + 0x4ac02]
sete cl
call fcn.140013650
mov r13d, eax
movzx eax, byte [rsp + 0xd3]
cmp al, byte [rdi + 0x4ac03]
sete cl
call fcn.140013650
and r13b, al
and r13b, sil
movzx eax, byte [rsp + 0xd4]
cmp al, byte [rdi + 0x4ac04]
sete cl
call fcn.140013650
mov esi, eax
movzx eax, byte [rsp + 0xd5]
cmp al, byte [rdi + 0x4ac05]
sete cl
call fcn.140013650
and sil, al
movzx eax, byte [rsp + 0xd6]
cmp al, byte [rdi + 0x4ac06]
sete cl
call fcn.140013650
and sil, al
and sil, r13b
movzx eax, byte [rsp + 0xd7]
cmp al, byte [rdi + 0x4ac07]
sete cl
call fcn.140013650
mov r13d, eax
movzx eax, byte [rsp + 0xd8]
cmp al, byte [rdi + 0x4ac08]
sete cl
call fcn.140013650
and r13b, al
movzx eax, byte [rsp + 0xd9]
cmp al, byte [rdi + 0x4ac09]
sete cl
call fcn.140013650
and r13b, al
movzx eax, byte [rsp + 0xda]
cmp al, byte [rdi + 0x4ac0a]
sete cl
call fcn.140013650
and r13b, al
and r13b, sil
movzx eax, byte [rsp + 0xdb]
cmp al, byte [rdi + 0x4ac0b]
sete cl
call fcn.140013650
mov esi, eax
movzx eax, byte [rsp + 0xdc]
cmp al, byte [rdi + 0x4ac0c]
sete cl
call fcn.140013650
and sil, al
movzx eax, byte [rsp + 0xdd]
cmp al, byte [rdi + 0x4ac0d]
sete cl
call fcn.140013650
and sil, al
movzx eax, byte [rsp + 0xde]
cmp al, byte [rdi + 0x4ac0e]
sete cl
call fcn.140013650
and sil, al
movzx eax, byte [rsp + 0xdf]
cmp al, byte [rdi + 0x4ac0f]
sete cl
call fcn.140013650
and sil, al
and sil, r13b
and sil, 1
mov ecx, esi
call fcn.140013650
mov r13d, eax
test al, al
je 0x14001b8e6
mov eax, dword [rsp + 0x470]
not eax
movzx esi, byte [rsp + 0x4c0]
test rsi, rsi
je 0x14001b2c0
lea rcx, [rsi + 0x4abc0]
jmp 0x14001b2c5
mov ecx, 0x4ac00
mov edx, ecx
and edx, 0x3f
shr ecx, 6
cmp rdx, 1
sbb rcx, 0xffffffffffffffff
cmp rcx, rax
ja 0x14001c7e2
test rsi, rsi
je 0x14001b300
mov r15d, 0x40
sub r15, rsi
lea rax, [rsp + rsi]
add rax, 0x480
cmp sil, 0x38
jbe 0x14001b30a
xor ecx, ecx
jmp 0x14001b340
mov esi, 0x4ac00
mov r15, rdi
jmp 0x14001b35d
mov ecx, r15d
and ecx, 0x78
xor edx, edx
nop word cs:[rax + rax]
mov r8, qword [rax + rdx]
xor qword [rdi + rdx], r8
add rdx, 8
cmp rcx, rdx
jne 0x14001b320
cmp r15, rcx
je 0x14001b353
nop word cs:[rax + rax]
movzx edx, byte [rax + rcx]
xor byte [rdi + rcx], dl
lea rdx, [rcx + 1]
mov rcx, rdx
cmp r15, rdx
jne 0x14001b340
add r15, rdi
or rsi, 0x4abc0
mov eax, esi
shr eax, 6
mov ebx, esi
and ebx, 0x3f
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], rax
movzx ecx, byte [section..data]
cmp cl, 1
jne 0x14001b3ae
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x440]
call fcn.1400129e0
test rbx, rbx
jne 0x14001b64a
jmp 0x14001b8d7
movdqa xmm0, xmmword [rsp + 0x440]
movdqa xmm1, xmmword [rsp + 0x450]
movdqa xmm3, xmmword [rsp + 0x460]
movdqa xmm2, xmmword [rsp + 0x470]
xor ecx, ecx
pxor xmm4, xmm4
movdqa xmm5, xmmword [0x140044620]
mov edx, 0xa
movdqa xmm8, xmm0
movdqa xmm6, xmm1
movdqa xmm7, xmm2
movdqa xmm9, xmm3
nop word [rax + rax]
paddd xmm8, xmm6
pxor xmm7, xmm8
movdqa xmm10, xmm7
psrld xmm10, 0x10
pslld xmm7, 0x10
por xmm7, xmm10
paddd xmm9, xmm7
pxor xmm6, xmm9
movdqa xmm10, xmm6
psrld xmm10, 0x14
pslld xmm6, 0xc
por xmm6, xmm10
paddd xmm8, xmm6
pxor xmm7, xmm8
movdqa xmm10, xmm7
psrld xmm10, 0x18
pslld xmm7, 8
por xmm7, xmm10
paddd xmm9, xmm7
pxor xmm6, xmm9
movdqa xmm10, xmm6
psrld xmm10, 0x19
pslld xmm6, 7
por xmm6, xmm10
pshufd xmm9, xmm9, 0x39
pshufd xmm7, xmm7, 0x4e
pshufd xmm8, xmm8, 0x93
paddd xmm8, xmm6
pxor xmm7, xmm8
movdqa xmm10, xmm7
psrld xmm10, 0x10
pslld xmm7, 0x10
por xmm7, xmm10
paddd xmm9, xmm7
pxor xmm6, xmm9
movdqa xmm10, xmm6
psrld xmm10, 0x14
pslld xmm6, 0xc
por xmm6, xmm10
paddd xmm8, xmm6
pxor xmm7, xmm8
movdqa xmm10, xmm7
psrld xmm10, 0x18
pslld xmm7, 8
por xmm7, xmm10
paddd xmm9, xmm7
pxor xmm6, xmm9
movdqa xmm10, xmm6
psrld xmm10, 0x19
pslld xmm6, 7
por xmm6, xmm10
pshufd xmm9, xmm9, 0x93
pshufd xmm7, xmm7, 0x4e
pshufd xmm8, xmm8, 0x39
dec rdx
jne 0x14001b400
mov rdx, rcx
shl rdx, 6
paddd xmm8, xmm0
paddd xmm6, xmm1
paddd xmm9, xmm3
paddd xmm7, xmm2
movdqa xmmword [rsp + 0x1a0], xmm8
movdqa xmmword [rsp + 0x1b0], xmm6
movdqa xmmword [rsp + 0x1c0], xmm9
movdqa xmmword [rsp + 0x1d0], xmm7
movups xmm6, xmmword [r15 + rdx]
movdqu xmm7, xmmword [r15 + rdx + 0x10]
movdqu xmm8, xmmword [r15 + rdx + 0x20]
movups xmm9, xmmword [r15 + rdx + 0x30]
movaps xmmword [rsp + 0x100], xmm9
movdqa xmmword [rsp + 0xf0], xmm8
movdqa xmmword [rsp + 0xe0], xmm7
movaps xmmword [rsp + 0xd0], xmm6
movdqa xmmword [rsp + 0x690], xmm4
movdqa xmmword [rsp + 0x6a0], xmm4
movdqa xmmword [rsp + 0x6b0], xmm4
xorps xmm6, xmmword [rsp + 0x1a0]
pxor xmm7, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0x680], xmm6
movdqa xmmword [rsp + 0x690], xmm7
pxor xmm8, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x6a0], xmm8
movdqa xmm9, xmmword [rsp + 0x1d0]
pxor xmm9, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x6b0], xmm9
inc rcx
paddd xmm2, xmm5
movdqu xmmword [r15 + rdx + 0x30], xmm9
movdqu xmmword [r15 + rdx + 0x20], xmm8
movdqu xmmword [r15 + rdx + 0x10], xmm7
movups xmmword [r15 + rdx], xmm6
cmp rax, rcx
jne 0x14001b3e0
movd dword [rsp + 0x470], xmm2
test rbx, rbx
je 0x14001b8d7
mov r12d, esi
and r12d, 0xffffffc0
movzx eax, byte [section..data]
cmp al, 1
jne 0x14001b68e
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x440]
call fcn.1400134a0
lea rax, [r15 + r12]
cmp ebx, 8
jb 0x14001b82d
cmp ebx, 0x20
jae 0x14001b834
xor ecx, ecx
jmp 0x14001b891
movdqa xmm4, xmmword [rsp + 0x440]
movdqa xmm2, xmmword [rsp + 0x450]
movdqa xmm1, xmmword [rsp + 0x460]
movdqa xmm0, xmmword [rsp + 0x470]
mov eax, 0xa
movdqa xmm6, xmm4
movdqa xmm3, xmm2
movdqa xmm5, xmm0
movdqa xmm7, xmm1
nop word [rax + rax]
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x10
pslld xmm5, 0x10
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x14
pslld xmm3, 0xc
por xmm3, xmm8
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x18
pslld xmm5, 8
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x19
pslld xmm3, 7
por xmm3, xmm8
pshufd xmm7, xmm7, 0x39
pshufd xmm5, xmm5, 0x4e
pshufd xmm6, xmm6, 0x93
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x10
pslld xmm5, 0x10
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x14
pslld xmm3, 0xc
por xmm3, xmm8
paddd xmm6, xmm3
pxor xmm5, xmm6
movdqa xmm8, xmm5
psrld xmm8, 0x18
pslld xmm5, 8
por xmm5, xmm8
paddd xmm7, xmm5
pxor xmm3, xmm7
movdqa xmm8, xmm3
psrld xmm8, 0x19
pslld xmm3, 7
por xmm3, xmm8
pshufd xmm7, xmm7, 0x93
pshufd xmm5, xmm5, 0x4e
pshufd xmm6, xmm6, 0x39
dec rax
jne 0x14001b6d0
paddd xmm6, xmm4
paddd xmm3, xmm2
paddd xmm7, xmm1
paddd xmm5, xmm0
movdqa xmmword [rsp + 0x480], xmm6
movdqa xmmword [rsp + 0x490], xmm3
movdqa xmmword [rsp + 0x4a0], xmm7
movdqa xmmword [rsp + 0x4b0], xmm5
movd eax, xmm0
inc eax
mov dword [rsp + 0x470], eax
lea rax, [r15 + r12]
cmp ebx, 8
jae 0x14001b67e
xor ecx, ecx
jmp 0x14001b8c0
mov edx, esi
and edx, 0x1f
mov rcx, rbx
sub rcx, rdx
lea r8, [r12 + r15]
add r8, 0x10
xor r9d, r9d
nop word [rax + rax]
movdqu xmm0, xmmword [r8 + r9 - 0x10]
movdqu xmm1, xmmword [r8 + r9]
pxor xmm0, xmmword [rsp + r9 + 0x480]
pxor xmm1, xmmword [rsp + r9 + 0x490]
movdqu xmmword [r8 + r9 - 0x10], xmm0
movdqu xmmword [r8 + r9], xmm1
add r9, 0x20
cmp rcx, r9
jne 0x14001b850
test rdx, rdx
je 0x14001b8d7
cmp edx, 8
jb 0x14001b8c0
mov rdx, rcx
and esi, 7
mov rcx, rbx
sub rcx, rsi
nop dword [rax]
mov r8, qword [rsp + rdx + 0x480]
xor qword [rax + rdx], r8
add rdx, 8
cmp rcx, rdx
jne 0x14001b8a0
test rsi, rsi
je 0x14001b8d7
nop word [rax + rax]
movzx edx, byte [rsp + rcx + 0x480]
xor byte [rax + rcx], dl
lea rdx, [rcx + 1]
mov rcx, rdx
cmp rbx, rdx
jne 0x14001b8c0
mov byte [rsp + 0x4c0], bl
mov r15, qword [rsp + 0xc8]
mov byte [rsp + 0x480], 0
mov byte [rsp + 0x481], 0
mov byte [rsp + 0x482], 0
mov byte [rsp + 0x483], 0
mov byte [rsp + 0x484], 0
mov byte [rsp + 0x485], 0
mov byte [rsp + 0x486], 0
mov byte [rsp + 0x487], 0
mov byte [rsp + 0x488], 0
mov byte [rsp + 0x489], 0
mov byte [rsp + 0x48a], 0
mov byte [rsp + 0x48b], 0
mov byte [rsp + 0x48c], 0
mov byte [rsp + 0x48d], 0
mov byte [rsp + 0x48e], 0
mov byte [rsp + 0x48f], 0
mov byte [rsp + 0x490], 0
mov byte [rsp + 0x491], 0
mov byte [rsp + 0x492], 0
mov byte [rsp + 0x493], 0
mov byte [rsp + 0x494], 0
mov byte [rsp + 0x495], 0
mov byte [rsp + 0x496], 0
mov byte [rsp + 0x497], 0
mov byte [rsp + 0x498], 0
mov byte [rsp + 0x499], 0
mov byte [rsp + 0x49a], 0
mov byte [rsp + 0x49b], 0
mov byte [rsp + 0x49c], 0
mov byte [rsp + 0x49d], 0
mov byte [rsp + 0x49e], 0
mov byte [rsp + 0x49f], 0
mov byte [rsp + 0x4a0], 0
mov byte [rsp + 0x4a1], 0
mov byte [rsp + 0x4a2], 0
mov byte [rsp + 0x4a3], 0
mov byte [rsp + 0x4a4], 0
mov byte [rsp + 0x4a5], 0
mov byte [rsp + 0x4a6], 0
mov byte [rsp + 0x4a7], 0
mov byte [rsp + 0x4a8], 0
mov byte [rsp + 0x4a9], 0
mov byte [rsp + 0x4aa], 0
mov byte [rsp + 0x4ab], 0
mov byte [rsp + 0x4ac], 0
mov byte [rsp + 0x4ad], 0
mov byte [rsp + 0x4ae], 0
mov byte [rsp + 0x4af], 0
mov byte [rsp + 0x4b0], 0
mov byte [rsp + 0x4b1], 0
mov byte [rsp + 0x4b2], 0
mov byte [rsp + 0x4b3], 0
mov byte [rsp + 0x4b4], 0
mov byte [rsp + 0x4b5], 0
mov byte [rsp + 0x4b6], 0
mov byte [rsp + 0x4b7], 0
mov byte [rsp + 0x4b8], 0
mov byte [rsp + 0x4b9], 0
mov byte [rsp + 0x4ba], 0
mov byte [rsp + 0x4bb], 0
mov byte [rsp + 0x4bc], 0
mov byte [rsp + 0x4bd], 0
mov byte [rsp + 0x4be], 0
mov byte [rsp + 0x4bf], 0
mov byte [rsp + 0x4c0], 0
mov dword [rsp + 0x440], 0
mov dword [rsp + 0x444], 0
mov dword [rsp + 0x448], 0
mov dword [rsp + 0x44c], 0
mov dword [rsp + 0x450], 0
mov dword [rsp + 0x454], 0
mov dword [rsp + 0x458], 0
mov dword [rsp + 0x45c], 0
mov dword [rsp + 0x460], 0
mov dword [rsp + 0x464], 0
mov dword [rsp + 0x468], 0
mov dword [rsp + 0x46c], 0
mov dword [rsp + 0x470], 0
mov dword [rsp + 0x474], 0
mov dword [rsp + 0x478], 0
mov dword [rsp + 0x47c], 0
test r13b, r13b
je 0x14001bbb4
mov r12, rdi
and r12, 0xffffffffffffff00
mov esi, 0x4ac10
jmp 0x14001bbd5
mov rcx, qword [0x14009b0f0]
xor r12d, r12d
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov dil, 0x13
movabs rsi, 0x8000000000000000
lea rbx, [rsp + 0x1a0]
lea r13, [rsp + 0x680]
mov byte [rsp + 0x64], 0
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x60], 0
mov byte [rsp + 0x83], 0
mov byte [rsp + 0x72], 0
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x5c], 0
mov byte [rsp + 0x81], 0
mov byte [rsp + 0x70], 0
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x6e], 0
mov byte [rsp + 0x7e], 0
mov byte [rsp + 0x54], 0
mov byte [rsp + 0x7d], 0
mov byte [rsp + 0x6c], 0
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x6a], 0
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x4c], 0
mov byte [rsp + 0x79], 0
mov byte [rsp + 0x68], 0
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x66], 0
mov byte [rsp + 0x76], 0
cmp qword [rsp + 0x558], 0
je 0x14001bcb3
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x14001c77e
movzx eax, byte [0x14009b108]
mov edx, 0x4ac00
xor ecx, ecx
call fcn.14002a8d0
test rax, rax
je 0x14001c7e2
mov r14, rax
movzx eax, dil
or r12, rax
mov r8d, 0x4ac00
mov rcx, r14
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rcx, qword [0x14009b0f0]
xor esi, esi
xor edx, edx
mov r8, r12
call sub.kernel32.dll_HeapFree
lea rax, [0x140088b99]
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rax, 0x55e1f72426bb071e
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rdx, qword [rsp + 0x200]
call fcn.140017bf0
movabs rcx, 0xb60d3f2e295edbfe
xor rcx, qword [rax]
movabs rdx, 0x41c27f282cf60c9a
xor rdx, qword [rax + 8]
movabs r8, 0x614cc48acac87f5b
xor r8, qword [rax + 0x10]
mov r9d, 0xc262f4e4
xor r9d, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
mov r10d, eax
xor r10b, 0xfb
shr eax, 8
xor al, 0x69
mov qword [rsp + 0x680], rcx
mov qword [rsp + 0x688], rdx
mov qword [rsp + 0x690], r8
mov dword [rsp + 0x698], r9d
mov byte [rsp + 0x69c], r10b
mov byte [rsp + 0x69d], al
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], 0x1e
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x1a0], rax
lea rax, [0x140029e40]
mov qword [rsp + 0x1a8], rax
lea rax, [0x14004ab00]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], 2
mov qword [rsp + 0x220], 0
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], 1
lea rcx, [rsp + 0x200]
call fcn.14002a640
movzx eax, word [r14]
cmp eax, 0x5a4d
jne 0x14001bef8
movsxd rax, dword [r14 + 0x3c]
test rax, rax
je 0x14001becc
cmp eax, 0x40
jb 0x14001c7e2
cmp eax, 0x4ac00
ja 0x14001c7e2
lea rcx, [r14 + rax]
movzx edx, word [r14 + rax + 0x18]
cmp edx, 0x10b
je 0x14001bed1
mov sil, 5
cmp edx, 0x20b
jne 0x14001bef8
mov sil, 2
cmp dword [rcx], 0x4550
jne 0x14001bef8
movzx edx, word [rcx + 4]
mov sil, 3
cmp edx, 0x8664
jne 0x14001bef8
mov sil, 4
test byte [rcx + 0x16], 2
je 0x14001bef8
cmp eax, 0x4aaf9
jae 0x14001c7e2
lea r8, [rax + 0x108]
mov r9d, 1
jmp 0x14001c143
mov sil, 1
jmp 0x14001bef8
mov sil, 2
cmp dword [rcx], 0x4550
jne 0x14001bef8
movzx edx, word [rcx + 4]
mov sil, 3
cmp edx, 0x14c
jne 0x14001bef8
mov sil, 4
test byte [rcx + 0x16], 2
jne 0x14001c12e
mov byte [rsp + 0x200], sil
mov edx, 2
mov eax, 0x18
mov qword [rsp + rax + 0x200], rdx
mov rax, qword [rsp + 0x218]
cmp rax, 2
je 0x14001c726
test rax, rax
je 0x14001c726
mov r12, qword [rsp + 0x220]
test byte [r12 + 0x17], 0x20
jne 0x14001c726
mov rsi, qword [rsp + 0x228]
mov rcx, qword [rsp + 0x230]
mov rdi, qword [rsp + 0x248]
cmp dword [r12 + 0xfc], 0
je 0x14001bf73
cmp dword [r12 + 0xf8], 0
jne 0x14001c726
mov eax, dword [r12 + 0x28]
test rax, rax
je 0x14001c726
mov qword [rsp + 0x198], rcx
mov qword [rsp + 0x1f0], rax
mov rax, qword [r12 + 0x30]
mov qword [rsp + 0x160], rax
mov eax, dword [r12 + 0x50]
mov qword [rsp + 0x1a0], rax
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x1a0]
call fcn.140013670
cmp eax, 0xb
je 0x14001bfef
mov qword [rsp + 0x160], 0
lea rcx, [rsp + 0x160]
lea rdx, [rsp + 0x1a0]
call fcn.140013670
cmp eax, 0xb
jne 0x14001c726
mov r13, qword [rsp + 0x198]
test r13, r13
je 0x14001c038
lea rax, [r13*8]
lea rbx, [rax + rax*4]
xor r15d, r15d
nop dword [rax + rax]
mov edx, dword [rsi + r15 + 0x14]
add rdx, rdi
mov ecx, dword [rsi + r15 + 0xc]
mov r8d, dword [rsi + r15 + 0x10]
add rcx, qword [rsp + 0x160]
call sub.msvcrt.dll_memcpy
add r15, 0x28
cmp rbx, r15
jne 0x14001c010
mov rdi, qword [rsp + 0x160]
mov rax, rdi
sub rax, qword [r12 + 0x30]
je 0x14001c243
mov ecx, dword [r12 + 0xb0]
test rcx, rcx
je 0x14001c243
cmp dword [r12 + 0xb4], 0
je 0x14001c243
add rcx, rdi
mov edx, 1
mov r8d, dword [rcx + 4]
test r8, r8
jne 0x14001c0a0
jmp 0x14001c110
mov r8d, dword [rcx + 4]
add rcx, r8
mov r8d, dword [rcx + 4]
test r8, r8
je 0x14001c110
cmp r8d, 0xa
jb 0x14001c094
lea r9, [r8 - 8]
shr r9, 0x3f
add r8, r9
add r8, 0xfffffffffffffff8
sar r8, 1
cmp r8, 2
cmovl r8, rdx
xor r9d, r9d
jmp 0x14001c0d8
inc r9
cmp r8, r9
je 0x14001c090
movzx r10d, word [rcx + r9*2 + 8]
mov r11d, r10d
and r11d, 0xf000
cmp r11d, 0xa000
jne 0x14001c0d0
mov r11d, dword [rcx]
and r10d, 0xfff
add r11, rdi
add qword [r10 + r11], rax
jmp 0x14001c0d0
cmp dword [rcx], 0
je 0x14001c23b
xor r8d, r8d
add rcx, r8
mov r8d, dword [rcx + 4]
test r8, r8
jne 0x14001c0a0
jmp 0x14001c110
cmp eax, 0x4ab08
ja 0x14001c7e2
lea r8, [rax + 0xf8]
xor r9d, r9d
mov edx, 0x4ac00
mov r10d, 0x4ac00
sub r10, r8
movzx r11d, word [rcx + 6]
lea esi, [r11*8]
lea rsi, [rsi + rsi*4]
sub r10, rsi
jb 0x14001c7e2
add rax, 0xffffffffffffffc0
lea rdi, [r14 + 0x40]
add r8, r14
mov rbx, r14
shr rbx, 8
add rsi, r8
mov r15d, r11d
shr r15d, 8
mov byte [rsp + 0x200], r14b
mov r12, r14
shr r12, 0x38
mov byte [rsp + 0x207], r12b
mov r12, r14
shr r12, 0x28
mov word [rsp + 0x205], r12w
mov dword [rsp + 0x201], ebx
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], r9
mov qword [rsp + 0x220], rcx
mov qword [rsp + 0x228], r8
mov byte [rsp + 0x230], r11b
mov dword [rsp + 0x231], r15d
mov byte [rsp + 0x237], 0
mov word [rsp + 0x235], 0
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], r10
mov qword [rsp + 0x248], r14
mov eax, 0x50
mov qword [rsp + rax + 0x200], rdx
mov rax, qword [rsp + 0x218]
cmp rax, 2
jne 0x14001bf24
jmp 0x14001c726
mov rdi, qword [rsp + 0x160]
cmp dword [r12 + 0x94], 0
mov qword [rsp + 0x1e8], r12
je 0x14001c4b6
mov ebx, dword [r12 + 0x90]
test rbx, rbx
je 0x14001c4b6
add rbx, rdi
lea rax, [rdi + 2]
mov qword [rsp + 0x158], rax
lea r12, [rsp + 0x200]
jmp 0x14001c298
mov rbx, qword [rsp + 0x190]
add rbx, 0x14
mov r13, qword [rsp + 0x198]
mov r15d, dword [rbx + 0xc]
test r15, r15
jne 0x14001c2bc
cmp dword [rbx + 0x10], 0
jne 0x14001c2bc
cmp dword [rbx], 0
jne 0x14001c2bc
cmp dword [rbx + 4], 0
jne 0x14001c2bc
cmp dword [rbx + 8], 0
je 0x14001c4b6
add r15, rdi
mov rcx, r15
call sub.msvcrt.dll_strlen
mov rcx, r12
mov rdx, r15
mov r8, rax
call fcn.140011980
cmp qword [rsp + 0x200], 0
jne 0x14001c726
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
mov rcx, r12
call fcn.140003760
mov rax, qword [rsp + 0x200]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14001c70b
mov qword [rsp + 0x190], rbx
mov r15, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x210]
mov rcx, r15
call sub.kernel32.dll_LoadLibraryA
mov r12, rax
test rax, rax
mov rax, qword [rsp + 0xc8]
cmovne rax, r12
mov qword [rsp + 0xc8], rax
mov byte [r15], 0
test rbx, rbx
je 0x14001c36b
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
test r12, r12
lea r12, [rsp + 0x200]
je 0x14001c726
mov rcx, qword [rsp + 0x190]
mov eax, dword [rcx]
mov ecx, dword [rcx + 0x10]
add rcx, rdi
lea rbx, [rdi + rax]
test rax, rax
mov qword [rsp + 0x1f8], rcx
cmove rbx, rcx
mov r15, qword [rbx]
test r15, r15
je 0x14001c284
xor r13d, r13d
jmp 0x14001c3e8
movzx edx, r15w
mov rcx, qword [rsp + 0xc8]
call sub.kernel32.dll_GetProcAddress
test rax, rax
je 0x14001c726
mov rcx, qword [rsp + 0x1f8]
mov qword [rcx + r13], rax
mov r15, qword [rbx + r13 + 8]
add r13, 8
test r15, r15
je 0x14001c284
test r15, r15
js 0x14001c3b0
mov rax, qword [rsp + 0x158]
cmp byte [rax + r15], 0
je 0x14001c284
add r15, qword [rsp + 0x158]
mov rcx, r15
call sub.msvcrt.dll_strlen
mov rcx, r12
mov rdx, r15
mov r8, rax
call fcn.140011980
cmp qword [rsp + 0x200], 0
jne 0x14001c726
mov rdx, qword [rsp + 0x208]
mov r8, qword [rsp + 0x210]
mov rcx, r12
call fcn.140003760
mov rax, qword [rsp + 0x200]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14001c70b
mov r15, qword [rsp + 0x208]
mov r12, qword [rsp + 0x210]
mov rcx, qword [rsp + 0xc8]
mov rdx, r15
call sub.kernel32.dll_GetProcAddress
mov byte [r15], 0
test r12, r12
je 0x14001c4a0
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, r15
mov r15, rax
call sub.kernel32.dll_HeapFree
mov rax, r15
test rax, rax
lea r12, [rsp + 0x200]
jne 0x14001c3ca
jmp 0x14001c726
test r13, r13
lea rdi, [rsp + 0x200]
je 0x14001c6a9
shl r13, 3
lea r15, [r13*4]
add r15, r13
xor r12d, r12d
mov qword [rsp + 0xc8], r15
jmp 0x14001c535
mov rbx, qword [0x14009b048]
test rbx, rbx
je 0x14001c5ab
mov dword [rsp + 0x200], 0
call sub.kernel32.dll_GetCurrentProcess
mov qword [rsp + 0x20], rdi
mov rcx, rax
lea rdx, [rsp + 0x680]
lea r8, [rsp + 0xd0]
mov r9d, r13d
call rbx
test eax, eax
jne 0x14001c726
add r12, 0x28
cmp r15, r12
je 0x14001c6a9
mov eax, dword [rsi + r12 + 0x10]
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x14001c528
mov eax, dword [rsi + r12 + 0xc]
add rax, qword [rsp + 0x160]
mov qword [rsp + 0x680], rax
mov eax, dword [rsi + r12 + 0x24]
test eax, 0x20000000
jne 0x14001c589
mov r13d, 1
test eax, 0x40000000
je 0x14001c4e3
shr eax, 0x1f
lea r13d, [rax*2 + 2]
jmp 0x14001c4e3
mov r13d, 0x10
test eax, 0x40000000
je 0x14001c4e3
shr eax, 0x1a
and eax, 0xffffffe0
add eax, 0x20
mov r13d, eax
jmp 0x14001c4e3
mov r8d, 9
mov rcx, rdi
lea rdx, [0x14004a800]
call fcn.140003760
mov rax, qword [rsp + 0x200]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14001c70b
mov rdi, qword [rsp + 0x208]
mov r15, qword [rsp + 0x210]
mov rcx, rdi
call sub.kernel32.dll_LoadLibraryA
mov rbx, rax
mov byte [rdi], 0
test r15, r15
je 0x14001c60f
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea rcx, [rsp + 0x200]
je 0x14001c726
mov r8d, 0x16
lea rdx, [0x14004a820]
call fcn.140003760
mov rax, qword [rsp + 0x200]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x14001c70b
mov rdi, qword [rsp + 0x208]
mov r15, qword [rsp + 0x210]
mov rcx, rbx
mov rdx, rdi
call sub.kernel32.dll_GetProcAddress
mov rbx, rax
mov byte [rdi], 0
test r15, r15
je 0x14001c684
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea rdi, [rsp + 0x200]
mov r15, qword [rsp + 0xc8]
je 0x14001c726
mov qword [0x14009b048], rbx
jmp 0x14001c4f3
mov rsi, qword [rsp + 0x160]
mov rax, qword [rsp + 0x1e8]
cmp dword [rax + 0xd4], 0
je 0x14001c6ff
mov eax, dword [rax + 0xd0]
test rax, rax
je 0x14001c6ff
mov rdi, qword [rsi + rax + 0x18]
mov rax, qword [rdi]
test rax, rax
je 0x14001c6ff
add rdi, 8
mov rcx, rsi
mov edx, 2
xor r8d, r8d
call rax
mov rax, qword [rdi]
add rdi, 8
test rax, rax
jne 0x14001c6de
mov rsi, qword [rsp + 0x160]
add rsi, qword [rsp + 0x1f0]
call rsi
jmp 0x14001c726
test rax, rax
je 0x14001c726
mov r8, qword [rsp + 0x208]
mov rcx, qword [0x14009b0f0]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x14009b0f0]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
movaps xmm6, xmmword [rbp + 0x890]
movaps xmm7, xmmword [rbp + 0x8a0]
movaps xmm8, xmmword [rbp + 0x8b0]
movaps xmm9, xmmword [rbp + 0x8c0]
movaps xmm10, xmmword [rbp + 0x8d0]
movaps xmm11, xmmword [rbp + 0x8e0]
lea rsp, [rbp + 0x8f8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140027880
lea rax, [0x140090bac]
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rax, 0xfc07fd48ccb2c01d
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rdx, qword [rsp + 0x200]
call fcn.140017c80
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx ecx, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
ud2
call sub.kernel32.dll_GetLastError
ud2