Function at 0x18008a950
Capabilities:
Encrypt data using speck

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x288
mov r13, r8
mov rdi, rdx
mov rsi, rcx
mov r14, qword [rdx + 0x38]
mov qword [rdx + 0x38], 0
test r14, r14
je 0x18008a9c8
movzx eax, byte [r14 + 0x80]
test al, al
jne 0x18008aa17
mov r12, rdi
mov rdi, rsi
mov rax, qword [r13]
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
call qword [rdx]
mov rbx, rax
mov r15, rdx
lea rax, [r14 + 0x50]
mov cl, 1
xchg byte [r14 + 0x60], cl
xor esi, esi
test cl, cl
cmove rsi, rax
je 0x18008a9e6
mov rcx, r15
call qword [rbx + 0x18]
mov rsi, rdi
mov rdi, r12
jmp 0x18008aa17
mov byte [rsp + 0x1d8], 3
movzx eax, byte [rsp + 0x1d8]
cmp eax, 4
jne 0x18008ab43
jmp 0x18008c15e
mov rax, qword [rsi]
test rax, rax
je 0x18008a9f5
mov rcx, qword [rsi + 8]
call qword [rax + 0x18]
mov qword [rsi], rbx
mov qword [rsi + 8], r15
xor eax, eax
xchg byte [rsi + 0x10], al
movzx eax, byte [r14 + 0x80]
test al, al
mov rsi, rdi
mov rdi, r12
je 0x18008b592
lea rax, [r14 + 0x10]
mov dl, 1
xchg byte [r14 + 0x48], dl
xor ecx, ecx
test dl, dl
cmove rcx, rax
je 0x18008aa59
movzx eax, byte [0x18021ea38]
mov rcx, qword [0x18021e9c0]
test rcx, rcx
jne 0x18008aa81
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x18008c784
mov rcx, rax
mov qword [0x18021e9c0], rax
jmp 0x18008aa81
movzx eax, byte [rcx + 0x31]
mov byte [rcx + 0x31], 2
cmp al, 2
jne 0x18008b53b
xor eax, eax
xchg byte [rcx + 0x38], al
movzx eax, byte [0x18021ea38]
mov rcx, qword [0x18021e9c0]
test rcx, rcx
je 0x18008aa3e
mov r8d, 0x18
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x18008c784
mov rbx, rax
mov qword [rax], 0
mov byte [rax + 0x10], 4
lea rdx, [0x1801e1400]
mov r8d, 0x19
mov rcx, rax
call fcn.18008da80
mov qword [rsp + 0x168], rbx
mov byte [rsp + 0x1d8], 2
mov bl, 1
mov al, 1
xchg byte [r14 + 0x80], al
mov al, 1
xchg byte [r14 + 0x60], al
test al, al
jne 0x18008aafe
mov rax, qword [r14 + 0x50]
mov rcx, qword [r14 + 0x58]
mov qword [r14 + 0x50], 0
xor edx, edx
xchg byte [r14 + 0x60], dl
test rax, rax
je 0x18008aafe
call qword [rax + 0x18]
xchg byte [r14 + 0x78], bl
test bl, bl
jne 0x18008ab24
mov rax, qword [r14 + 0x68]
mov rcx, qword [r14 + 0x70]
mov qword [r14 + 0x68], 0
xor edx, edx
xchg byte [r14 + 0x78], dl
test rax, rax
je 0x18008ab24
call qword [rax + 8]
lock dec qword [r14]
jne 0x18008ab32
mov rcx, r14
call fcn.18008f580
movzx eax, byte [rsp + 0x1d8]
cmp eax, 4
je 0x18008c15e
cmp eax, 3
je 0x18008ab65
cmp eax, 2
jne 0x18008b143
mov rax, qword [rsp + 0x168]
mov qword [rsi], rax
mov byte [rsi + 0x70], 2
jmp 0x18008c162
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x18008c14f
mov qword [rsp + 0x48], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0x280], rcx
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x18021e9f8]
shl rax, 1
test rax, rax
jne 0x18008bed6
mov dword [rsp + 0x3c], 0
mov qword [rsp + 0x260], r13
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x48]
movzx eax, byte [rcx + 0x18]
test al, al
jne 0x18008c780
cmp qword [rcx + 0x78], 0
mov qword [rsp + 0x58], rdi
je 0x18008b248
mov rsi, qword [rsp + 0x48]
mov rax, qword [rsi + 0xd0]
mov qword [rsp + 0x160], rax
mov eax, dword [rsi + 0xd8]
mov dword [rsp + 0x70], eax
mov rcx, qword [rsi + 0x80]
mov rdx, qword [rsi + 0x88]
mov r8, rdi
call fcn.180094db0
mov rdx, qword [rsi + 0x60]
mov r8, qword [rsi + 0x68]
mov rcx, rax
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rdx - 0x48]
mov qword [rsp + 0x110], rcx
movzx r9d, byte [rdi]
mov rcx, qword [rdi + 8]
mov qword [rsp + 0x80], rcx
movzx ecx, byte [rdi + 1]
mov byte [rsp + 0x30], cl
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0x78], rcx
neg rcx
mov qword [rsp + 0x88], rcx
xor ecx, ecx
mov qword [rsp + 0x50], rcx
pcmpeqd xmm1, xmm1
mov dword [rsp + 0x100], r9d
mov qword [rsp + 0x28], rdx
and rax, r8
movdqu xmm2, xmmword [rdx + rax]
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pmovmskb ecx, xmm3
test ecx, ecx
jne 0x18008acf0
pcmpeqb xmm2, xmm1
pmovmskb ecx, xmm2
test ecx, ecx
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x28]
jne 0x18008b248
mov rcx, qword [rsp + 0x50]
add rax, rcx
add rax, 0x10
add rcx, 0x10
mov qword [rsp + 0x50], rcx
jmp 0x18008ac81
test cl, cl
je 0x18008c780
lea ecx, [rbp - 1]
and ecx, ebp
test cx, cx
mov r8, rbx
mov rax, r15
mov r9d, dword [rsp + 0x100]
je 0x18008ac99
mov ebp, ecx
tzcnt ecx, ebp
mov r15, rax
add rcx, rax
mov rbx, r8
and rcx, r8
neg rcx
lea rsi, [rcx + rcx*8]
mov rax, qword [rsp + 0x110]
lea r13, [rax + rsi*8]
cmp r9d, 1
je 0x18008adc0
cmp r9d, 2
jne 0x18008c780
movzx ecx, byte [r13]
cmp cl, 2
jne 0x18008acd0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x10]
mov r11, qword [r13 + 8]
cmp rcx, qword [r11 + 0x10]
jne 0x18008acd8
mov rax, qword [rsp + 0x80]
mov r12, qword [rax + 8]
mov r11, qword [r11 + 8]
mov rdi, rcx
neg rdi
mov r14, 0xffffffffffffffff
nop word cs:[rax + rax]
lea r10, [rdi + r14]
cmp r10, 0xffffffffffffffff
je 0x18008adf0
movzx r10d, byte [r12 + r14 + 1]
movzx r8d, byte [r11 + r14 + 1]
lea edx, [r10 - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
lea r9d, [r8 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
or dl, r10b
or r9b, r8b
inc r14
cmp dl, r9b
je 0x18008ad70
cmp r14, rcx
jb 0x18008acd8
jmp 0x18008adf0
movzx ecx, byte [r13]
cmp cl, 1
jne 0x18008acd0
movzx ecx, byte [r13 + 1]
cmp byte [rsp + 0x30], 0
je 0x18008ade3
test cl, cl
jne 0x18008adf0
jmp 0x18008acd8
test cl, cl
jne 0x18008acd8
nop dword [rax + rax]
mov rax, qword [rsp + 0x78]
cmp rax, qword [r13 + 0x20]
jne 0x18008acd8
mov r11, qword [r13 + 0x18]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
mov rax, qword [rsp + 0x88]
lea rdx, [rax + rcx]
cmp rdx, 0xffffffffffffffff
je 0x18008ae6b
mov rax, qword [rsp + 0x60]
movzx edx, byte [rax + rcx + 1]
movzx r8d, byte [r11 + rcx + 1]
lea r9d, [rdx - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
lea r10d, [r8 - 0x41]
cmp r10b, 0x1a
setb r10b
shl r10b, 5
or r9b, dl
or r10b, r8b
inc rcx
cmp r9b, r10b
je 0x18008ae10
cmp rcx, qword [rsp + 0x78]
jb 0x18008acd8
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx + rsi*8 - 8]
test rax, rax
mov rdi, qword [rsp + 0x58]
je 0x18008b248
lea r12, [rcx + rsi*8]
add r12, 0xffffffffffffffe8
lea r15, [rsp + 0x120]
mov r13, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea r14, [rsp + 0x90]
jmp 0x18008aec6
mov rcx, r14
call fcn.18008f5f0
mov rax, qword [r12 + 0x10]
test rax, rax
je 0x18008b248
dec rax
mov qword [r12 + 0x10], rax
mov rcx, qword [r12]
lea rdx, [rax + rax*8]
mov eax, dword [rcx + rdx*8 + 0x40]
cmp eax, 0x3b9aca00
je 0x18008b248
lea rcx, [rcx + rdx*8]
mov edx, dword [rcx + 0x44]
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqu xmm2, xmmword [rcx + 0x20]
movdqu xmm3, xmmword [rcx + 0x30]
movdqa xmmword [rsp + 0xb0], xmm2
movdqa xmmword [rsp + 0xc0], xmm3
movdqa xmmword [rsp + 0xa0], xmm1
movdqa xmmword [rsp + 0x90], xmm0
mov dword [rsp + 0xd0], eax
mov dword [rsp + 0xd4], edx
mov rax, qword [rsp + 0xb8]
movzx eax, byte [rax + 0x10]
test al, al
jne 0x18008aeb0
cmp byte [rsp + 0xa0], 2
jne 0x18008af67
mov rax, qword [rsp + 0x90]
mov rax, qword [rax + 0x10]
cmp rax, 3
je 0x18008aeb0
jmp 0x18008af7d
mov rax, qword [rsp + 0x90]
mov rax, qword [rax + 0x10]
cmp rax, 1
jne 0x18008aeb0
mov rbp, qword [rsp + 0xc8]
mov esi, dword [rsp + 0xd0]
cmp dword [rsp + 0x70], 0x3b9aca00
je 0x18008b0c5
mov qword [rsp + 0x120], 0
mov rcx, r15
call r13
test eax, eax
je 0x18008c795
mov rbx, qword [rsp + 0x120]
mov rcx, qword [0x18021e9d8]
test rcx, rcx
jne 0x18008affd
mov qword [rsp + 0x120], 0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x18008c795
mov rcx, qword [rsp + 0x120]
mov qword [0x18021e9d8], rcx
test rcx, rcx
je 0x18008c780
mov rax, rbx
or rax, rcx
shr rax, 0x20
je 0x18008b013
mov rax, rbx
xor edx, edx
div rcx
jmp 0x18008b019
mov eax, ebx
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x18008b03d
xor edx, edx
div rcx
mov rcx, rax
jmp 0x18008b043
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
movabs rdx, 0x44b82fa09b5a53
mul rdx
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov qword [rsp + 0x168], rdx
mov dword [rsp + 0x170], ecx
lea rcx, [rsp + 0x168]
mov rdx, rbp
mov r8d, esi
call fcn.180106420
cmp edx, 0x3b9aca00
mov ecx, 0
cmove rax, rcx
mov r8, qword [rsp + 0x160]
cmp rax, r8
jb 0x18008b0c5
cmp edx, 0x3b9aca00
setne cl
cmp edx, dword [rsp + 0x70]
seta dl
cmp rax, r8
jne 0x18008aeb0
and cl, dl
jne 0x18008aeb0
mov dword [rsp + 0x28], esi
mov r9, qword [rsp + 0x90]
mov r13, qword [rsp + 0x98]
movzx edx, byte [rsp + 0xa0]
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xb8]
movzx edi, byte [rsp + 0xc0]
movzx esi, byte [rsp + 0xc1]
lea r8, [rsp + 0xc2]
cmp dl, 2
jne 0x18008bee6
mov qword [rsp + 0x88], r13
mov r13d, esi
mov byte [rsp + 0x60], dl
test r14, r14
je 0x18008c2ec
mov rcx, r14
mov rsi, r9
call qword [rbx + 0x20]
mov r9, rsi
jmp 0x18008c2ee
mov rcx, qword [rsp + 0x168]
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0xa0], xmm0
movups xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0xb0], xmm0
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0xe0], xmm0
mov rdx, qword [rsp + 0x1d0]
mov qword [rsp + 0xf0], rdx
mov edx, dword [rsp + 0x1d9]
mov dword [rsp + 0x40], edx
mov edx, dword [rsp + 0x1dc]
mov dword [rsp + 0x43], edx
mov rdx, qword [rsp + 0xf0]
mov qword [rsi + 0x68], rdx
movaps xmm0, xmmword [rsp + 0xe0]
movups xmmword [rsi + 0x58], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
movups xmmword [rsi + 0x48], xmm0
movdqa xmm0, xmmword [rsp + 0x90]
movdqa xmm1, xmmword [rsp + 0xa0]
movdqa xmm2, xmmword [rsp + 0xb0]
movdqa xmm3, xmmword [rsp + 0xc0]
movdqu xmmword [rsi + 0x38], xmm3
movdqu xmmword [rsi + 0x28], xmm2
movdqu xmmword [rsi + 0x18], xmm1
movdqu xmmword [rsi + 8], xmm0
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x43]
mov dword [rsi + 0x71], edx
mov dword [rsi + 0x74], r8d
mov qword [rsi], rcx
mov byte [rsi + 0x70], al
jmp 0x18008c162
mov dword [rsp + 0x1a8], 0x3b9aca00
mov ebx, 0x3b9aca00
mov dword [rsp + 0x160], 0
mov dword [rsp + 0x28], ebx
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsi + 0x80]
mov rdx, qword [rsi + 0x88]
mov r8, rdi
call fcn.180094db0
mov rdx, qword [rsi + 0x60]
mov r8, qword [rsi + 0x68]
mov rcx, rax
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rdx - 0x48]
mov qword [rsp + 0x110], rcx
movzx r9d, byte [rdi]
mov rcx, qword [rdi + 8]
mov qword [rsp + 0x80], rcx
movzx ecx, byte [rdi + 1]
mov byte [rsp + 0x30], cl
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0x78], rcx
neg rcx
mov qword [rsp + 0x88], rcx
xor ecx, ecx
mov qword [rsp + 0x70], rcx
pcmpeqd xmm1, xmm1
mov dword [rsp + 0x100], r9d
mov qword [rsp + 0x50], rdx
and rax, r8
movdqu xmm2, xmmword [rdx + rax]
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pmovmskb ecx, xmm3
test ecx, ecx
jne 0x18008b362
pcmpeqb xmm2, xmm1
pmovmskb ecx, xmm2
test ecx, ecx
jne 0x18008b7a4
mov rcx, qword [rsp + 0x70]
add rax, rcx
add rax, 0x10
add rcx, 0x10
mov qword [rsp + 0x70], rcx
mov rdx, qword [rsp + 0x50]
jmp 0x18008b2fc
test cl, cl
je 0x18008c780
lea ecx, [r13 - 1]
and ecx, r13d
test cx, cx
mov r8, rax
mov rax, r12
mov r9d, dword [rsp + 0x100]
je 0x18008b314
mov r13d, ecx
tzcnt esi, r13d
mov r12, rax
add rsi, rax
mov rax, r8
and rsi, r8
mov rcx, rsi
neg rcx
lea r15, [rcx + rcx*8]
mov rcx, qword [rsp + 0x110]
lea rdi, [rcx + r15*8]
cmp r9d, 1
je 0x18008b430
cmp r9d, 2
jne 0x18008c780
movzx ecx, byte [rdi]
cmp cl, 2
jne 0x18008b340
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 0x10]
mov r10, qword [rdi + 8]
cmp rcx, qword [r10 + 0x10]
jne 0x18008b348
mov rdx, qword [rsp + 0x80]
mov r11, qword [rdx + 8]
mov r14, qword [r10 + 8]
mov rbp, rcx
neg rbp
mov r10, 0xffffffffffffffff
nop dword [rax + rax]
lea r8, [r10 + rbp]
cmp r8, 0xffffffffffffffff
je 0x18008b460
movzx r8d, byte [r11 + r10 + 1]
movzx edx, byte [r14 + r10 + 1]
lea r9d, [r8 - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
lea ebx, [rdx - 0x41]
cmp bl, 0x1a
setb bl
shl bl, 5
or r9b, r8b
or bl, dl
inc r10
cmp r9b, bl
je 0x18008b3e0
cmp r10, rcx
jb 0x18008b348
jmp 0x18008b460
movzx ecx, byte [rdi]
cmp cl, 1
jne 0x18008b340
movzx ecx, byte [rdi + 1]
cmp byte [rsp + 0x30], 0
je 0x18008b450
test cl, cl
jne 0x18008b460
jmp 0x18008b348
test cl, cl
jne 0x18008b348
nop dword [rax + rax]
mov rcx, qword [rsp + 0x78]
cmp rcx, qword [rdi + 0x20]
jne 0x18008b348
mov r10, qword [rdi + 0x18]
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
mov rdx, qword [rsp + 0x88]
add rdx, rcx
cmp rdx, 0xffffffffffffffff
je 0x18008b4da
mov rdx, qword [rsp + 0x60]
movzx edx, byte [rdx + rcx + 1]
movzx r8d, byte [r10 + rcx + 1]
lea r9d, [rdx - 0x41]
cmp r9b, 0x1a
setb r9b
shl r9b, 5
lea r11d, [r8 - 0x41]
cmp r11b, 0x1a
setb r11b
shl r11b, 5
or r9b, dl
or r11b, r8b
inc rcx
cmp r9b, r11b
je 0x18008b480
cmp rcx, qword [rsp + 0x78]
jb 0x18008b348
shl rsi, 3
lea rcx, [rsi + rsi*8]
sar rcx, 3
movabs rsi, 0x8e38e38e38e38e39
imul rsi, rcx
lea r8, [rsi - 0x10]
and r8, rax
mov r11, qword [rsp + 0x50]
movdqu xmm0, xmmword [r11 + r8]
pcmpeqd xmm1, xmm1
pcmpeqb xmm0, xmm1
psllw xmm0, 7
pmovmskb ecx, xmm0
movdqu xmm0, xmmword [r11 + rsi]
pcmpeqb xmm0, xmm1
pmovmskb edx, xmm0
test ecx, ecx
je 0x18008b71d
bsr r9w, cx
xor r9d, 0xf
jmp 0x18008b722
movzx edx, byte [rcx + 0x30]
mov byte [rsp + 0x250], dl
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqu xmm2, xmmword [rcx + 0x20]
movdqa xmmword [rsp + 0x240], xmm2
movdqa xmmword [rsp + 0x230], xmm1
movdqa xmmword [rsp + 0x220], xmm0
mov edx, dword [rcx + 0x32]
mov dword [rsp + 0x108], edx
movzx edx, word [rcx + 0x36]
mov word [rsp + 0x10c], dx
xor edx, edx
xchg byte [rcx + 0x38], dl
cmp al, 3
jne 0x18008b624
mov r15, qword [rdi + 0x38]
test r15, r15
je 0x18008b602
mov bl, 1
mov al, 1
xchg byte [r15 + 0x80], al
mov al, 1
xchg byte [r15 + 0x60], al
test al, al
jne 0x18008b5ce
mov rax, qword [r15 + 0x50]
mov rcx, qword [r15 + 0x58]
mov qword [r15 + 0x50], 0
xor edx, edx
xchg byte [r15 + 0x60], dl
test rax, rax
je 0x18008b5ce
call qword [rax + 0x18]
xchg byte [r15 + 0x78], bl
test bl, bl
jne 0x18008b5f4
mov rax, qword [r15 + 0x68]
mov rcx, qword [r15 + 0x70]
mov qword [r15 + 0x68], 0
xor edx, edx
xchg byte [r15 + 0x78], dl
test rax, rax
je 0x18008b5f4
call qword [rax + 8]
lock dec qword [r15]
jne 0x18008b602
mov rcx, r15
call fcn.18008f580
mov qword [rdi + 0x38], r14
mov byte [rsp + 0x1d8], 4
movzx eax, byte [rsp + 0x1d8]
cmp eax, 4
jne 0x18008ab43
jmp 0x18008c15e
movdqa xmm0, xmmword [rsp + 0x220]
movdqa xmm1, xmmword [rsp + 0x230]
movdqa xmm2, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x200], xmm2
movzx ecx, byte [rsp + 0x250]
mov byte [rsp + 0x210], cl
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x211], al
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x212], eax
movzx eax, word [rsp + 0x10c]
mov word [rsp + 0x216], ax
mov rax, qword [rsp + 0x208]
movzx eax, byte [rax + 0x10]
test al, al
je 0x18008b8f0
movzx eax, byte [0x18021ea38]
mov rcx, qword [0x18021e9c0]
test rcx, rcx
jne 0x18008b6ce
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x18008c784
mov rcx, rax
mov qword [0x18021e9c0], rax
mov r8d, 0x18
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x18008c784
mov byte [rax + 0x10], 4
mov qword [rax], 1
lea rcx, [0x1801e0af8]
mov qword [rax + 8], rcx
mov qword [rsp + 0x168], rax
mov byte [rsp + 0x1d8], 2
lea rcx, [rsp + 0x1e0]
call fcn.18008f5f0
jmp 0x18008aacb
mov r9w, 0x10
mov r10, qword [rsp + 0x48]
lea rcx, [r11 + r15*8]
or edx, 0x10000
tzcnt edx, edx
add r9d, edx
mov dl, 0x80
cmp r9w, 0xf
ja 0x18008b747
inc qword [r10 + 0x70]
mov dl, 0xff
mov byte [r11 + rsi], dl
mov byte [r8 + r11 + 0x10], dl
dec qword [r10 + 0x78]
movdqu xmm0, xmmword [rcx - 0x48]
movdqu xmm1, xmmword [rcx - 0x38]
movdqu xmm2, xmmword [rcx - 0x28]
movdqu xmm3, xmmword [rcx - 0x18]
movdqa xmmword [rsp + 0x90], xmm0
mov rax, qword [rcx - 8]
mov qword [rsp + 0xd0], rax
movdqa xmmword [rsp + 0xc0], xmm3
movdqa xmmword [rsp + 0xb0], xmm2
movdqa xmmword [rsp + 0xa0], xmm1
movzx eax, byte [rsp + 0x90]
cmp al, 3
jne 0x18008b7ae
mov r15d, dword [rsp + 0x28]
jmp 0x18008b858
mov r14, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
cmp al, 2
jb 0x18008b7f6
mov rbx, qword [rsp + 0x98]
lea rcx, [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x18021e9c0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb0]
call qword [rax + 0x10]
test r14, r14
mov r15d, dword [rsp + 0x28]
je 0x18008b858
test rdi, rdi
je 0x18008b841
mov rbx, r14
nop dword [rax + rax]
mov rcx, rbx
call fcn.18008f5f0
add rbx, 0x48
dec rdi
jne 0x18008b830
test rsi, rsi
je 0x18008b858
mov rcx, qword [0x18021e9c0]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r15d, 0x3b9aca00
sete bpl
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
jne 0x18008c0ac
cmp qword [rdi + 0x38], 0
je 0x18008b8d6
movdqa xmm0, xmmword [rsp + 0x120]
movdqa xmm1, xmmword [rsp + 0x130]
movdqa xmm2, xmmword [rsp + 0x140]
movdqa xmm3, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x210], xmm3
movdqa xmmword [rsp + 0x200], xmm2
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmmword [rsp + 0x1e0], xmm0
mov bpl, 1
mov eax, dword [rsp + 0x3c]
test al, al
jne 0x18008c138
jmp 0x18008c11e
movzx eax, byte [0x18021ea38]
mov rcx, qword [0x18021e9c0]
test rcx, rcx
je 0x18008b919
mov rsi, qword [rsp + 0x48]
jmp 0x18008b937
cmp byte [rsp + 0x1f0], 2
jne 0x18008b9ba
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rax + 0x10]
cmp rax, 3
je 0x18008b6a2
jmp 0x18008b9d0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
mov rsi, qword [rsp + 0x48]
je 0x18008c79e
mov rcx, rax
mov qword [0x18021e9c0], rax
mov r8d, 0x88
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x18008c79e
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x41], 2
mov byte [rax + 0x48], 0
mov qword [rax + 0x50], 0
mov byte [rax + 0x60], 0
mov qword [rax + 0x68], 0
mov byte [rax + 0x78], 0
mov byte [rax + 0x80], 0
lock inc qword [rax]
jle 0x18008c780
movzx ecx, byte [rdi]
test rcx, rcx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x11c], ebp
je 0x18008ba37
cmp ecx, 1
jne 0x18008ba3b
movzx ecx, byte [rdi + 1]
mov dl, 1
jmp 0x18008ba7d
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rax + 0x10]
cmp rax, 1
jne 0x18008b6a2
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x150], rax
movdqa xmm0, xmmword [rsp + 0x1e0]
movdqa xmm1, xmmword [rsp + 0x1f0]
movdqa xmm2, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x140], xmm2
movdqa xmmword [rsp + 0x130], xmm1
movdqa xmmword [rsp + 0x120], xmm0
mov rdx, qword [rdi + 0x30]
lea rcx, [rsp + 0x168]
lea r9, [rsp + 0x120]
mov r8, rdi
call fcn.1800dff50
jmp 0x18008aacb
xor edx, edx
jmp 0x18008ba7d
movzx eax, byte [0x18021ea38]
mov ecx, 0x20
mov edx, 8
call fcn.180032860
test rax, rax
je 0x18008c7c9
mov r14, rax
mov rax, qword [rdi + 8]
lea rdx, [rax + 0x18]
mov r10, qword [rax]
mov r8, qword [rax + 8]
mov r9, qword [rax + 0x10]
mov rcx, r14
call qword [r10]
mov dl, 2
mov rax, qword [rsp + 0x30]
add rax, 0x50
mov qword [rsp + 0x278], rax
lea rax, [rsi + 0x90]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x90], dl
mov byte [rsp + 0x91], cl
mov qword [rsp + 0x98], r14
lea rcx, [rsp + 0xa0]
lea rdx, [rdi + 0x28]
mov rax, qword [rdi + 0x10]
mov r8, qword [rdi + 0x18]
mov r9, qword [rdi + 0x20]
call qword [rax]
lea rax, [rsi + 0xb0]
mov qword [rsp + 0x268], rax
mov rcx, qword [rsi + 0xb0]
mov rdx, qword [rsi + 0xb8]
lea r8, [rsp + 0x90]
call fcn.180094db0
mov rdx, qword [rsi + 0x90]
mov rbx, qword [rsi + 0x98]
mov rcx, rax
shr rcx, 0x39
mov qword [rsp + 0x258], rcx
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rdx - 0x50]
movzx r8d, byte [rsp + 0x90]
mov dword [rsp + 0x60], r8d
mov r8, qword [rsp + 0x98]
mov qword [rsp + 0x100], r8
movzx r8d, byte [rsp + 0x91]
mov byte [rsp + 0x78], r8b
mov r10, qword [rsp + 0xa8]
mov r11, qword [rsp + 0xb0]
mov qword [rsp + 0x80], r11
neg r11
xor r8d, r8d
mov qword [rsp + 0x70], r8
pcmpeqd xmm1, xmm1
mov qword [rsp + 0x270], rax
mov rsi, rax
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x50], rdx
and rsi, rbx
movdqu xmm2, xmmword [rdx + rsi]
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pmovmskb r8d, xmm3
test r8d, r8d
mov qword [rsp + 0x88], rsi
jne 0x18008bc12
pcmpeqb xmm2, xmm1
pmovmskb r8d, xmm2
test r8d, r8d
jne 0x18008c5f0
mov rax, qword [rsp + 0x70]
add rsi, rax
add rsi, 0x10
add rax, 0x10
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x50]
jmp 0x18008bb8d
mov eax, dword [rsp + 0x60]
cmp eax, 1
je 0x18008bccd
test eax, eax
je 0x18008c780
lea r8d, [r9 - 1]
and r8d, r9d
test r8w, r8w
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x88]
je 0x18008bbaf
mov r9d, r8d
tzcnt r8d, r9d
add r8, rsi
and r8, rbx
neg r8
lea rsi, [r8 + r8*4]
shl rsi, 4
lea rdi, [rcx + rsi]
movzx r8d, byte [rcx + rsi]
cmp r8, 1
je 0x18008bbe0
cmp r8d, 2
jne 0x18008c780
mov eax, dword [rsp + 0x60]
cmp al, 2
jne 0x18008bbed
mov rbx, qword [rdi + 8]
mov r8, qword [rbx + 0x10]
mov rax, qword [rsp + 0x100]
cmp r8, qword [rax + 0x10]
jne 0x18008bbf5
mov r15, qword [rbx + 8]
mov rax, qword [rsp + 0x100]
mov rbx, qword [rax + 8]
mov r13, r8
neg r13
mov rbp, 0xffffffffffffffff
nop
mov r14, r13
add r14, rbp
cmp r14, 0xffffffffffffffff
je 0x18008bcea
movzx r14d, byte [r15 + rbp + 1]
movzx eax, byte [rbx + rbp + 1]
lea edx, [r14 - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
lea r12d, [rax - 0x41]
cmp r12b, 0x1a
setb r12b
shl r12b, 5
or dl, r14b
or r12b, al
inc rbp
cmp dl, r12b
je 0x18008bc80
cmp rbp, r8
jb 0x18008bbf5
jmp 0x18008bcea
cmp byte [rdi + 1], 0
je 0x18008bcdf
cmp byte [rsp + 0x78], 0
jne 0x18008bcea
jmp 0x18008bbf5
cmp byte [rsp + 0x78], 0
jne 0x18008bbf5
mov rax, qword [rsp + 0x80]
cmp qword [rdi + 0x20], rax
jne 0x18008bbf5
mov rdi, qword [rdi + 0x18]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [r11 + r8]
cmp rax, 0xffffffffffffffff
je 0x18008bd5c
movzx eax, byte [rdi + r8 + 1]
movzx edx, byte [r10 + r8 + 1]
lea ebx, [rax - 0x41]
cmp bl, 0x1a
setb bl
shl bl, 5
lea ebp, [rdx - 0x41]
cmp bpl, 0x1a
setb bpl
shl bpl, 5
or bl, al
or bpl, dl
inc r8
cmp bl, bpl
je 0x18008bd10
cmp r8, qword [rsp + 0x80]
jb 0x18008bbf5
mov r15, qword [rsp + 0x50]
add r15, rsi
movdqu xmm0, xmmword [rsp + 0x90]
movdqu xmm1, xmmword [rsp + 0xa0]
movdqu xmm2, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0x240], xmm2
movdqa xmmword [rsp + 0x230], xmm1
movdqa xmmword [rsp + 0x220], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0xb0], xmm2
movdqa xmmword [rsp + 0xa0], xmm1
mov qword [rsp + 0xc0], r15
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xc8], rax
movzx eax, byte [rsp + 0x90]
cmp al, 3
mov rsi, qword [rsp + 0x68]
mov r14, qword [rsp + 0x260]
je 0x18008be36
cmp al, 2
jb 0x18008be13
mov rbx, qword [rsp + 0x98]
lea rcx, [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x18021e9c0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0xb8]
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xb0]
call qword [rax + 0x10]
mov rdi, qword [rsp + 0x58]
mov rcx, qword [r15 - 0x18]
mov rax, qword [r15 - 8]
cmp rax, rcx
jne 0x18008be59
lea rcx, [r15 - 0x20]
call fcn.18011a880
mov rcx, qword [r15 - 0x18]
mov rax, qword [r15 - 8]
mov rdx, qword [r15 - 0x10]
add rdx, rax
xor r8d, r8d
cmp rdx, rcx
cmovae r8, rcx
sub rdx, r8
mov rcx, qword [r15 - 0x20]
mov r8, qword [rsp + 0x30]
mov qword [rcx + rdx*8], r8
inc rax
mov qword [r15 - 8], rax
movzx eax, byte [r8 + 0x80]
test al, al
jne 0x18008bf83
mov rax, qword [r14]
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
call qword [rdx]
mov r8, qword [rsp + 0x30]
mov rbx, rax
mov r14, rdx
mov al, 1
xchg byte [r8 + 0x60], al
xor esi, esi
test al, al
cmove rsi, qword [rsp + 0x278]
je 0x18008bf4e
mov rcx, r14
call qword [rbx + 0x18]
mov r8, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x68]
jmp 0x18008bf83
call fcn.1801898f0
xor al, 1
mov dword [rsp + 0x3c], eax
jmp 0x18008aba5
mov eax, dword [rsp + 0xa1]
mov ecx, dword [rsp + 0xa4]
mov dword [rsp + 0x123], ecx
mov dword [rsp + 0x120], eax
mov eax, dword [r8]
mov dword [rsp + 0x40], eax
movzx eax, word [r8 + 4]
mov word [rsp + 0x44], ax
mov qword [rsp + 0x127], r14
mov qword [rsp + 0x12f], rbx
mov qword [rsp + 0x137], r15
mov byte [rsp + 0x13f], dil
lea rax, [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x28]
lea rcx, [rsp + 0x120]
jmp 0x18008c44f
mov rax, qword [rsi]
test rax, rax
je 0x18008bf62
mov rcx, qword [rsi + 8]
call qword [rax + 0x18]
mov r8, qword [rsp + 0x30]
mov qword [rsi], rbx
mov qword [rsi + 8], r14
xor eax, eax
xchg byte [rsi + 0x10], al
movzx eax, byte [r8 + 0x80]
test al, al
mov rsi, qword [rsp + 0x68]
je 0x18008c5d7
mov rcx, r8
add rcx, 0x10
mov dl, 1
xchg byte [r8 + 0x48], dl
xor eax, eax
test dl, dl
cmove rax, rcx
jne 0x18008c780
movzx ecx, byte [rax + 0x31]
mov byte [rax + 0x31], 2
cmp cl, 2
je 0x18008c7af
movzx edx, byte [rax + 0x30]
mov byte [rsp + 0xc0], dl
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movdqu xmm2, xmmword [rax + 0x20]
movdqa xmmword [rsp + 0xb0], xmm2
movdqa xmmword [rsp + 0xa0], xmm1
movdqa xmmword [rsp + 0x90], xmm0
mov edx, dword [rax + 0x32]
mov dword [rsp + 0xc2], edx
movzx edx, word [rax + 0x36]
mov word [rsp + 0xc6], dx
mov byte [rsp + 0xc1], cl
xor edx, edx
xchg byte [rax + 0x38], dl
cmp cl, 1
mov ebp, dword [rsp + 0x11c]
jbe 0x18008c7b8
cmp cl, 3
jne 0x18008c780
mov rbx, qword [rdi + 0x38]
test rbx, rbx
je 0x18008c0a0
mov sil, 1
mov al, 1
xchg byte [rbx + 0x80], al
mov al, 1
xchg byte [rbx + 0x60], al
test al, al
jne 0x18008c05d
mov rax, qword [rbx + 0x50]
mov rcx, qword [rbx + 0x58]
mov qword [rbx + 0x50], 0
xor edx, edx
xchg byte [rbx + 0x60], dl
test rax, rax
je 0x18008c05d
call qword [rax + 0x18]
mov r8, qword [rsp + 0x30]
xchg byte [rbx + 0x78], sil
test sil, sil
jne 0x18008c088
mov rax, qword [rbx + 0x68]
mov rcx, qword [rbx + 0x70]
mov qword [rbx + 0x68], 0
xor edx, edx
xchg byte [rbx + 0x78], dl
test rax, rax
je 0x18008c088
call qword [rax + 8]
mov r8, qword [rsp + 0x30]
lock dec qword [rbx]
mov rsi, qword [rsp + 0x68]
jne 0x18008c0a0
mov rcx, rbx
call fcn.18008f580
mov r8, qword [rsp + 0x30]
mov qword [rdi + 0x38], r8
mov r15d, dword [rsp + 0x1a8]
movdqa xmm0, xmmword [rsp + 0x120]
movdqa xmm1, xmmword [rsp + 0x130]
movdqa xmm2, xmmword [rsp + 0x140]
movdqa xmm3, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x210], xmm3
movdqa xmmword [rsp + 0x200], xmm2
movdqa xmmword [rsp + 0x1f0], xmm1
movdqa xmmword [rsp + 0x1e0], xmm0
cmp r15d, 0x3b9aca00
sete al
mov ecx, dword [rsp + 0x160]
or cl, al
jne 0x18008c116
lea rcx, [rsp + 0x168]
call fcn.18008f5f0
mov eax, dword [rsp + 0x3c]
test al, al
jne 0x18008c138
movabs rax, 0x7fffffffffffffff
mov rcx, qword [0x18021e9f8]
test rcx, rax
jne 0x18008c2d1
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test bpl, bpl
je 0x18008c203
mov byte [rsp + 0x1d8], 2
cmp qword [rdi + 0x30], 0
je 0x18008c176
mov byte [rsi + 0x70], 3
add rsp, 0x288
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x18021ea38]
mov rcx, qword [0x18021e9c0]
test rcx, rcx
jne 0x18008c1a2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x18008c784
mov rcx, rax
mov qword [0x18021e9c0], rax
mov r8d, 0x18
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x18008c784
mov rdi, rax
mov qword [rax], 0
mov byte [rax + 0x10], 4
lea rdx, [0x1801e1e20]
mov r8d, 0x10
mov rcx, rax
call fcn.18008da80
mov qword [rsi], rdi
mov byte [rsi + 0x70], 2
cmp byte [rsp + 0x1d8], 2
je 0x18008c162
lea rcx, [rsp + 0x168]
call fcn.18008e850
jmp 0x18008c162
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x1e0]
movaps xmm1, xmmword [rsp + 0x1f0]
movaps xmm2, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xb0], xmm2
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov rdx, qword [rdi + 0x30]
lea rcx, [rsp + 0x168]
lea r9, [rsp + 0x90]
mov r8, rdi
call fcn.1800dff50
cmp byte [rsp + 0x1d8], 2
je 0x18008c157
mov rax, qword [rsp + 0x1d8]
mov qword [rsi + 0x70], rax
movups xmm0, xmmword [rsp + 0x1c8]
movups xmmword [rsi + 0x60], xmm0
movups xmm0, xmmword [rsp + 0x1b8]
movups xmmword [rsi + 0x50], xmm0
movups xmm0, xmmword [rsp + 0x1a8]
movups xmmword [rsi + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x168]
movups xmm1, xmmword [rsp + 0x178]
movups xmm2, xmmword [rsp + 0x188]
movups xmm3, xmmword [rsp + 0x198]
movups xmmword [rsi + 0x30], xmm3
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
jmp 0x18008c162
call fcn.1801898f0
test al, al
jne 0x18008c138
mov rax, qword [rsp + 0x48]
mov byte [rax + 0x18], 1
jmp 0x18008c138
xor eax, eax
lock inc qword [r15]
jle 0x18008c780
lock inc qword [r9]
lea rcx, [rsp + 0xc2]
jle 0x18008c780
mov esi, r13d
mov r13, qword [rsp + 0x88]
lock inc qword [r13 + 0x88]
lock inc qword [r13]
jle 0x18008c780
mov qword [rsp + 0x227], rax
mov qword [rsp + 0x22f], rdx
mov qword [rsp + 0x237], r15
mov byte [rsp + 0x23f], dil
mov qword [rsp + 0x127], r14
mov qword [rsp + 0x12f], rbx
mov qword [rsp + 0x137], r15
mov byte [rsp + 0x13f], dil
mov eax, dword [rcx]
mov dword [rsp + 0x40], eax
movzx eax, word [rcx + 4]
mov word [rsp + 0x44], ax
cmp sil, 2
jne 0x18008c39b
mov sil, 2
lea rax, [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x28]
lea rcx, [rsp + 0x120]
jmp 0x18008c44a
mov r15, r9
call fcn.18011e670
mov r14d, edx
mov rdx, qword [r12 + 0x10]
cmp rdx, qword [r12 + 8]
mov ebx, dword [rsp + 0x28]
jne 0x18008c3c9
mov rcx, r12
mov rdi, rax
call fcn.18003e8b0
mov rax, rdi
mov rdx, qword [r12 + 0x10]
mov rdi, qword [rsp + 0x58]
mov r9, r15
mov r11, qword [r12]
lea rcx, [rdx + rdx*8]
mov qword [r11 + rcx*8], r15
mov qword [r11 + rcx*8 + 8], r13
mov byte [r11 + rcx*8 + 0x10], 2
movdqu xmm0, xmmword [rsp + 0x120]
movdqu xmm1, xmmword [rsp + 0x130]
movdqu xmmword [r11 + rcx*8 + 0x11], xmm0
movdqu xmmword [r11 + rcx*8 + 0x21], xmm1
mov byte [r11 + rcx*8 + 0x31], sil
lea r10, [rsp + 0xc2]
mov r8d, dword [r10]
mov dword [r11 + rcx*8 + 0x32], r8d
movzx r8d, word [r10 + 4]
mov word [r11 + rcx*8 + 0x36], r8w
mov qword [r11 + rcx*8 + 0x38], rax
mov dword [r11 + rcx*8 + 0x40], r14d
inc rdx
mov qword [r12 + 0x10], rdx
lea rax, [rsp + 0x108]
lea rcx, [rsp + 0x220]
movzx edx, byte [rsp + 0x60]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x189], xmm1
movups xmmword [rsp + 0x179], xmm0
mov ecx, dword [rax]
mov dword [rsp + 0x19a], ecx
movzx eax, word [rax + 4]
mov word [rsp + 0x19e], ax
cmp qword [r12 + 0x10], 0
mov qword [rsp + 0x168], r9
mov qword [rsp + 0x170], r13
mov byte [rsp + 0x178], dl
mov byte [rsp + 0x199], sil
mov qword [rsp + 0x1a0], rbp
mov dword [rsp + 0x1a8], ebx
sete byte [rsp + 0x1b0]
movzx eax, byte [rsp + 0x198]
mov byte [rsp + 0x150], al
movzx eax, byte [rsp + 0x199]
mov byte [rsp + 0x151], al
mov eax, dword [rsp + 0x19a]
mov dword [rsp + 0x152], eax
movzx eax, word [rsp + 0x19e]
mov word [rsp + 0x156], ax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x158], rax
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x179]
mov qword [rsp + 0x131], rax
mov eax, dword [rsp + 0x181]
mov dword [rsp + 0x139], eax
movzx eax, word [rsp + 0x185]
mov word [rsp + 0x13d], ax
movzx eax, byte [rsp + 0x187]
mov byte [rsp + 0x13f], al
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0x120], xmm0
movups xmm0, xmmword [rsp + 0x188]
movaps xmmword [rsp + 0x140], xmm0
je 0x18008c5c9
movups xmm0, xmmword [rsp + 0x168]
movups xmm1, xmmword [rsp + 0x178]
movups xmm2, xmmword [rsp + 0x188]
movups xmm3, xmmword [rsp + 0x198]
movaps xmmword [rsp + 0x210], xmm3
movaps xmmword [rsp + 0x200], xmm2
movaps xmmword [rsp + 0x1f0], xmm1
movaps xmmword [rsp + 0x1e0], xmm0
xor ebp, ebp
mov rsi, qword [rsp + 0x68]
mov eax, dword [rsp + 0x3c]
test al, al
jne 0x18008c138
jmp 0x18008c11e
mov al, 1
mov dword [rsp + 0x160], eax
jmp 0x18008b263
mov ebp, dword [rsp + 0x11c]
mov rbx, qword [rdi + 0x38]
test rbx, rbx
jne 0x18008c027
jmp 0x18008c0a0
mov rsi, qword [rsp + 0x48]
cmp qword [rsi + 0xa0], 0
mov rdi, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
je 0x18008c75b
movups xmm0, xmmword [rsp + 0x90]
movdqu xmm1, xmmword [rsp + 0xa0]
movdqu xmm2, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0x240], xmm2
movdqa xmmword [rsp + 0x230], xmm1
movaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x270]
and rax, rbx
movdqu xmm0, xmmword [r8 + rax]
pmovmskb ecx, xmm0
test ecx, ecx
mov r14, qword [rsp + 0x260]
je 0x18008c671
mov rsi, qword [rsp + 0x68]
mov r9, qword [rsp + 0x258]
jmp 0x18008c69b
mov edx, 0x10
mov r9, qword [rsp + 0x258]
add rax, rdx
and rax, rbx
movdqu xmm0, xmmword [r8 + rax]
pmovmskb ecx, xmm0
add rdx, 0x10
test ecx, ecx
je 0x18008c67e
mov rsi, qword [rsp + 0x68]
tzcnt ecx, ecx
add rcx, rax
and rcx, rbx
movzx edx, byte [r8 + rcx]
test dl, dl
js 0x18008c6c0
movdqa xmm0, xmmword [r8]
pmovmskb eax, xmm0
tzcnt ecx, eax
movzx edx, byte [r8 + rcx]
lea rax, [rcx - 0x10]
and rax, rbx
mov byte [r8 + rcx], r9b
mov byte [rax + r8 + 0x10], r9b
neg rcx
lea rax, [rcx + rcx*4]
and dl, 1
movzx ecx, dl
mov rdx, qword [rsp + 0x48]
sub qword [rdx + 0xa0], rcx
shl rax, 4
movdqa xmm0, xmmword [rsp + 0x220]
movdqa xmm1, xmmword [rsp + 0x230]
movdqa xmm2, xmmword [rsp + 0x240]
movdqu xmmword [r8 + rax - 0x30], xmm2
movdqu xmmword [r8 + rax - 0x40], xmm1
movdqu xmmword [r8 + rax - 0x50], xmm0
mov qword [r8 + rax - 0x20], 8
pxor xmm0, xmm0
movdqu xmmword [r8 + rax - 0x18], xmm0
mov qword [r8 + rax - 8], 0
lea r15, [r8 + rax]
inc qword [rdx + 0xa8]
mov rcx, qword [r15 - 0x18]
mov rax, qword [r15 - 8]
cmp rax, rcx
je 0x18008be48
jmp 0x18008be59
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x268]
call fcn.180188b10
mov r8, qword [rsi + 0x90]
mov rbx, qword [rsi + 0x98]
jmp 0x18008c60d
ud2
mov ecx, 8
mov edx, 0x18
call fcn.1801828e0
ud2
call sub.KERNEL32.dll_GetLastError
ud2
mov ecx, 8
mov edx, 0x88
call fcn.1801828e0
ud2
xor ecx, ecx
xchg byte [rax + 0x38], cl
ud2
lea rcx, [rsp + 0x90]
call fcn.18008f5f0
ud2
mov ecx, 8
mov edx, 0x20
call fcn.1801828e0
ud2