Function at 0x140055700
Capabilities:
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2e8
mov rsi, rdx
mov qword [rsp + 0x128], rcx
movzx eax, byte [rdx + 0x378]
test eax, eax
mov qword [rsp + 0x58], r8
je 0x140055760
cmp eax, 3
jne case.0x140055d63.1
mov rbx, r8
lea rax, [rsi + 0x1f0]
mov qword [rsp + 0x120], rax
movzx eax, byte [rsi + 0x280]
lea rcx, [0x140127664]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rcx
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x40], rax
xor r12d, r12d
jmp 0x1400557d9
movzx eax, byte [rsi + 0x300]
test eax, eax
je 0x140055df6
cmp eax, 3
jne case.0x140055d63.1
lea rdi, [rsi + 0x2f8]
movzx eax, byte [rsi + 0x2f8]
lea r12, [rsi + 0x2b8]
test eax, eax
je 0x1400557c6
cmp eax, 3
jne case.0x140055d63.1
mov rax, qword [rsi + 0x2f0]
jmp 0x14005614d
mov rdx, qword [rsi + 0x2b8]
mov r8, qword [rsi + 0x2c0]
jmp 0x1400560c3
mov rcx, qword [rax + 0x10]
mov r15, r12
cmp rcx, qword [rax + 0x18]
je 0x140056c65
lea rdx, [rcx + 0x20]
mov qword [rax + 0x10], rdx
movzx r12d, word [rcx]
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x2ce], xmm0
movups xmm0, xmmword [rcx + 2]
movaps xmmword [rsp + 0x2c0], xmm0
cmp r12w, 2
je 0x140056c61
mov word [rsi + 0x48], r12w
movaps xmm0, xmmword [rsp + 0x2c0]
movups xmmword [rsi + 0x4a], xmm0
movups xmm0, xmmword [rsp + 0x2ce]
movups xmmword [rsi + 0x58], xmm0
mov rax, qword [rsi + 0x10]
mov r13, qword [rsi + 0x18]
mov rdi, qword [rax + 0x20]
mov ebx, dword [rax + 0x28]
test r12w, r12w
mov eax, 2
mov ebp, 0x17
cmove ebp, eax
mov rax, qword [0x1401a4078]
cmp rax, 3
jne 0x140056b73
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, ebp
mov edx, 1
mov r8d, 6
xor r9d, r9d
call sub.ws2_32.dll_WSASocketW
cmp rax, 0xffffffffffffffff
je 0x140056c7f
mov r14, rax
mov dword [rsp + 0x80], 1
lea r8, [rsp + 0x80]
mov rcx, rax
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x140056d3e
mov ebp, dword [r13 + 0x48]
cmp ebp, 0x3b9aca00
je 0x1400559ae
mov r15, qword [r13 + 0x40]
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 8
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x1400559a9
mov ecx, 0x3e8
mov rax, r15
mul rcx
mov ecx, ebp
imul rcx, rcx, 0x431bde83
shr rcx, 0x32
add rcx, rax
adc rdx, 0
mov eax, 0xffffffff
cmp rcx, rax
cmovae rcx, rax
xor eax, eax
neg rdx
sbb eax, eax
or eax, ecx
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x88], 0
mov dword [rsp + 0x60], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x80]
mov rcx, r14
mov edx, 0x98000004
mov r9d, 0xc
call sub.ws2_32.dll_WSAIoctl
cmp eax, 0xffffffff
jne 0x1400559ae
call sub.KERNEL32.dll_GetLastError
test r12w, r12w
je 0x140055a42
cmp byte [r13 + 0x56], 0
je 0x140055acb
movups xmm0, xmmword [r13 + 0x57]
movabs rax, 0x1c00000000
mov qword [rsp + 0xfc], rax
xorps xmm1, xmm1
movups xmmword [rsp + 0xec], xmm1
movups xmmword [rsp + 0xdc], xmm1
movups xmmword [rsp + 0xcc], xmm1
movups xmmword [rsp + 0xbc], xmm1
movups xmmword [rsp + 0xac], xmm1
movups xmmword [rsp + 0x9c], xmm1
movups xmmword [rsp + 0x88], xmm0
mov dword [rsp + 0x98], 0
mov qword [rsp + 0x80], 0x17
lea rdx, [rsp + 0x80]
mov rcx, r14
mov r8d, 0x1c
jmp 0x140055b6f
cmp byte [r13 + 0x51], 0
je 0x140055adf
mov eax, dword [r13 + 0x52]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0xf8], 0
mov dword [rsp + 0x80], 2
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x100], 0x10
lea rdx, [rsp + 0x80]
mov rcx, r14
mov r8d, 0x10
jmp 0x140055b6f
xorps xmm0, xmm0
movups xmmword [rsp + 0x62], xmm0
mov r8d, 0x1c
mov ax, 0x17
jmp 0x140055af8
mov dword [rsp + 0x60], 0
mov word [rsp + 0x64], 0
mov r8d, 0x10
mov ax, 2
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0xf8], 0
mov word [rsp + 0x80], ax
mov word [rsp + 0x82], 0
mov dword [rsp + 0x84], 0
mov dword [rsp + 0x100], r8d
lea rdx, [rsp + 0x80]
mov rcx, r14
call sub.ws2_32.dll_bind
xor r12d, r12d
test eax, eax
je 0x140055b8b
call sub.KERNEL32.dll_GetLastError
mov r12d, eax
shl r12, 0x20
or r12, 2
test r12, r12
jne 0x140056dc5
cmp byte [r13 + 0x68], 0
je 0x140055bce
mov dword [rsp + 0x80], 1
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 4
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x140055c1f
cmp qword [r13], 0
je 0x140055c2b
mov rax, qword [r13 + 8]
mov rcx, rax
shr rcx, 0x20
xor edx, edx
neg rcx
sbb edx, edx
or edx, eax
mov dword [rsp + 0x80], edx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 0x1001
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x140055c2b
call sub.KERNEL32.dll_GetLastError
jmp 0x140055c2b
call sub.KERNEL32.dll_GetLastError
cmp qword [r13], 0
jne 0x140055bd5
cmp qword [r13 + 0x10], 0
je case.default.0x140055d63
mov rax, qword [r13 + 0x18]
mov rcx, rax
shr rcx, 0x20
xor edx, edx
neg rcx
sbb edx, edx
or edx, eax
mov dword [rsp + 0x80], edx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x80]
mov rcx, r14
mov edx, 0xffff
mov r8d, 0x1002
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne case.default.0x140055d63
call sub.KERNEL32.dll_GetLastError
movups xmm0, xmmword [rsi + 0x48]
movups xmm1, xmmword [rsi + 0x58]
lea r15, [rsi + 0x68]
mov qword [rsi + 0x68], rdi
mov dword [rsi + 0x70], ebx
movups xmmword [rsi + 0x78], xmm0
movups xmmword [rsi + 0x88], xmm1
mov qword [rsi + 0x98], r14
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmm3, xmmword [rsp + 0x160]
movups xmmword [rsi + 0xa0], xmm0
movups xmmword [rsi + 0xb0], xmm1
movups xmmword [rsi + 0xc0], xmm2
movups xmmword [rsi + 0xd0], xmm3
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsi + 0xe0], xmm0
mov byte [rsi + 0xf0], 0
mov eax, dword [rsp + 0x1a9]
mov ecx, dword [rsp + 0x1ac]
mov dword [rsi + 0xf4], ecx
mov dword [rsi + 0xf1], eax
mov byte [rsi + 0xf8], 0
lea rcx, [rsi + 0xf9]
lea rdx, [rsp + 0x1c0]
mov r8d, 0xf7
call sub.msvcrt.dll_memcpy
lea rcx, [rsi + 0x1f0]
mov r8d, 0x188
mov qword [rsp + 0x120], rcx
mov rdx, r15
call sub.msvcrt.dll_memcpy
movzx eax, byte [rsi + 0x280]
lea rcx, [0x140127664]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
mov rbx, qword [rsp + 0x58]
jmp rax
mov ebp, dword [rsi + 0x1f8]
cmp ebp, 0x3b9aca00
jne 0x140055ee0
movups xmm0, xmmword [rsi + 0x270]
movups xmmword [rsi + 0x2f8], xmm0
movups xmm0, xmmword [rsi + 0x260]
movups xmmword [rsi + 0x2e8], xmm0
movups xmm0, xmmword [rsi + 0x250]
movups xmmword [rsi + 0x2d8], xmm0
movups xmm0, xmmword [rsi + 0x240]
movups xmmword [rsi + 0x2c8], xmm0
movups xmm0, xmmword [rsi + 0x200]
movups xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movups xmmword [rsi + 0x2b8], xmm3
movups xmmword [rsi + 0x2a8], xmm2
movups xmmword [rsi + 0x298], xmm1
movups xmmword [rsi + 0x288], xmm0
movzx eax, byte [rsi + 0x300]
test eax, eax
jne 0x14005578f
mov rcx, qword [rsi + 0x2a8]
mov qword [rsi + 0x2b0], rcx
cmp word [rsi + 0x288], 0
movzx eax, word [rsi + 0x29a]
mov word [rsp + 0x140], ax
movups xmm0, xmmword [rsi + 0x28a]
movaps xmmword [rsp + 0x130], xmm0
je 0x140055ff9
mov edx, dword [rsi + 0x29c]
mov r8d, dword [rsi + 0x2a0]
movzx eax, word [rsi + 0x2a4]
mov r9, qword [rsp + 0x132]
mov r10d, dword [rsp + 0x13a]
movzx r11d, word [rsp + 0x13e]
movzx edi, word [rsp + 0x140]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1dc], xmm0
movups xmmword [rsp + 0x1ec], xmm0
movups xmmword [rsp + 0x1fc], xmm0
movups xmmword [rsp + 0x20c], xmm0
movups xmmword [rsp + 0x21c], xmm0
movups xmmword [rsp + 0x22c], xmm0
rol ax, 8
mov dword [rsp + 0x23c], 0
mov qword [rsp + 0x1c8], r9
mov dword [rsp + 0x1d0], r10d
mov word [rsp + 0x1d4], r11w
mov word [rsp + 0x1d6], di
mov dword [rsp + 0x1d8], r8d
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x14005604c
mov r15, qword [rsi + 0x1f0]
movups xmm0, xmmword [rsi + 0x270]
movaps xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [rsi + 0x260]
movaps xmmword [rsp + 0xe0], xmm0
movups xmm0, xmmword [rsi + 0x250]
movaps xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [rsi + 0x240]
movaps xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsi + 0x200]
movups xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x130], 0
lea rcx, [rsp + 0x130]
call sub.KERNEL32.dll_QueryPerformanceCounter
test eax, eax
je 0x140057044
mov r12, qword [rsp + 0x130]
mov rcx, qword [0x1401a4140]
test rcx, rcx
mov rbx, qword [rsp + 0x50]
jne 0x140055fd2
mov qword [rsp + 0x130], 0
lea rcx, [rsp + 0x130]
call sub.KERNEL32.dll_QueryPerformanceFrequency
test eax, eax
je 0x140057044
mov rcx, qword [rsp + 0x130]
mov qword [0x1401a4140], rcx
test rcx, rcx
je case.0x140055d63.1
mov rax, r12
or rax, rcx
shr rax, 0x20
je 0x14005621e
mov rax, r12
xor edx, edx
div rcx
jmp 0x140056225
mov rbx, qword [rsp + 0x50]
jmp 0x1400563ba
lea r8, [rsp + 0x1c8]
movzx eax, word [rsp + 0x134]
rol ax, 8
mov edx, dword [rsp + 0x130]
xorps xmm0, xmm0
movups xmmword [r8 + 0x60], xmm0
movups xmmword [r8 + 0x50], xmm0
movups xmmword [r8 + 0x40], xmm0
movups xmmword [r8 + 0x30], xmm0
movups xmmword [r8 + 0x20], xmm0
movups xmmword [r8 + 0x10], xmm0
movups xmmword [r8], xmm0
mov qword [r8 + 0x70], 0
mov r8d, 0x10
mov r9w, 2
mov word [rsp + 0x1c0], r9w
mov word [rsp + 0x1c2], ax
mov dword [rsp + 0x1c4], edx
mov dword [rsp + 0x240], r8d
lea rdx, [rsp + 0x1c0]
call sub.ws2_32.dll_connect
test eax, eax
je 0x14005608d
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x2733
jne 0x14005683b
mov rdx, qword [rsi + 0x2b0]
lea r12, [rsi + 0x2b8]
mov qword [rsi + 0x2b8], rdx
mov qword [rsi + 0x2c0], 0
lea rdi, [rsi + 0x2f8]
mov byte [rsi + 0x2f8], 0
xor r8d, r8d
mov rbx, qword [rsp + 0x58]
lea rcx, [rsp + 0x1c0]
call fcn.1400fc0a0
mov rcx, qword [rsp + 0x1c0]
cmp rcx, 2
jne 0x1400560eb
mov r15, qword [rsp + 0x1c8]
jmp 0x140056936
mov rdx, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x80], xmm0
lea rax, [rsi + 0x2c8]
mov qword [rsi + 0x2c8], rcx
mov qword [rsi + 0x2d0], rdx
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [rsi + 0x2d8], xmm0
mov rcx, qword [rsp + 0x90]
mov qword [rsi + 0x2e8], rcx
mov qword [rsi + 0x2f0], rax
mov rdx, qword [rax + 0x10]
lea r13, [rsp + 0x1c0]
mov rcx, r13
mov r8, rbx
mov r9b, 1
call fcn.1401052c0
movzx eax, byte [rsp + 0x1c9]
cmp al, 3
je 0x140056fdc
mov r15, qword [rsp + 0x1c0]
cmp al, 2
je 0x14005692a
mov rcx, qword [rsi + 0x2e0]
cmp rcx, 0xffffffffffffffff
je case.0x140055d63.1
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x1c0], 4
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x80]
mov edx, 0xffff
mov r8d, 0x1007
call sub.ws2_32.dll_getsockopt
cmp eax, 0xffffffff
je 0x14005691a
movsxd r15, dword [rsp + 0x80]
test r15, r15
jne 0x140056922
mov r14, qword [rsi + 0x2c8]
mov r15, qword [rsi + 0x2d0]
mov rdi, qword [rsi + 0x2d8]
mov r13, qword [rsi + 0x2e0]
mov rbp, qword [rsi + 0x2e8]
mov byte [rsi + 0x2f8], 1
cmp r14, 3
jne 0x14005693f
jmp 0x140056fdf
mov eax, r12d
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x140056249
xor edx, edx
div rcx
mov rcx, rax
jmp 0x14005624f
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
movabs rdx, 0x44b82fa09b5a53
mul rdx
shr rdx, 0xb
add r15, rdx
jae 0x14005627e
lea rcx, [rsp + 0x130]
call fcn.140105990
jmp 0x1400562b0
imul rax, rdx, 0x3b9aca00
sub rcx, rax
add ebp, ecx
cmp ebp, 0x3b9aca00
jb 0x14005629d
add ebp, 0xc4653600
inc r15
je 0x14005626f
lea rcx, [rsp + 0x130]
mov rdx, r15
mov r8d, ebp
call fcn.140105850
movups xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x220], xmm0
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x210], xmm0
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x200], xmm0
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmm3, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x1f0], xmm3
movaps xmmword [rsp + 0x1e0], xmm2
movaps xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1c0], xmm0
movaps xmm0, xmmword [rsp + 0x80]
movaps xmm1, xmmword [rsp + 0x90]
movaps xmm2, xmmword [rsp + 0xa0]
movaps xmm3, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x230], xmm0
movaps xmmword [rsp + 0x240], xmm1
movaps xmmword [rsp + 0x250], xmm2
movaps xmmword [rsp + 0x260], xmm3
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x270], xmm0
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x280], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x290], xmm0
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x2a0], xmm0
lea rcx, [rsi + 0x288]
lea rdx, [rsp + 0x1c0]
mov r8d, 0xf0
call sub.msvcrt.dll_memcpy
lea rax, [rsi + 0x288]
mov qword [rsp + 0x50], rax
xor r15d, r15d
xor ecx, ecx
call fcn.1400bf680
test rax, rax
je 0x1400563e7
cmp byte [rax + 0x4c], 0
setne cl
cmp byte [rax + 0x4d], 0
sete r15b
and r15b, cl
movzx eax, byte [rsi + 0x370]
test eax, eax
je 0x140056436
cmp eax, 3
jne case.0x140055d63.1
lea r14, [rsi + 0x368]
movzx eax, byte [rsi + 0x368]
test eax, eax
je 0x14005650b
mov rbp, rbx
cmp eax, 3
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
jne case.0x140055d63.1
mov rax, qword [rsi + 0x360]
jmp 0x140056670
mov rcx, qword [rsi + 0x318]
mov qword [rsi + 0x320], rcx
cmp word [rsi + 0x2f8], 0
movzx eax, word [rsi + 0x30a]
mov word [rsp + 0x70], ax
movups xmm0, xmmword [rsi + 0x2fa]
movaps xmmword [rsp + 0x60], xmm0
je 0x14005651e
mov edx, dword [rsi + 0x30c]
mov r8d, dword [rsi + 0x310]
movzx eax, word [rsi + 0x314]
mov r9, qword [rsp + 0x62]
mov r10d, dword [rsp + 0x6a]
movzx r11d, word [rsp + 0x6e]
movzx edi, word [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x9c], xmm0
movups xmmword [rsp + 0xac], xmm0
movups xmmword [rsp + 0xbc], xmm0
movups xmmword [rsp + 0xcc], xmm0
movups xmmword [rsp + 0xdc], xmm0
movups xmmword [rsp + 0xec], xmm0
rol ax, 8
mov dword [rsp + 0xfc], 0
mov qword [rsp + 0x88], r9
mov dword [rsp + 0x90], r10d
mov word [rsp + 0x94], r11w
mov word [rsp + 0x96], di
mov dword [rsp + 0x98], r8d
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x14005656b
mov rdx, qword [rsi + 0x328]
mov r8, qword [rsi + 0x330]
jmp 0x1400565d6
lea r8, [rsp + 0x88]
movzx eax, word [rsp + 0x64]
rol ax, 8
mov edx, dword [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [r8 + 0x60], xmm0
movups xmmword [r8 + 0x50], xmm0
movups xmmword [r8 + 0x40], xmm0
movups xmmword [r8 + 0x30], xmm0
movups xmmword [r8 + 0x20], xmm0
movups xmmword [r8 + 0x10], xmm0
movups xmmword [r8], xmm0
mov qword [r8 + 0x70], 0
mov r8d, 0x10
mov r9w, 2
mov word [rsp + 0x80], r9w
mov word [rsp + 0x82], ax
mov dword [rsp + 0x84], edx
mov dword [rsp + 0x100], r8d
lea rdx, [rsp + 0x80]
call sub.ws2_32.dll_connect
test eax, eax
je 0x1400565ac
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x2733
jne 0x140056809
mov rdx, qword [rsi + 0x320]
mov qword [rsi + 0x328], rdx
mov qword [rsi + 0x330], 0
lea r14, [rsi + 0x368]
mov byte [rsi + 0x368], 0
xor r8d, r8d
lea rcx, [rsp + 0x80]
call fcn.1400fc0a0
mov rcx, qword [rsp + 0x80]
cmp rcx, 2
jne 0x1400565fe
mov r12, qword [rsp + 0x88]
jmp 0x1400569a7
mov rdx, qword [rsp + 0x88]
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x140], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x130], xmm0
lea rax, [rsi + 0x338]
mov qword [rsi + 0x338], rcx
mov qword [rsi + 0x340], rdx
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rsi + 0x348], xmm0
mov rcx, qword [rsp + 0x140]
mov qword [rsi + 0x358], rcx
mov qword [rsi + 0x360], rax
mov rbp, rbx
mov rbx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rax + 0x10]
lea r13, [rsp + 0x80]
mov rcx, r13
mov r8, qword [rsp + 0x58]
mov r9b, 1
call fcn.1401052c0
movzx eax, byte [rsp + 0x89]
cmp al, 3
jne 0x140056762
mov byte [r14], 3
mov byte [rsi + 0x370], 3
xor ecx, ecx
call fcn.1400bf680
test rax, rax
je 0x1400566d0
cmp byte [rax + 0x4c], 0
sete cl
cmp byte [rax + 0x4d], 0
setne al
or al, cl
or r15b, al
cmp r15b, 1
jne 0x14005687b
mov r14, qword [rsp + 0x58]
mov r12, qword [r14]
xor ecx, ecx
call fcn.140102310
test rax, rax
mov r13, qword [rsp + 0x108]
je 0x1400568f6
movzx r15d, byte [rax + 0x4c]
movzx r14d, byte [rax + 0x4d]
test r15b, r15b
je 0x140056708
test r14b, r14b
je 0x140057005
xor ecx, ecx
mov edx, r14d
sub dl, 1
movzx edx, dl
cmovb edx, ecx
test r15b, r15b
movzx ecx, r14b
cmovne ecx, edx
mov byte [rax + 0x4d], cl
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.1401026a0
test r15b, r15b
je 0x140056903
cmp al, 4
jne 0x140056903
xor ecx, ecx
call fcn.140102310
mov cl, 3
test rax, rax
je 0x140057013
mov byte [rax + 0x4c], 1
mov byte [rax + 0x4d], r14b
jmp 0x140057013
mov r12, qword [rsp + 0x80]
cmp al, 2
je 0x14005699b
mov rcx, qword [rsi + 0x350]
cmp rcx, 0xffffffffffffffff
je case.0x140055d63.1
mov dword [rsp + 0x130], 0
mov dword [rsp + 0x80], 4
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x130]
mov edx, 0xffff
mov r8d, 0x1007
call sub.ws2_32.dll_getsockopt
cmp eax, 0xffffffff
je 0x14005698b
movsxd r12, dword [rsp + 0x130]
test r12, r12
jne 0x140056993
mov r14, qword [rsi + 0x338]
mov r12, qword [rsi + 0x340]
mov rax, qword [rsi + 0x348]
mov rcx, qword [rsi + 0x350]
mov rdx, qword [rsi + 0x358]
mov byte [rsi + 0x368], 1
cmp r14, 3
je 0x1400566a0
jmp 0x1400569b1
mov r12d, eax
shl r12, 0x20
or r12, 2
mov rcx, qword [rsi + 0x320]
call fcn.14012054c
mov r14d, 2
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x110]
mov rdx, rbx
jmp 0x1400569b1
mov r15d, eax
shl r15, 0x20
or r15, 2
mov rcx, qword [rsi + 0x2b0]
call fcn.14012054c
mov r14d, 2
mov byte [rsi + 0x300], 1
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
cmp r14, 2
je 0x140056a42
jmp 0x140056965
xor ecx, ecx
call fcn.1400bf680
mov r15b, 2
test rax, rax
mov r13, qword [rsp + 0x108]
je 0x1400568a3
movzx r15d, byte [rax + 0x4c]
movzx ecx, byte [rax + 0x4d]
mov byte [rsp + 0x48], cl
mov byte [rax + 0x4c], 0
mov r14, qword [rsp + 0x58]
mov r12, qword [r14]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x140056ba7
movzx r13d, byte [rax + 0x4c]
movzx r14d, byte [rax + 0x4d]
test r13b, r13b
je 0x140056bd1
test r14b, r14b
jne 0x140056bd1
mov rax, qword [r12]
mov rcx, qword [r12 + 8]
call qword [rax + 0x10]
mov r13, qword [rsp + 0x108]
movzx r12d, byte [rsp + 0x48]
jmp 0x140056c2a
mov rcx, qword [rsp + 0x50]
mov rdx, r14
call fcn.1401026a0
test al, al
jne 0x140056ff7
mov rcx, qword [rsp + 0x50]
call fcn.140057950
jmp 0x1400569ff
call sub.ws2_32.dll_WSAGetLastError
mov r15d, eax
shl r15, 0x20
or r15, 2
lea rcx, [rsi + 0x2c8]
call fcn.1400570c0
mov byte [rdi], 1
mov r14d, 2
mov rcx, r12
call fcn.140057880
mov byte [rsi + 0x300], 1
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x110]
cmp r14, 2
je 0x140056a42
mov byte [rsi + 0x280], 1
mov rcx, qword [rsp + 0x120]
call fcn.140057050
mov r8, qword [rsi + 0x20]
test r8, r8
jne 0x140056ea8
jmp 0x140056fbd
call sub.ws2_32.dll_WSAGetLastError
mov r12d, eax
shl r12, 0x20
or r12, 2
lea rcx, [rsi + 0x338]
call fcn.1400570c0
mov byte [r14], 1
mov r14d, 2
mov byte [rsi + 0x370], 1
mov rdi, rax
mov rbx, rcx
mov r13, rdx
mov qword [rsp + 0x1b8], rcx
mov qword [rsp + 0x1b0], rax
mov r15, r12
mov rbp, rdx
cmp r14, 4
je 0x140057011
mov rcx, qword [rsp + 0x50]
call fcn.140057950
cmp r14, 2
mov qword [rsp + 0x118], r15
je 0x140056a0f
cmp r14, 3
jne 0x140056a15
mov r14d, 2
call fcn.1400905b0
mov r15, rax
jmp 0x140056a15
mov r14d, 2
mov rax, rdi
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x108], r13
mov rbp, r13
mov r13, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x1b0]
cmp r14, 2
jne 0x140056965
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x48], rax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056a7a
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x11
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r12, rax
movups xmm0, xmmword [0x14016f934]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x72
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056acc
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r13, rax
mov qword [rax], r15
mov byte [rsi + 0x280], 1
mov rcx, qword [rsp + 0x120]
call fcn.140057050
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x140056b4f
cmp qword [rsi + 0x28], 0
je 0x140056b1a
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsi + 0x30]
test r14, r14
je 0x140056b4f
mov rdi, qword [rsi + 0x38]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140056b4f
cmp qword [rdi + 0x10], 0x11
jb 0x140056b3e
mov r14, qword [r14 - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov qword [rsi + 0x20], r12
mov qword [rsi + 0x28], 0x11
mov qword [rsi + 0x30], r13
lea rax, [0x1401712d0]
mov qword [rsi + 0x38], rax
mov rax, qword [rsi + 0x40]
jmp 0x1400557d9
mov byte [rsp + 0x60], 1
lea rax, [rsp + 0x60]
mov qword [rsp + 0x80], rax
lea rcx, [0x1401a4078]
lea r9, [0x140172268]
lea r8, [rsp + 0x80]
xor edx, edx
call fcn.1400e9910
jmp 0x140055867
mov rcx, qword [rsp + 0x50]
mov rdx, r14
call fcn.1401026a0
movzx r12d, byte [rsp + 0x48]
mov r14d, 3
test al, al
je 0x140056c30
movzx eax, al
cmp eax, 4
je 0x140056c2a
jmp case.0x140055d63.1
xor ecx, ecx
mov edx, r14d
sub dl, 1
movzx edx, dl
cmovb edx, ecx
test r13b, r13b
movzx ecx, r14b
cmovne ecx, edx
mov byte [rax + 0x4d], cl
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.1401026a0
test r13b, r13b
je 0x140056fea
cmp al, 4
mov r13, qword [rsp + 0x108]
movzx r12d, byte [rsp + 0x48]
jne 0x140056bba
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x140056c2a
mov byte [rax + 0x4c], 1
mov byte [rax + 0x4d], r14b
mov r14d, 4
cmp r15b, 2
je 0x140056c4a
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x140056c4a
mov byte [rax + 0x4c], r15b
mov byte [rax + 0x4d], r12b
mov r15, qword [rsp + 0x118]
cmp r14, 4
jne 0x1400569e1
jmp 0x140057011
mov r15, qword [rsi + 0x20]
test r15, r15
je 0x140056f03
mov rdi, qword [rsi + 0x28]
mov r13, qword [rsi + 0x30]
mov rbp, qword [rsi + 0x38]
jmp 0x140056fb7
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056cb1
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0xe
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r15, rax
movabs rax, 0x726f727265206e65
mov qword [r15 + 6], rax
movabs rax, 0x6e65706f20706374
mov qword [r15], rax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056d10
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r13, rax
shl rbx, 0x20
or rbx, 2
mov qword [rax], rbx
mov edi, 0xe
jmp 0x140056e6e
call sub.KERNEL32.dll_GetLastError
mov r12d, eax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056d71
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov edi, 0x19
mov r8d, 0x19
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r15, rax
shl r12, 0x20
or r12, 2
movups xmm0, xmmword [0x14015f757]
movups xmmword [rax + 9], xmm0
movups xmm0, xmmword [0x14015f74e]
movups xmmword [rax], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056e4a
jmp 0x140056e32
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056df0
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov edi, 0x14
mov r8d, 0x14
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r15, rax
movups xmm0, xmmword [0x14015f767]
movups xmmword [rax], xmm0
mov dword [rax + 0x10], 0x726f7272
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056e4a
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r13, rax
mov qword [rax], r12
mov rcx, r14
call fcn.14012054c
mov qword [rsi + 0x78], r15
mov qword [rsi + 0x80], rdi
mov qword [rsi + 0x88], r13
lea rbp, [0x140160338]
mov qword [rsi + 0x90], rbp
mov dword [rsi + 0x70], 0x3b9aca01
mov r14d, 2
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x140056fbd
cmp qword [rsi + 0x28], 0
je 0x140056ebd
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsi + 0x30]
test rbx, rbx
je 0x140056fbd
mov r12, qword [rsi + 0x38]
mov rcx, rbx
call qword [r12]
cmp qword [r12 + 8], 0
je 0x140056fbd
cmp qword [r12 + 0x10], 0x11
jb 0x140056eed
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
jmp 0x140056fbd
lea rdx, [0x14016f921]
mov r8d, 0x13
mov cl, 7
call fcn.140090610
mov rbx, rax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056f45
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x11
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r15, rax
movups xmm0, xmmword [0x14016f934]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0x72
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140056f93
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x140055d63.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x140055d63.1
mov r13, rax
mov qword [rax], rbx
lea rbp, [0x1401712d0]
mov edi, 0x11
mov r14d, 2
mov rax, qword [rsp + 0x128]
mov qword [rax], r14
mov qword [rax + 8], r15
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], rbp
mov al, 1
jmp 0x14005702a
mov byte [rdi], 3
mov byte [rsi + 0x300], 3
mov cl, 4
jmp 0x140057013
mov r13, qword [rsp + 0x108]
jmp 0x140056bb4
movzx eax, al
mov cl, 3
cmp eax, 4
je 0x140057013
ud2
ud2
mov rax, qword [r12]
mov rcx, qword [r12 + 8]
call qword [rax + 0x10]
mov cl, 3
mov byte [rsi + 0x280], cl
mov rax, qword [rsp + 0x128]
mov qword [rax], 3
mov al, 3
mov byte [rsi + 0x378], al
add rsp, 0x2e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.KERNEL32.dll_GetLastError
ud2
add byte [rax - 0x77], cl
invalid
lock dec qword [rax]
jne 0x140057528
call fcn.14006f510
jmp 0x140057528
mov edi, dword [rdi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rdi
jmp 0x1400574ef
or al, 0x48
lea ecx, [rsi + 0x9f8]
call fcn.1400570c0
mov byte [rsi + 0x9f1], 0
lea rcx, [rsi + 0x950]
call fcn.1401028c0
lea rcx, [rsi + 0x958]
cmp qword [rsi + 0x950], 0
je 0x1400573c9
mov rax, qword [rcx]
lock dec qword [rax]
jne 0x1400573d7
call fcn.14006f510
jmp 0x1400573d7
mov rax, qword [rcx]
lock dec qword [rax]
jne 0x1400573d7
call fcn.140039fc0
mov rax, qword [rsi + 0x998]
test rax, rax
je 0x1400573ed
mov rcx, qword [rsi + 0x9a0]
call qword [rax + 0x18]
cmp byte [rsi + 0x948], 3
jne 0x140057461
lea rcx, [rsi + 0x7c0]
call fcn.140057050
mov r8, qword [rsi + 0x5f0]
test r8, r8
je 0x140057461
cmp qword [rsi + 0x5f8], 0
je 0x140057426
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsi + 0x600]
test rdi, rdi
je 0x140057461
mov rbx, qword [rsi + 0x608]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140057461
cmp qword [rbx + 0x10], 0x11
jb 0x140057450
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
cmp byte [rsi + 0x5c8], 3
jne 0x1400574d5
lea rcx, [rsi + 0x440]
call fcn.140057050
mov r8, qword [rsi + 0x270]
test r8, r8
je 0x1400574d5
cmp qword [rsi + 0x278], 0
je 0x14005749a
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsi + 0x280]
test rdi, rdi
je 0x1400574d5
mov rbx, qword [rsi + 0x288]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400574d5
cmp qword [rbx + 0x10], 0x11
jb 0x1400574c4
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsi + 0x228], 0
je 0x1400574f4
mov r8, qword [rsi + 0x220]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
add rsi, 0x178
cmp qword [rsi + 8], 0
je case.0x140057249.1
mov r8, qword [rsi]
mov rcx, qword [0x1401a4160]
xor edx, edx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp sub.KERNEL32.dll_HeapFree
mov rax, qword [rsi + 0x48]
test rax, rax
je 0x140057538
mov rcx, qword [rsi + 0x50]
call qword [rax + 0x18]
add rsi, 0x70
cmp qword [rsi + 8], 0
jne 0x140057502
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
clc
invalid
add dl, cl
invalid
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005d000
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x14005cfed
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14005cf3b
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005cf57
call fcn.140071fb0
mov rax, qword [rsi + 0x70]
test rax, rax
je 0x14005cf6c
mov rcx, qword [rsi + 0x78]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14005cfed
cmp byte [rcx], al
add byte [rax], al
add byte [rax - 0x39], cl
and al, 0x40
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.140087520
mov rcx, rsi
call fcn.1400753a0
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je 0x14005d078
test al, 4
je 0x14005d2ec
test al, 3
je 0x14005d030
cmp rax, 0x3f
jbe 0x14005d2ec
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005d04a
lea rax, [0x1401276a4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rsi
lea r14, [rsp + 0x20]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x30], esi
mov rax, qword [rsi + 0x30]
cmp rax, 5
je 0x14005d0b9
and eax, 0xfffffffe
cmp eax, 6
je 0x14005d2ec
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d12a
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005d12d
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140084900
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14005d2c9
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.14009aee0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d14c
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005d266
mov rax, qword [rsi]
jmp 0x14005d176
test rcx, rcx
js 0x14005d2ec
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005d1af
test al, 1
je 0x14005d2ec
test al, 0x20
jne 0x14005d287
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005d160
cmp rcx, 0x3f
jbe 0x14005d2ec
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005d176
cmp dl, 2
je 0x14005d220
movzx eax, dl
cmp eax, 1
jne 0x14005d2d6
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
cmp al, ch
invalid
popfq
or al, byte [rax]
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005d2ec
cmp al, ch
invalid
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x14005d2d6
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14005d21b
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005d237
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005d233
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
call fcn.140072a20
mov rax, qword [rsi + 0x228]
test rax, rax
je 0x14005d252
mov rcx, qword [rsi + 0x230]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14005d2d6
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140084900
mov qword [rsp + 0x40], 0
jmp 0x14005d2b8
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140084900
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140084900
mov rcx, rsi
call fcn.140075690
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x230
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je 0x14005d358
test al, 4
je 0x14005d5af
test al, 3
je 0x14005d310
cmp rax, 0x3f
jbe 0x14005d5af
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005d32a
lea rax, [0x1401276b4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 3
jae 0x14005d5af
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d3fe
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005d401
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087160
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14005d58e
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.1400863c0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d420
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005d52b
mov rax, qword [rsi]
jmp 0x14005d456
test rcx, rcx
js 0x14005d5af
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005d48f
test al, 1
je 0x14005d5af
test al, 0x20
jne 0x14005d54c
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005d440
cmp rcx, 0x3f
jbe 0x14005d5af
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005d456
cmp dl, 2
je case.0x14005d366.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14005d366.2
mov rcx, rbx
mov rdx, rsi
call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005d5af
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005d366.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14005d4e0
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
jmp 0x14005d4fc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005d4f8
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
call fcn.140073ae0
mov rax, qword [rsi + 0xfc0]
test rax, rax
je 0x14005d517
mov rcx, qword [rsi + 0xfc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005d366.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140087160
mov qword [rsp + 0x48], 0
jmp 0x14005d57d
invalid
xor dword [rax - 0x39], ecx
and al, 0x40
add al, 0
add byte [rax], al
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140087160
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140087160
mov rcx, rsi
call fcn.1400750b0
movaps xmm6, xmmword [rsp + 0xfc0]
add rsp, 0xfd8
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
mov rax, qword [rcx]
jmp 0x14005d5fa
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005d366.4
test al, 4
je 0x14005d89c
test al, 3
je 0x14005d5e0
cmp rax, 0x3f
jbe 0x14005d89c
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
cmpxchg dword [rsi], edx
cmpxchg dword [rsi], edx
jne 0x14005d5fa
lea rax, [0x1401276c4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea r14, [rsp + 0x28]
mov qword [rsp + 0x38], r14
cmp dword [rsi + 0x30], 3
jae 0x14005d89c
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d6ce
movups xmm6, xmmword [rax + 0x20]
jo 0x14005d695
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005d6d1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140085ee0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14005d879
xorps xmm6, xmm6
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140085830
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d6f0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005d816
mov rax, qword [rsi]
jmp 0x14005d726
test rcx, rcx
js 0x14005d89c
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005d75f
test al, 1
je 0x14005d89c
test al, 0x20
jne 0x14005d837
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005d710
cmp rcx, 0x3f
jbe 0x14005d89c
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005d726
cmp dl, 2
je case.0x14005d636.3
movzx eax, dl
cmp eax, 1
jne case.0x14005d636.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.140106f80
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005d89c
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005d636.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005d7e7
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005d7e3
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
call fcn.140072130
mov rax, qword [rsi + 0x2e0]
test rax, rax
je 0x14005d802
mov rcx, qword [rsi + 0x2e8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005d636.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
mov ah, 0x86
add al, byte [rax]
fld1
mov ah, 0x86
add al, byte [rax]
mov qword [rsp + 0x48], 0
jmp 0x14005d868
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140085ee0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140085ee0
mov rcx, rsi
call fcn.140075790
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x1f0], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005d8da
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005d636.4
test al, 4
je 0x14005db5f
test al, 3
je 0x14005d8c0
cmp rax, 0x3f
jbe 0x14005db5f
lea rdx, [rax - 0x40]
cmp rdx, 0x40
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005d8da
lea rax, [0x1401276d4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
cmp dword [rsi + 0x30], 0xb
jae 0x14005db5f
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005d9ae
movups xmm6, xmmword [rax + 0x20]
jo 0x14005d975
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005d9b1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1400860d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14005db3e
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.14009a9c0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005d9d0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x140055d63.30
mov rax, qword [rsi]
jmp 0x14005da06
test rcx, rcx
js 0x14005db5f
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005da3f
test al, 1
je 0x14005db5f
test al, 0x20
jne 0x14005dafc
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005d9f0
cmp rcx, 0x3f
jbe 0x14005db5f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005da06
cmp dl, 2
je case.0x14005d916.3
movzx eax, dl
cmp eax, 1
jne case.0x14005d916.2
mov rcx, rbx
mov rdx, rsi
call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005db5f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005d916.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
jmp 0x14005daac
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005daa8
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
call fcn.140073240
mov rax, qword [rsi + 0x1f8]
test rax, rax
je 0x14005dac7
mov rcx, qword [rsi + 0x200]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005d916.2
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400860d0
mov qword [rsp + 0x40], 0
jmp 0x14005db2d
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400860d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
and al, 0x58
and al, 0x58
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400860d0
mov rcx, rsi
call fcn.140074ec0
movaps xmm6, xmmword [rsp + 0x1f0]
add rsp, 0x208
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop dword [rax + rax]
push rsi
push rdi
push rbx
sub rsp, 0x50
movaps xmmword [rsp + 0x40], xmm6
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005dbaa
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005d916.4
test al, 4
je 0x14005dece
test al, 3
je 0x14005db90
cmp rax, 0x3f
jbe 0x14005dece
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005dbaa
lea rax, [0x1401276e4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp byte [rsi + 0xa8], 3
add byte [rax], al
add byte [rbx], al
add byte [rax], al
add byte [rbx], al
jae 0x14005dece
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005dc5f
movups xmm6, xmmword [rax + 0x20]
jo 0x14005dc48
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005dc62
mov rdi, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005ddae
add byte [rax], al
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
jmp 0x14005ddb1
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.14009b0f0
mov ebx, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005dc81
movups xmmword [rax + 0x20], xmm6
test bl, bl
je 0x14005dd85
lea rbx, [rsi + 0x20]
mov rax, qword [rsi]
test al, 1
je 0x14005dece
test al, 0x20
jne 0x14005de1a
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005dcd0
cmp rcx, 0x3f
jbe 0x14005dece
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005dc90
jmp 0x14005dce6
test rcx, rcx
js 0x14005dece
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
jne 0x14005dc90
cmp dl, 2
je case.0x14005dbe6.3
movzx eax, dl
cmp eax, 1
jne case.0x14005dbe6.2
mov rcx, rbx
mov rdx, rsi
call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005dece
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005dbe6.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
jmp 0x14005dd53
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005dd4f
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
call fcn.1400725a0
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x14005dd6e
mov rcx, qword [rsi + 0xc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005dbe6.2
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005de43
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005de46
xorps xmm6, xmm6
lea rdi, [rsi + 0x30]
mov rcx, rdi
call fcn.1400725a0
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005ddd4
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005ddf6
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005ddf9
xorps xmm6, xmm6
mov rcx, rdi
call fcn.1400725a0
mov qword [rsi + 0x30], 1
mov qword [rsi + 0x38], 0
mov qword [rsi + 0x48], rbx
jmp 0x14005de9a
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005dec6
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
add byte [rax - 0x77], cl
pop rax
sub cl, ch
jb 0x14005de40
invalid
invalid
add byte [rax - 0x77], cl
pop rax
sub cl, ch
jb 0x14005de40
invalid
invalid
xorps xmm6, xmm6
mov rcx, rdi
call fcn.1400725a0
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005de65
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005de87
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005de8a
xorps xmm6, xmm6
test byte [rax - 0x77], 0xf9
mov rcx, rdi
call fcn.1400725a0
mov qword [rsi + 0x30], 0
invalid
add dh, al
xchg byte [rax + 0x3000000], ch
mov byte [rsi + 0xa8], 3
xor ecx, ecx
call fcn.140102310
test rax, rax
test eax, eax
test eax, eax
je 0x14005deb1
movups xmmword [rax + 0x20], xmm6
mov rcx, rsi
call fcn.140074890
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
xorps xmm6, xmm6
jmp 0x14005ddb5
imul cl
out 0xfe, eax
invalid
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005dbe6.4
test al, 4
je 0x14005e1bc
test al, 3
je 0x14005df00
cmp rax, 0x3f
jbe 0x14005e1bc
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005df1a
lea rax, [0x1401276f4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x20], rax
and byte [rax - 0x77], cl
je 0x14005df8c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
and byte [rax - 0x77], cl
je 0x14005df8c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
mov qword [rsp + 0x30], r14
cmp dword [rsi + 0x30], 0xb
jae 0x14005e1bc
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005dfee
movups xmm6, xmmword [rax + 0x20]
jo 0x14005dfb5
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005dff1
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1400860d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14005e199
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.14009a9c0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005e010
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005e136
mov rax, qword [rsi]
jmp 0x14005e046
test rcx, rcx
js 0x14005e1bc
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005e07f
test al, 1
je 0x14005e1bc
test al, 0x20
jne 0x14005e157
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005e030
iretd
iretd
cmp rcx, 0x3f
jbe 0x14005e1bc
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005e046
cmp dl, 2
je case.0x14005df56.3
movzx eax, dl
cmp eax, 1
jne case.0x14005df56.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
cmp al, ch
retf 0xa8e
add byte [rax - 0x39], cl
rol al, 0xff
invalid
push rax
xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
cmp al, ch
retf 0xa8e
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005e1bc
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005df56.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005e107
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005e103
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
call fcn.140073240
mov rax, qword [rsi + 0x1f8]
test rax, rax
je 0x14005e122
mov rcx, qword [rsi + 0x200]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005df56.2
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400860d0
mov qword [rsp + 0x40], 0
jmp 0x14005e188
mov qword [rsp + 0x38], 0xc
lea rdx, [rsp + 0x38]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.1400860d0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x40], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
and al, 0x58
and al, 0x58
mov qword [rsp + 0x38], 0xb
lea rdx, [rsp + 0x38]
mov rcx, rbx
fld1
xor bh, byte [rdi + 2]
add byte [rax - 0x77], cl
int1
call fcn.1400860d0
mov rcx, rsi
call fcn.1400752a0
movaps xmm6, xmmword [rsp + 0x1f0]
add rsp, 0x200
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
mov rdx, rax
and rdx, 0xfffffffffffffffa
cli
cli
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005df56.4
test al, 4
je 0x14005e3fc
test al, 3
je 0x14005e1e0
cmp rax, 0x3f
jbe 0x14005e3fc
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005e1fa
lea rax, [0x140127704]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rsi
je 0x14005e26c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
je 0x14005e26c
sub byte [rbp + rcx*4 + 0x74], cl
and al, 0x20
mov qword [rsp + 0x30], r14
cmp byte [rsi + 0xa0], 3
add byte [rax], al
add byte [rbx], al
add byte [rax], al
add byte [rbx], al
jae 0x14005e3fc
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
or al, byte [rax]
test rax, rax
je 0x14005e2bf
movups xmm6, xmmword [rax + 0x20]
jo 0x14005e298
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005e2c2
lea rdi, [rsi + 0x20]
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov ecx, edi
call fcn.140087240
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x50], rax
jmp 0x14005e3ca
xorps xmm6, xmm6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.14009ad90
mov ebx, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005e2e1
movups xmmword [rax + 0x20], xmm6
lea rdi, [rsi + 0x20]
test bl, bl
je 0x14005e3ac
mov rax, qword [rsi]
jmp 0x14005e316
test rcx, rcx
leave
js 0x14005e3fc
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005e34f
test al, 1
je 0x14005e3fc
test al, 0x20
jne 0x14005e28a
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005e300
cmp rcx, 0x3f
jbe 0x14005e3fc
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
sal al, cl
cmpxchg qword [rsi], rcx
sal al, cl
cmpxchg qword [rsi], rcx
jne 0x14005e316
cmp dl, 2
je case.0x14005e236.3
movzx eax, dl
cmp eax, 1
jne case.0x14005e236.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x38], rax
and byte [rax - 0x7d], r9b
rcl byte [rax], 0xc6
and al, 0x20
add dword [rax - 0x77], ecx
and al, 0x38
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
lea rcx, [rsp + 0x38]
call fcn.140106f80
cli
mov ecx, dword [rdx]
add byte [rax - 0x39], cl
rol al, 0xff
invalid
push rax
xadd qword [rsi], rax
cli
mov ecx, dword [rdx]
add byte [rax - 0x39], cl
rol al, 0xff
invalid
cmp rax, 0x3f
jbe 0x14005e3fc
invalid
and rax, 0xffffffffffffffc0
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005e236.2
mov rcx, rsi
call fcn.140074570
invalid
add dword [rax], eax
jmp case.0x14005e236.2
invalid
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
and al, 0x38
and al, 0x38
mov rcx, rdi
call fcn.140087240
mov qword [rsp + 0x38], 0
add byte [rax], al
invalid
add byte [rax], al
add dh, al
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rbx], al
add byte [rax], al
mov byte [rsp + 0xa8], 3
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140087240
mov rcx, rsi
call fcn.140075990
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r14
ret
ud2
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005e236.4
test al, 4
je 0x14005e779
test al, 3
je 0x14005e420
cmp rax, 0x3f
jbe 0x14005e779
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005e43a
lea rax, [0x140127714]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 1
ja 0x14005e779
mov rdi, qword [rsi + 0x28]
xor r15d, r15d
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005e5b1
mov r15, qword [rax + 0x20]
mov r12, qword [rax + 0x28]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
sub byte [rax - 0x73], cl
pop rsi
xor byte [rdi], cl
mov dh, 0x86
rol byte [rax], 1
add byte [rax], al
sub byte [rax - 0x73], cl
pop rsi
xor byte [rdi], cl
mov dh, 0x86
rol byte [rax], 1
add byte [rax], al
test eax, eax
jne 0x14005e5c4
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x48]
movups xmm2, xmmword [rsi + 0x58]
movups xmm3, xmmword [rsi + 0x68]
movups xmmword [rsp + 0x58], xmm1
mov rax, qword [rsi + 0x78]
mov qword [rsp + 0x88], rax
movups xmmword [rsp + 0x78], xmm3
movups xmmword [rsp + 0x68], xmm2
movaps xmm1, xmmword [rsp + 0x80]
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
movaps xmm2, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x120], xmm2
jo 0x14005e538
sub dword [rsp + 0x120], edx
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x110], xmm3
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
movaps xmmword [rsp + 0x100], xmm4
movaps xmmword [rsp + 0xf0], xmm0
add dword [rax], eax
add byte [rdi], cl
sub dword [rsp + 0xf0], eax
movups xmmword [rsi + 0xc0], xmm1
add byte [rax], al
movups xmmword [rsi + 0xb0], xmm2
movups xmmword [rsi + 0xa0], xmm3
movups xmmword [rsi + 0x90], xmm4
movups xmmword [rsi + 0x80], xmm0
jmp 0x14005e5cd
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087450
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
jmp 0x14005e749
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
je 0x14005e4db
cmp eax, 3
jne 0x14005e779
lea rdi, [rsi + 0x20]
lea r14, [rsi + 0x80]
lea rdx, [rsp + 0x28]
mov rcx, r14
call fcn.14006b220
test al, al
je 0x14005e6fb
mov byte [rsi + 0xd0], 3
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005e608
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov dword [rax + 0x28], esp
mov dword [rax + 0x28], esp
mov rax, qword [rsi]
jmp 0x14005e626
test rcx, rcx
js 0x14005e779
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005e65f
test al, 1
je 0x14005e779
test al, 0x20
jne 0x14005e57b
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005e610
cmp rcx, 0x3f
jbe 0x14005e779
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14005e626
ret 0xd200
cmp dl, 2
je case.0x14005e476.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14005e476.2
mov rcx, rdi
mov rdx, rsi
bnd call fcn.1401066b0
bnd call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005e779
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005e476.2
mov rax, qword [rdi]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rdi
call fcn.140039fc0
mov rcx, rbx
jmp 0x14005e6cc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
and al, r14b
dec qword [rax]
jne 0x14005e6c8
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
call fcn.140074630
mov rax, qword [rsi + 0xe8]
test rax, rax
je 0x14005e6e7
mov rcx, qword [rsi + 0xf0]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005e476.2
lea rcx, [rsi + 0x98]
call fcn.140074800
mov rcx, r14
call fcn.140073130
mov byte [rsi + 0xd0], 1
xor ecx, ecx
leave
leave
call fcn.140102310
test rax, rax
je 0x14005e72a
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov dword [rax + 0x28], esp
mov dword [rax + 0x28], esp
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
invalid
mov rcx, rdi
mov rcx, rdi
call fcn.140087450
mov qword [rsp + 0x48], 0
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x40], 2
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087450
mov rcx, rsi
call fcn.140075590
nop
add rsp, 0x148
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
ud2
push rbx
sub rsp, 0x2f8
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x2e0], esi
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x2e0], esi
mov rsi, rcx
mov rax, qword [rcx]
add ebx, ebp
invalid
add ebx, ebp
invalid
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005e476.4
test al, 4
je 0x14005ea3f
test al, 3
je 0x14005e7a0
cmp rax, 0x3f
jbe 0x14005ea3f
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
cmpxchg dword [rsi], edx
cmpxchg dword [rsi], edx
jne 0x14005e7ba
lea rax, [0x140127724]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x30], rax
xor byte [rax - 0x77], cl
je 0x14005e82c
cmp byte [rax - 0x73], cl
and al, 0x30
xor byte [rax - 0x77], cl
je 0x14005e82c
cmp byte [rax - 0x73], cl
and al, 0x30
mov qword [rsp + 0x28], rax
cmp dword [rsi + 0x30], 3
jae 0x14005ea3f
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005e88e
movups xmm6, xmmword [rax + 0x20]
jo 0x14005e855
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005e891
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140085ee0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14005ea1e
xorps xmm6, xmm6
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.140085830
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005e8b0
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
test ch, ch
test ch, ch
je case.0x14005d366.30
mov rax, qword [rsi]
jmp 0x14005e8e6
test rcx, rcx
js 0x14005ea3f
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005e91f
test al, 1
je 0x14005ea3f
test al, 0x20
jne 0x14005e9dc
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005e8d0
cmp rcx, 0x3f
jbe 0x14005ea3f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14005e8e6
ret 0xd200
cmp dl, 2
je case.0x14005e7f6.3
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne case.0x14005e7f6.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401066b0
bnd call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005ea3f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005e7f6.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
jmp 0x14005e98c
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005e988
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
call fcn.140072130
mov rax, qword [rsi + 0x2e0]
test rax, rax
je 0x14005e9a7
mov rcx, qword [rsi + 0x2e8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005e7f6.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
pcmpeqw mm0, qword [rdx]
add byte [rax - 0x39], cl
and al, 0x48
add byte [rax], al
add byte [rax], al
fld1
pcmpeqw mm0, qword [rdx]
add byte [rax - 0x39], cl
and al, 0x48
add byte [rax], al
add byte [rax], al
jmp 0x14005ea0d
xor dword [rax - 0x39], ecx
and al, 0x40
add al, 0
add byte [rax], al
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140085ee0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
and al, 0x48
add dword [rax], eax
add byte [rax], al
and al, 0x48
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
and al, 0x60
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140085ee0
mov rcx, rsi
call fcn.140074cc0
movaps xmm6, xmmword [rsp + 0x2e0]
add rsp, 0x2f8
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop word cs:[rax + rax]
nop dword [rax + rax]
push rsi
push rdi
push rbx
sub rsp, 0xc0
add byte [rax], al
add byte [rax], al
movaps xmmword [rsp + 0xb0], xmm6
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005ea8a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je 0x14005eab8
test al, 4
je 0x14005ec6b
test al, 3
je 0x14005ea70
cmp rax, 0x3f
jbe 0x14005ec6b
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
cli
invalid
cli
mov ecx, 0
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005ea8a
lea rax, [0x140127734]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
je 0x14005eafc
xor byte [rax - 0x73], cl
and al, 0x28
je 0x14005eafc
xor byte [rax - 0x73], cl
and al, 0x28
mov qword [rsp + 0x20], rax
cmp byte [rsi + 0xa0], 3
add byte [rax], al
add byte [rbx], al
add byte [rax], al
add byte [rbx], al
jae 0x14005ec6b
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005eb4f
cmp byte [rdx], cl
add byte [rax - 0x7b], cl
sal byte [rbx + rcx*2 + 0xf], 0x10
jo 0x14005eb28
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005eb52
lea rdi, [rsi + 0x20]
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov ecx, edi
call fcn.140087240
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x50], rax
jmp 0x14005ec3b
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.14009ad90
mov ebx, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005eb71
movups xmmword [rax + 0x20], xmm6
lea rdi, [rsi + 0x20]
test bl, bl
je 0x14005ec1d
mov rax, qword [rsi]
jmp 0x14005eba6
nop dword [rax + rax]
test rcx, rcx
js 0x14005ec6b
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
invalid
je 0x14005ebdf
invalid
test al, 1
je 0x14005ec6b
test al, 0x20
jne 0x14005eb1a
invalid
invalid
invalid
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005eb90
cmp rcx, 0x3f
jbe 0x14005ec6b
stc
invalid
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005eba6
cmp dl, 2
je case.0x14005eac6.3
invalid
invalid
movzx eax, dl
cmp eax, 1
clc
add dword [rbp + 0x6c], esi
clc
add dword [rbp + 0x6c], esi
mov rcx, rdi
mov rdx, rsi
call fcn.1401066b0
mov ecx, 0x48000a7a
mov eax, 0xffffffc0
mov ecx, 0x48000a7a
mov eax, 0xffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005ec6b
invalid
invalid
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005eac6.2
mov rcx, rsi
call fcn.1400744b0
pop rax
add dword [rax], eax
pop rax
add dword [rax], eax
jmp case.0x14005eac6.2
mov byte [rsp + 0xa8], 4
lea rdx, [rsp + 0x38]
and al, 0x38
and al, 0x38
mov rcx, rdi
call fcn.140087240
mov qword [rsp + 0x38], 0
add byte [rax], al
invalid
add byte [rax], al
add dh, al
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rbx], al
mov byte [rsp + 0xa8], 3
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140087240
mov rcx, rsi
call fcn.140074c00
invalid
add byte [rdi], cl
sub byte [rsp + 0xb0], dh
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc0
pop rbx
pop rdi
pop rsi
ret
ud2
in al, dx
jo 0x14005ec8a
sub dword [rsp + 0x60], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005ecaa
nop dword [rax + rax]
test byte [rax], al
add byte [rax], al
add byte [rax], al
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
invalid
invalid
je case.0x14005eac6.4
test al, 4
je 0x14005ef24
test al, 3
je 0x14005ec90
cmp rax, 0x3f
cmp eax, 0x3f
clc
invalid
jbe 0x14005ef24
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005ecaa
invalid
ror byte [rax - 0x73], cl
add eax, 0xc8a65
lea rax, [0x140127744]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
invalid
loope 0x14005ed31
lea rax, [0x140173ca8]
lea eax, [0x140173ca8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rsi
and al, 0x50
and al, 0x50
lea r14, [rsp + 0x48]
mov qword [rsp + 0x58], r14
movzx eax, byte [rsi + 0x50]
and al, 6
cmp al, 4
je 0x14005ef24
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005ed7a
movups xmm6, xmmword [rax + 0x20]
jo 0x14005ed49
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005ed7d
lea rdi, [rsi + 0x20]
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400861b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x14005ef07
invalid
xorps xmm6, xmm6
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.14009af90
mov ebp, eax
xor ecx, ecx
call fcn.140102310
xor eax, 0x8548000a
invalid
je 0x14005ed9c
xor eax, 0x8548000a
sal byte [rsp + rax + 0xf], 0x11
jo 0x14005edbc
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005eeb0
mov rax, qword [rsi]
jmp 0x14005edc6
test rcx, rcx
js 0x14005ef24
add rcx, 0x40
mov dl, 1
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005edff
test al, 1
je 0x14005ef24
test al, 0x20
jne 0x14005eecd
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005edb0
iretd
iretd
cmp rcx, 0x3f
jbe 0x14005ef24
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005edc6
cmp dl, 2
je case.0x14005ff46.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14005ff46.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x48], 1
mov qword [rsp + 0x20], rax
and al, 0x20
and al, 0x20
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x20]
and al, ch
invalid
invalid
or al, byte [rax]
and al, ch
or qword [rdx], 0xffffffffc0c74800
or al, byte [rax]
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
invalid
invalid
or al, byte [rax]
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
invalid
invalid
rol dword [rsi], 0x48
cmp eax, 0x3f
cmp rax, 0x3f
jbe 0x14005ef24
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005ff46.2
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005ee87
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005ee83
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
lea ecx, [rsi + 0x30]
call fcn.1400727c0
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14005ee9c
invalid
invalid
mov rcx, qword [rsi + 0x70]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
push rdx
adc al, 0
push rdx
adc al, 0
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005ff46.2
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
and al, 0x20
add eax, 0x24548d48
and byte [rax - 0x77], cl
fld1
out dx, al
jb 0x14005eec3
and al, 0x20
mov rcx, rbx
call fcn.1400861b0
mov qword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
add byte [rax - 0x39], cl
mov dword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
jmp 0x14005eefa
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
push rsp
and al, 0x20
push rsp
and al, 0x20
mov rcx, rbx
call fcn.1400861b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1400861b0
mov rcx, rsi
movsb byte [rdi], byte [rsi]
jb 0x14005ef0d
add byte [rax - 0x77], cl
int1
mov ecx, esi
call fcn.140074b10
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x70
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
invalid
ud2
nop dword [rax + rax]
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x140
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005ef6a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005ff46.4
test al, 4
je 0x14005f2c6
test al, 3
je 0x14005ef50
cmp rax, 0x3f
jbe 0x14005f2c6
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005ef6a
lea rax, [0x140127754]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
and al, 0x30
and al, 0x30
lea r15, [rsp + 0x28]
mov qword [rsp + 0x38], r15
cmp dword [rsi + 0x30], 1
ja 0x14005f2c6
mov rdi, qword [rsi + 0x28]
xor r12d, r12d
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005f0e1
mov r12, qword [rax + 0x20]
mov r13, qword [rax + 0x28]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
jne 0x14005f0f4
invalid
add byte [rax], al
invalid
jmp 0x18805f00c
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x50], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x48]
movups xmm2, xmmword [rsi + 0x58]
movups xmm3, xmmword [rsi + 0x68]
push 0x244c110f
pop rax
push 0x244c110f
pop rax
mov rax, qword [rsi + 0x78]
mov qword [rsp + 0x88], rax
add byte [rax], al
add byte [rax], al
movups xmmword [rsp + 0x78], xmm3
movups xmmword [rsp + 0x68], xmm2
movaps xmm1, xmmword [rsp + 0x80]
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
add byte [rax], 0
add byte [rdi], cl
sub dword [rsp + 0x130], ecx
movaps xmm2, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x120], xmm2
jo 0x14005f068
sub dword [rsp + 0x120], edx
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x110], xmm3
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
pushfq
and al, 0x10
add dword [rax], eax
add byte [rdi], cl
sub byte [rsp + 0x50], ah
movaps xmmword [rsp + 0x100], xmm4
movaps xmmword [rsp + 0xf0], xmm0
movups xmmword [rsi + 0xc0], xmm1
add byte [rax], al
add byte [rax], al
movups xmmword [rsi + 0xb0], xmm2
movups xmmword [rsi + 0xa0], xmm3
movups xmmword [rsi + 0x90], xmm4
movups xmmword [rsi + 0x80], xmm0
jmp 0x14005f0fd
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087450
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
jmp 0x14005f294
lea rbx, [rsi + 0x30]
movzx eax, byte [rsi + 0xd0]
test eax, eax
je 0x14005f00b
cmp eax, 3
jne 0x14005f2c6
lea rdi, [rsi + 0x20]
lea r14, [rsi + 0x80]
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.14006b220
test al, al
je 0x14005f246
mov byte [rsi + 0xd0], 3
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005f138
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov rax, qword [rsi]
jmp 0x14005f156
test rcx, rcx
js 0x14005f2c6
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005f18f
test al, 1
je 0x14005f2c6
test al, 0x20
jne 0x14005f0ab
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005f140
iretd
iretd
cmp rcx, 0x3f
jbe 0x14005f2c6
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005f156
cmp dl, 2
je case.0x14005efa6.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
movzx eax, dl
cmp eax, 1
jne case.0x14005efa6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
and al, 0x40
and al, 0x40
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r15
lea rcx, [rsp + 0x40]
call fcn.140106f80
call fcn.140106f80
mov edx, 0x48000a7d
mov eax, 0xffffffc0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005f2c6
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005efa6.2
mov rax, qword [rdi]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rdi
call fcn.14006f510
mov rcx, rbx
jmp 0x14005f217
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005f213
lea rcx, [rsi + 0x20]
call fcn.14006f510
invalid
add byte [rax - 0x73], cl
xor al, r13b
adc al, 0x54
add dword [rax], eax
lea rcx, [rsi + 0x30]
call fcn.140074630
mov rax, qword [rsi + 0xe8]
test rax, rax
je case.0x14005d916.34
add byte [rax - 0x7b], cl
sal byte [rdx + rcx + 0x48], 0x8b
invalid
mov rcx, qword [rsi + 0xf0]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
or eax, dword [rax]
or eax, dword [rax]
jmp case.0x14005efa6.2
lea rcx, [rsi + 0x98]
call fcn.140074800
mov ds, word [rax - 0x18000000]
scasb al, byte [rdi]
push rbp
add dword [rax], eax
mov rcx, r14
call fcn.140073130
mov byte [rsi + 0xd0], 1
xor ecx, ecx
leave
leave
call fcn.140102310
test rax, rax
je 0x14005f275
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov dword [rax + 0x28], ebp
mov dword [rax + 0x28], ebp
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087450
mov qword [rsp + 0x48], 0
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x40], 2
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 0x73], cl
push rsp
and al, 0x40
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087450
add al, byte [rax]
add al, byte [rax]
mov rcx, rsi
call fcn.140075890
nop
add rsp, 0x140
add byte [rax], al
add byte [rax], al
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2
ud2
add byte [rax], al
add byte [rdi], cl
sub dword [rsp + 0x70], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp case.0x14005d916.37
nop dword [rax + rax]
test byte [rax], al
add byte [rax], al
add byte [rax], al
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
add dword [rcx + 0x5e9c1c1], ecx
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005efa6.4
test al, 4
je 0x14005f583
test al, 3
je 0x14005f2f0
cmp rax, 0x3f
clc
invalid
jbe 0x14005f583
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
add byte [rax], al
add byte [rax - 0x7d], cl
rol dword [rdx], 1
lock cmpxchg qword [rsi], rdx
jne case.0x14005d916.37
lea rax, [0x140127764]
add eax, 0xc8425
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
add eax, 0x114959
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
mov eax, dword [rsi + 0x38]
and eax, 0xfffffffe
cmp eax, 0x3b9aca00
add dl, cl
invalid
cmp ecx, dword [rdi]
test byte [rdi], cl
add al, byte [rax]
invalid
add dl, cl
invalid
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005f3e3
movups xmm6, xmmword [rax + 0x20]
jo 0x14005f3ac
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005f3e6
lea rdi, [rsi + 0x20]
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rdi
mov ecx, edi
call fcn.140087520
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
mov rcx, rdi
jmp 0x14005f565
xorps xmm6, xmm6
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.1400a8ec0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005f405
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x14005f505
mov rax, qword [rsi]
jmp 0x14005f436
test rcx, rcx
js 0x14005f583
pop rdx
add dword [rax], eax
invalid
pop rdx
add dword [rax], eax
add byte [rax - 0x7d], cl
rol dword [rax - 0x4e], 1
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005f46f
invalid
cmp dword [rax + 0x45840f01], ebp
add dword [rax], eax
add byte [rax - 0x207af0e0], ch
add byte [rax], al
test al, 1
je 0x14005f583
test al, 0x20
jne 0x14005f525
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005f420
cmp rcx, 0x3f
jbe 0x14005f583
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x14005f436
ret 0xd200
cmp dl, 2
je 0x14005f4c5
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne 0x14005f572
mov rcx, rbx
mov rdx, rsi
call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005f583
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x14005f572
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
stc
jmp 0x14005f4dc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005f4d8
lea rcx, [rsi + 0x20]
call fcn.140039fc0
and al, ch
call 0x18905f283
lea ecx, [rsi + 0x30]
lea rcx, [rsi + 0x30]
call fcn.140071fb0
mov rax, qword [rsi + 0x70]
mov eax, dword [rsi + 0x70]
mov eax, dword [rsi + 0x70]
test rax, rax
je 0x14005f4f1
mov rcx, qword [rsi + 0x78]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov eax, dword [rsi - 8]
mov rcx, qword [0x1401a4160]
adc al, 0
xor edx, edx
call sub.KERNEL32.dll_HeapFree
add bl, ch
insd dword [rdi], dx
add bl, ch
insd dword [rdi], dx
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.140087520
mov qword [rsp + 0x38], 0
add bl, ch
invalid
add bl, ch
xor bh, al
and al, 0x30
add edx, ecx
invalid
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
mov rcx, rbx
call fcn.140087520
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x38], 1
cmp byte [rcx], al
add byte [rax], al
add byte [rax - 0x39], cl
mov dword [rsp + 0x40], 0
cmp byte [rcx], al
add byte [rax], al
add byte [rax - 0x39], cl
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x40], 0
add byte [rax - 0x77], cl
mov qword [rsp + 0x50], rax
and al, 0x50
mov dword [rsp + 0x30], 0x3b9aca00
lea rdx, [rsp + 0x28]
xor byte [rax], al
retf 0x3b9a
mov rcx, rbx
call fcn.140087520
add al, byte [rax]
mov rcx, rsi
call fcn.140074fc0
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
add esp, 0x88
add esp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop dword [rax + rax]
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x220], esi
and byte [rdx], al
add byte [rax], al
add al, byte [rax]
add byte [rdi], cl
sub dword [rsp + 0x220], esi
and byte [rdx], al
add byte [rax], al
and byte [rdx], al
add byte [rax], al
mov rsi, rcx
mov rax, qword [rcx]
add ebx, ebp
invalid
add ebx, ebp
invalid
add byte [rax - 0x77], cl
ret 0x8348
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
mov ecx, eax
shr ecx, 5
add eax, 0xf001e183
cmpxchg qword [rsi], rdx
add eax, 0xf001e183
cmpxchg qword [rsi], rdx
je 0x14005f5f8
test al, 4
je 0x14005f84f
add al, byte [rax]
invalid
add al, byte [rax]
add byte [rax + 0x48da7403], ch
cmp eax, 0x3f
clc
invalid
test al, 3
je 0x14005f5b0
cmp rax, 0x3f
clc
invalid
jbe 0x14005f84f
add byte [rax - 0x73], cl
push rax
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
mov ecx, 0
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
rol dword [rdx], 1
lock cmpxchg qword [rsi], rdx
jne 0x14005f5ca
lea rax, [0x140127774]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
mov rax, qword [rsi + 0x30]
cmp rax, 5
je 0x14005f639
and eax, 0xfffffffe
cmp eax, 6
je 0x14005f84f
inc byte [rbx - 0x7bf0f908]
invalid
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005f6aa
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005f6ad
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140084900
xchg dword [rdx + 2], edx
add byte [rax - 0x75], cl
sub byte [rax - 0x39], r9b
and al, 0x40
add dword [rax], eax
add byte [rax], al
xchg dword [rdx + 2], edx
add byte [rax - 0x75], cl
sub byte [rax - 0x39], r9b
and al, 0x40
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
mov rcx, rdi
jmp 0x14005f82e
xorps xmm6, xmm6
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.14009aee0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
invalid
je 0x14005f6cc
sal byte [rsp + rax + 0xf], 0x11
jo 0x14005f6ec
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x14005f346.30
add byte [rax], al
invalid
add byte [rax], al
add byte [rax - 0x75], cl
invalid
mov rax, qword [rsi]
jmp 0x14005f6f6
test rcx, rcx
js 0x14005f84f
add word [rax], ax
invalid
add word [rax], ax
add byte [rax - 0x7d], cl
rol dword [rax - 0x4e], 1
add rcx, 0x40
mov dl, 1
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14005f72f
invalid
cmp dword [rax + 0x51840f01], ebp
add dword [rax], eax
add byte [rax - 0x197af0e0], ch
add byte [rax], al
test al, 1
je 0x14005f84f
test al, 0x20
jne 0x14005f7ec
invalid
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005f6e0
cmp rcx, 0x3f
jbe 0x14005f84f
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
mov cl, 0xe
ret 0xd200
mov cl, 0xe
jne 0x14005f6f6
cmp dl, 2
je case.0x14005f606.3
movzx eax, dl
cmp eax, 1
jne case.0x14005f606.2
mov rcx, rbx
mov rdx, rsi
bnd call fcn.1401066b0
bnd call fcn.1401066b0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005f84f
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005f606.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14005f780
mov rcx, rbx
call fcn.140039fc0
mov rcx, rdi
jmp 0x14005f79c
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
dec dword [rax]
dec dword [rax]
jne 0x14005f798
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
xor al, ch
jg 0x14005f7d1
call fcn.140072a20
add dword [rax], eax
mov rax, qword [rsi + 0x228]
test rax, rax
je 0x14005f7b7
mov rcx, qword [rsi + 0x230]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov eax, dword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005f606.2
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
add byte [rax], al
add byte [rax - 0x73], cl
push rsp
and al, 0x38
mov rcx, rbx
call fcn.140084900
mov qword [rsp + 0x40], 0
jmp 0x14005f81d
fld1
invalid
mov qword [rsp + 0x38], 7
lea rdx, [rsp + 0x38]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140084900
mov rax, qword [rsi + 0x28]
mov eax, dword [rsi + 0x28]
mov eax, dword [rsi + 0x28]
mov qword [rsp + 0x40], 1
and al, 0x40
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x58], rax
and al, 0x58
mov qword [rsp + 0x38], 6
lea rdx, [rsp + 0x38]
push rsp
and al, 0x38
push rsp
and al, 0x38
mov rcx, rbx
call fcn.140084900
mov rcx, rsi
call fcn.140075490
pop rsp
add dword [rax], eax
pop rsp
add dword [rax], eax
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
add byte [rax], al
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
nop word cs:[rax + rax]
nop dword [rax + rax]
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xfd0
in al, dx
ror byte [rdi], 1
add byte [rax], al
in al, dx
ror byte [rdi], 1
add byte [rax], al
movaps xmmword [rsp + 0xfc0], xmm6
add byte [rax], al
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005f89a
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
je case.0x14005f606.4
test al, 4
je 0x14005fb3c
test al, 3
je 0x14005f880
add esi, dword [rdx + rbx*8 + 0x48]
cmp eax, 0x3f
clc
invalid
cmp rax, 0x3f
clc
invalid
jbe 0x14005fb3c
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
ror byte [rax - 0x7d], 0xfa
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005f89a
lea rax, [0x140127784]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
sub byte [rax - 0x77], cl
je 0x14005f90c
xor byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
sub byte [rax - 0x77], cl
je 0x14005f90c
xor byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
mov qword [rsp + 0x38], r14
cmp dword [rsi + 0x30], 3
jae 0x14005fb3c
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005f96e
movups xmm6, xmmword [rax + 0x20]
jo 0x14005f935
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005f971
lea rdi, [rsi + 0x20]
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140087160
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0
add byte [rax], al
add byte [rax - 0x77], cl
and al, 0x60
add byte [rax], al
add byte [rax - 0x77], cl
and al, 0x60
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rdi
jmp 0x14005fb19
xorps xmm6, xmm6
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1400863c0
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005f990
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je case.0x14005e476.30
mov rax, qword [rsi]
jmp 0x14005f9c6
test rcx, rcx
js 0x14005fb3c
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
cmpxchg qword [rsi], rcx
je 0x14005f9ff
test al, 1
je 0x14005fb3c
test al, 0x20
jne 0x14005fad7
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne case.0x14005d636.51
iretd
iretd
cmp rcx, 0x3f
jbe 0x14005fb3c
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
cmp ecx, 0x40
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005f9c6
cmp dl, 2
je case.0x14005f8d6.3
cli
add dh, byte [rsp + rbp*2 + 0xf]
mov dh, 0xc2
invalid
movzx eax, dl
ret 0xf883
cmp eax, 1
jne case.0x14005f8d6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x40], rax
and al, 0x40
and al, 0x40
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.140106f80
call fcn.140106f80
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
rol dword [rsi], 0x48
cmp eax, 0x3f
jbe 0x14005fb3c
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005f8d6.2
int3
add byte [rax], al
invalid
int3
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005fa87
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
dec dword [rax]
dec dword [rax]
jne 0x14005fa83
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
xor al, ch
call fcn.140073ae0
push rsp
add dword [rax], eax
mov rax, qword [rsi + 0xfc0]
test rax, rax
je 0x14005faa2
mov rcx, qword [rsi + 0xfc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005f8d6.2
mov qword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140087160
mov qword [rsp + 0x48], 0
jmp case.0x14005ece6.44
invalid
xor dword [rax - 0x39], ecx
and al, 0x40
add al, 0
add byte [rax], al
mov qword [rsp + 0x40], 4
mov dword [rsp + 0x40], 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov ecx, ebx
mov ecx, ebx
call fcn.140087160
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x48], 1
add dword [rax], eax
add byte [rax], al
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], 3
lea rdx, [rsp + 0x40]
mov rcx, rbx
fld1
jbe 0x14005fb1f
call fcn.140087160
mov rcx, rsi
add byte [rax - 0x77], cl
int1
mov ecx, esi
call fcn.140074dc0
movaps xmm6, xmmword [rsp + 0xfc0]
add rsp, 0xfd0
pop rbx
mov ah, 0x24
ror byte [rdi], 0
add byte [rax - 0x7f], cl
invalid
pop rbp
pop rdi
pop rsi
pop r14
ret
ud2
sub esp, 0x58
movaps xmmword [rsp + 0x40], xmm6
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005fb7a
nop word cs:[rax + rax]
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
cli
cli
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
mov cl, 0x16
mov cl, 0x16
je case.0x14005f8d6.4
test al, 4
je 0x14005fecb
test al, 3
je 0x14005fb60
cmp rax, 0x3f
jbe 0x14005fecb
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005fb7a
lea rax, [0x140127794]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
lea rax, [0x140173ca8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rsi
je 0x14005fbec
xor byte [rax - 0x73], cl
and al, 0x28
je 0x14005fbec
xor byte [rax - 0x73], cl
and al, 0x28
mov qword [rsp + 0x20], rax
cmp byte [rsi + 0xa8], 3
jae 0x14005fecb
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
pop rsi
sub byte [rcx], dh
leave
pop rsi
sub byte [rcx], dh
leave
call fcn.140102310
test rax, rax
je 0x14005fc2f
invalid
movups xmm6, xmmword [rax + 0x20]
jo 0x14005fc18
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005fc32
mov rdi, qword [rsi + 0x28]
mov edi, dword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005fda9
add byte [rax], al
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
jmp 0x14005fdac
xorps xmm6, xmm6
lea r14, [rsp + 0x20]
mov rcx, rdi
mov rdx, r14
call fcn.14009b0f0
mov ebx, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005fc54
movups xmmword [rax + 0x20], xmm6
test bl, bl
je 0x14005fd80
test byte [rcx + rax], ah
add byte [rax], al
test byte [rcx + rax], ah
add byte [rax], al
lea rbx, [rsi + 0x20]
mov rax, qword [rsi]
nop word cs:[rax + rax]
nop dword cs:[rax + rax]
nop dword cs:[rax + rax]
test al, 1
je 0x14005fecb
invalid
add byte [rax - 0x6a7af0e0], ch
add dword [rax], eax
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
test al, 0x20
jne 0x14005fe15
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x14005fcb0
cmp rcx, 0x3f
jbe 0x14005fecb
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
rol eax, 0x48
cmp ecx, 0x40
setb dl
add dl, dl
lock cmpxchg qword [rsi], rcx
jne 0x14005fc70
jmp 0x14005fcc6
test rcx, rcx
js 0x14005fecb
add byte [rax], al
add byte [rax], al
add rcx, 0x40
mov dl, 1
lock cmpxchg qword [rsi], rcx
jne 0x14005fc70
cmp dl, 2
je case.0x14005fbb6.3
movzx eax, dl
cmp eax, 1
jne case.0x14005fbb6.2
mov rax, qword [rsi + 0x20]
add rax, 0x10
mov byte [rsp + 0x20], 1
mov qword [rsp + 0x28], rax
and al, 0x28
and al, 0x28
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x28]
sub al, ch
xor dword [rdx + 0xa], 0
sub al, ch
xor dword [rdx + 0xa], 0
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
cmp rax, 0x3f
jbe 0x14005fecb
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne case.0x14005fbb6.2
mov rax, qword [rbx]
lock dec qword [rax]
jne 0x14005fd32
mov rcx, rbx
call fcn.14006f510
mov rcx, rdi
jmp 0x14005fd4e
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x14005fd4a
lea rcx, [rsi + 0x20]
call fcn.14006f510
lea rcx, [rsi + 0x30]
call fcn.1400725a0
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x14005fd69
mov rcx, qword [rsi + 0xc8]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14005fbb6.2
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005fe3e
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005fe41
xorps xmm6, xmm6
lea rdi, [rsi + 0x30]
mov rcx, rdi
call fcn.1400725a0
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005fdcf
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
leave
leave
call fcn.140102310
test rax, rax
je 0x14005fdf1
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov dword [rax + 0x20], 1
mov dword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp case.0x14005d916.50
xorps xmm6, xmm6
mov rcx, rdi
call fcn.1400725a0
mov qword [rsi + 0x30], 1
mov qword [rsi + 0x38], 0
add byte [rax], al
add byte [rax], al
mov qword [rsi + 0x48], rbx
jmp 0x14005fe95
invalid
add byte [rax - 0x75], cl
pop rsi
sub byte [rcx], dh
leave
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005fec3
invalid
invalid
add byte [rax], al
invalid
test byte [rdx + 0xf000000], bl
adc byte [rax + 0x20], dh
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005fdb0
add byte [rax - 0x77], cl
pop rax
sub cl, ch
jb 0x14005fe3b
invalid
invalid
xorps xmm6, xmm6
mov rcx, rdi
call fcn.1400725a0
mov byte [rsi + 0xa8], 4
xor ecx, ecx
call fcn.140102310
and al, 0xa
invalid
and al, 0xa
add byte [rax - 0x7b], cl
test rax, rax
je 0x14005fe60
movups xmmword [rax + 0x20], xmm6
test rax, rax
test eax, eax
je 0x14005fe60
movups xmmword [rax + 0x20], xmm6
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
and al, 0xa
add byte [rax - 0x7b], cl
invalid
je 0x14005fe82
and al, 0xa
add byte [rax - 0x7b], cl
sal byte [rdx + rdx + 0xf], 0x10
jo case.0x14005f606.10
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
add dword [rax], eax
add byte [rax], al
mov qword [rax + 0x28], rbx
jmp 0x14005fe85
xorps xmm6, xmm6
mov rcx, rdi
call fcn.1400725a0
mov qword [rsi + 0x30], 0
invalid
add dh, al
xchg byte [rax + 0x3000000], ch
add byte [rax], al
add byte [rbx], al
mov byte [rsi + 0xa8], 3
add byte [rax], al
add byte [rbx], al
xor ecx, ecx
call fcn.140102310
test rax, rax
test eax, eax
test eax, eax
je 0x14005feac
add al, 0xf
adc dword [rax + 0x20], esi
movups xmmword [rax + 0x20], xmm6
mov rcx, rsi
call fcn.1400749d0
movaps xmm6, xmmword [rsp + 0x40]
and al, 0x40
add rsp, 0x58
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r14
ret
xorps xmm6, xmm6
jmp 0x14005fdb0
in eax, 0xfe
invalid
invalid
in eax, 0xfe
invalid
ud2
js case.0x14005ff46.24
movaps xmmword [rsp + 0x60], xmm6
sub dword [rsp + 0x60], esi
mov rsi, rcx
mov rax, qword [rcx]
jmp 0x14005ff0a
nop dword cs:[rax + rax]
nop dword [rax + rax]
mov rdx, rax
and rdx, 0xfffffffffffffffa
or rdx, 1
or edx, 1
mov ecx, eax
shr ecx, 5
and ecx, 1
lock cmpxchg qword [rsi], rdx
invalid
je case.0x14005fbb6.4
invalid
test al, 4
je 0x140060167
test al, 3
je 0x14005fef0
cmp rax, 0x3f
jbe 0x140060167
clc
invalid
lea rdx, [rax - 0x40]
cmp rdx, 0x40
mov ecx, 0
mov ecx, 0
adc rcx, 2
lock cmpxchg qword [rsi], rdx
jne 0x14005ff0a
invalid
ror byte [rax - 0x73], cl
add eax, 0xc7865
lea rax, [0x1401277a4]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
jmp rcx
invalid
loope 0x14005ff91
lea rax, [0x140173ca8]
lea eax, [0x140173ca8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
movzx eax, byte [rsi + 0x50]
and al, 6
cmp al, 4
je 0x140060167
lea rdi, [rsi + 0x30]
mov rbx, qword [rsi + 0x28]
xor ecx, ecx
call fcn.140102310
test rax, rax
je 0x14005ffda
movups xmm6, xmmword [rax + 0x20]
jo 0x14005ffa9
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rbx
jmp 0x14005ffdd
lea rdi, [rsi + 0x20]
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400861b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
add esp, dword [rdx + 2]
add byte [rax - 0x75], cl
sub byte [rax - 0x39], r9b
and al, 0x20
add dword [rax], eax
add byte [rax], al
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
and al, 0x38
and al, 0x38
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x14006014c
xorps xmm6, xmm6
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.14009af90
mov ebp, eax
xor ecx, ecx
call fcn.140102310
test rax, rax
invalid
je 0x14005fffc
sal byte [rsp + rax + 0xf], 0x11
jo 0x14006001c
movups xmmword [rax + 0x20], xmm6
lea rbx, [rsi + 0x20]
test bpl, bpl
je 0x1400600f5
in al, dx
add byte [rax], al
invalid
in al, dx
add byte [rax], al
add byte [rax - 0x75], cl
invalid
mov rax, qword [rsi]
jmp 0x140060026
test rcx, rcx
js 0x140060167
add qword [rax], r8
invalid
add qword [rax], r8
add byte [rax - 0x7d], cl
add rcx, 0x40
mov dl, 1
add rcx, 0x40
mov dl, 1
mov dl, 1
lock cmpxchg qword [rsi], rcx
je 0x14006005f
invalid
cmp dword [rax + 0x39840f01], ebp
add dword [rax], eax
add byte [rax - 0x237af0e0], ch
add byte [rax], al
add byte [rax - 0x77], cl
ror dword [rax - 0x7d], 0xe1
invalid
test al, 1
je 0x140060167
test al, 0x20
jne 0x140060112
mov rcx, rax
and rcx, 0xfffffffffffffffe
test al, 4
jne 0x140060010
cmp rcx, 0x3f
jbe 0x140060167
add rcx, 0xffffffffffffffc0
cmp rcx, 0x40
setb dl
ret 0xd200
lock cmpxchg qword [rsi], rcx
jne 0x140060026
ret 0xd200
cmp dl, 2
je 0x1400600b5
movzx eax, dl
mov dh, 0xc2
cmp eax, 1
jne 0x140060159
add dword [rdi], ecx
test ecx, ebp
add byte [rax], al
add byte [rax - 0x77], cl
invalid
mov rcx, rbx
mov rdx, rsi
call fcn.1401066b0
or al, byte [rax]
or al, byte [rax]
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
rol dword [rsi], 0x48
cmp eax, 0x3f
clc
invalid
rol dword [rsi], 0x48
cmp eax, 0x3f
clc
invalid
clc
invalid
jbe 0x140060167
and rax, 0xffffffffffffffc0
cmp rax, 0x40
jne 0x140060159
mov rax, qword [rbx]
lock dec qword [rax]
or byte [rbp + 8], dh
or byte [rbp + 8], dh
mov rcx, rbx
mov ecx, ebx
call fcn.140039fc0
mov rcx, rdi
jmp 0x1400600cc
mov rax, qword [rsi + 0x20]
lock dec qword [rax]
jne 0x1400600c8
lea rcx, [rsi + 0x20]
call fcn.140039fc0
lea rcx, [rsi + 0x30]
lea ecx, [rsi + 0x30]
call fcn.1400727c0
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x1400600e1
mov rcx, qword [rsi + 0x70]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1401a4160]
adc al, 0
adc al, 0
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140060159
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1400861b0
mov qword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
add eax, 0x24548d48
and byte [rax - 0x77], cl
fld1
test eax, 0x48000260
mov dword [rsp + 0x20], 0
and al, 0x20
add byte [rax], al
add byte [rax], al
and al, 0x20
add byte [rax], al
add byte [rax], al
jmp 0x14006013f
mov byte [rsp + 0x40], 5
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1400861b0
mov rax, qword [rsi + 0x28]
mov qword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x20], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x40], 4
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1400861b0
mov rcx, rsi
call fcn.1400751b0
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
ret
ud2
sub edx, dword [rcx + 3]
add byte [rax - 0x77], cl
sar dword [rdx + 0x84], 0xb8
int3
add dword [rax], eax
add byte [rax], al
jne 0x14006204f
mov byte [r15 + 0x198], 1
lea rdi, [r15 + 0x80]
mov edi, pe_nt_image_headers64
lock or qword [r15 + 0x1c8], 1
lea rcx, [r15 + 0x1a0]
invalid
movabs al, byte [0x99865e8000001]
lea rbx, [r15 + 0x180]
lea ebx, [rdi + 0x180]
invalid
lea ebx, [rdi + 0x180]
add byte [rbp + rcx*4 + 0x74], cl
and al, 0x28
lea r14, [rsp + 0x28]
nop word [rax + rax]
mov rcx, r14
mov ecx, esi
mov rdx, rbx
mov r8, rdi
call fcn.1400cdda0
cmp dword [rsp + 0x28], 1
sub byte [rcx], al
sub byte [rcx], al
ja 0x1400620aa
lock sub qword [r15 + 0x1c8], 2
jb 0x140062101
mov rcx, r14
mov ecx, esi
call fcn.1400d1e90
jmp 0x140062080
lea rcx, [rsp + 0x28]
call fcn.1400d1e90
std
invalid
add byte [rax - 0x75], cl
xchg byte [rax - 0xfffffff], dh
dec qword [rax]
std
invalid
dec qword [rax]
jne 0x1400620cd
mov rcx, qword [rsi + 0x1b0]
call fcn.140070530
invalid
add byte [rax - 0x75], cl
xchg byte [rax - 0xfffffff], ch
add dword [rax], eax
add al, dh
mov rax, qword [rsi + 0x1a8]
lock dec qword [rax]
add dword [rax], eax
add al, dh
dec qword [rax]
mov bl, 1
jne 0x1400620e8
lea rcx, [rsi + 0x1a8]
add byte [rax], al
call fcn.14006e540
xor eax, eax
mov byte [rsi + 0x1d0], bl
rol byte [rcx], 1
add byte [rax], al
add rsp, 0x5e8
add esp, 0x5e8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov ecx, 7
int 0x29
ud2
invalid
push rdi
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x33c8
call fcn.14011a920
sub rsp, rax
movaps xmmword [rsp + 0x33b0], xmm6
mov r15, r8
mov rsi, rdx
mov r12, rcx
movzx eax, byte [rdx + 0x111]
invalid
adc dword [rcx], eax
add byte [rax], al
invalid
lea rcx, [0x1401277b4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rsi + 0x98]
mov qword [rsp + 0xa40], rax
or al, byte [rax]
add bl, dh
movq mm0, qword [rsi + 0x88]
or al, byte [rax]
add bl, dh
movq mm0, qword [rsi + 0x88]
movdqa xmmword [rsp + 0xa30], xmm0
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14006226c
add byte [rax], al
push 0xfc08548
test dh, ch
add byte [rax], al
add byte [rax], al
mov rcx, qword [rsi + 0x70]
invalid
add byte [rax], al
mov rcx, qword [rsi + 0x70]
lock inc qword [rax]
jo 0x140062173
inc qword [rax]
jg 0x14006226c
jmp case.0x14006214f.1
lea rdi, [rsi + 0x148]
lea r13, [rsi + 0x118]
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x86
add qword [rax], rax
add byte [rbp - 0x457bf040], al
add dword [rax], 0
add dword [rax], eax
add byte [rdi], cl
mov dh, 0x86
add qword [rax], rax
add byte [rbp - 0x457bf040], al
add dword [rax], 0
add byte [rax], al
cmp eax, 3
je 0x14006a581
jmp case.0x14006214f.1
lea r13, [rsi + 0x118]
lea rax, [rsi + 0x408]
mov qword [rsp + 0xb0], rax
movzx eax, byte [rsi + 0x408]
test eax, eax
je 0x140062368
cmp eax, 3
jne case.0x14006214f.1
lea rdi, [rsi + 0x400]
movzx eax, byte [rsi + 0x400]
lea r11, [rsi + 0x1d0]
test eax, eax
je 0x14006278a
cmp eax, 3
jne case.0x14006214f.1
lea rdx, [rsi + 0x348]
movzx eax, byte [rsi + 0x348]
test eax, eax
mov qword [rsp + 0x178], r11
mov qword [rsp + 0x58], rdi
je 0x140062998
cmp eax, 3
jne case.0x14006214f.1
lea rdi, [rsi + 0x340]
movzx eax, byte [rsi + 0x340]
test eax, eax
je 0x140064dad
cmp eax, 3
jne case.0x14006214f.1
mov qword [rsp + 0x40], rdx
mov rax, qword [rsi + 0x338]
jmp 0x140062a6e
movzx edx, word [rsi + 0x64]
mov r8d, dword [rsi + 0x60]
mov r9d, dword [rsi + 0x48]
mov r10, qword [rsi + 0x40]
mov r11, qword [rsi + 0x30]
mov edi, dword [rsi + 0x38]
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
mov rbx, qword [rsi + 0x50]
movzx ebp, word [rsi + 0x80]
movaps xmm3, xmmword [rsp + 0xa30]
movups xmmword [rsp + 0xa16], xmm3
mov r14, qword [rsp + 0xa40]
mov qword [rsp + 0xa26], r14
lea r13, [rsi + 0x118]
movups xmmword [rsi + 0x118], xmm0
movups xmmword [rsi + 0x128], xmm1
movups xmmword [rsi + 0x138], xmm2
mov qword [rsi + 0x148], r11
mov dword [rsi + 0x150], edi
mov qword [rsi + 0x158], r10
mov dword [rsi + 0x160], r9d
mov qword [rsi + 0x168], rbx
mov r9, qword [rsi + 0x58]
mov r10, qword [rsi + 0x78]
mov qword [rsi + 0x170], r9
mov dword [rsi + 0x178], r8d
mov word [rsi + 0x17c], dx
mov qword [rsi + 0x180], rax
mov qword [rsi + 0x188], rcx
mov qword [rsi + 0x190], r10
mov word [rsi + 0x198], bp
movdqu xmm0, xmmword [rsp + 0xa10]
movdqu xmm1, xmmword [rsp + 0xa1e]
movdqu xmmword [rsi + 0x1a8], xmm1
movdqu xmmword [rsi + 0x19a], xmm0
lea rax, [rsi + 0x408]
mov qword [rsp + 0xb0], rax
mov byte [rsi + 0x408], 0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140062393
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x2320
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov r14, rax
pxor xmm0, xmm0
movdqu xmmword [rax + 0x2310], xmm0
movdqu xmmword [rax + 0x2300], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400623eb
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x280
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbx, rax
and rbx, 0xffffffffffffff80
mov qword [rbx + 0x78], rax
mov qword [rbx + 0x80], 1
mov qword [rbx + 0x88], 1
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmm1, xmmword [rsp + 0xa40]
movaps xmm2, xmmword [rsp + 0xa50]
movaps xmm3, xmmword [rsp + 0xa60]
movaps xmmword [rbx + 0x90], xmm0
movaps xmmword [rbx + 0xa0], xmm1
movaps xmmword [rbx + 0xb0], xmm2
movaps xmmword [rbx + 0xc0], xmm3
movaps xmm0, xmmword [rsp + 0xa70]
movaps xmmword [rbx + 0xd0], xmm0
movaps xmm0, xmmword [rsp + 0xa80]
movaps xmmword [rbx + 0xe0], xmm0
movaps xmm0, xmmword [rsp + 0xa90]
movaps xmmword [rbx + 0xf0], xmm0
mov qword [rbx + 0x100], r14
mov qword [rbx + 0x108], 0
movaps xmm0, xmmword [rsp + 0x19c0]
movdqa xmm1, xmmword [rsp + 0x19d0]
movaps xmm2, xmmword [rsp + 0x19e0]
movaps xmm3, xmmword [rsp + 0x19f0]
movaps xmmword [rbx + 0x110], xmm0
movdqa xmmword [rbx + 0x120], xmm1
movaps xmmword [rbx + 0x130], xmm2
movaps xmmword [rbx + 0x140], xmm3
movaps xmm0, xmmword [rsp + 0x1a00]
movaps xmmword [rbx + 0x150], xmm0
movaps xmm0, xmmword [rsp + 0x1a10]
movaps xmmword [rbx + 0x160], xmm0
movdqa xmm0, xmmword [rsp + 0x1a20]
movdqa xmmword [rbx + 0x170], xmm0
mov qword [rbx + 0x180], 0
mov qword [rbx + 0x190], 0
mov qword [rbx + 0x200], r14
mov qword [rbx + 0x208], r14
mov qword [rbx + 0x210], 0
mov byte [rbx + 0x218], 0
mov qword [rbx + 0x220], 0
mov byte [rbx + 0x228], 0
pxor xmm0, xmm0
movdqa xmmword [rbx + 0x240], xmm0
movdqa xmmword [rbx + 0x230], xmm0
mov qword [rbx + 0x250], 1
lock inc qword [rbx + 0x80]
jle case.0x14006214f.1
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400625aa
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x30
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbp, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x28], 0
pxor xmm0, xmm0
movdqu xmmword [rax + 0x10], xmm0
lock inc qword [rax]
jle case.0x14006214f.1
sub rbx, 0xffffffffffffff80
mov qword [rsi + 0x1b8], rbp
mov qword [rsi + 0x1c0], rbx
mov byte [rsi + 0x1c8], 0
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsi + 0x1c9], eax
mov dword [rsi + 0x1cc], ecx
cmp byte [rsi + 0x198], 0
je 0x1400626f6
lea rax, [rsi + 0x1a0]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xa40], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0xa30], xmm0
mov rcx, qword [rsi + 0x180]
mov rdx, qword [rsi + 0x188]
test rcx, rcx
je 0x140062666
lock inc qword [rcx]
jle case.0x14006214f.1
lea rax, [rsi + 0x138]
mov r8, qword [rsp + 0xa40]
mov qword [rsp + 0x810], r8
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmmword [rsp + 0x800], xmm0
lea r11, [rsi + 0x1d0]
mov qword [rsi + 0x1d0], rcx
mov qword [rsi + 0x1d8], rdx
mov qword [rsi + 0x350], rbx
mov qword [rsi + 0x358], rbp
mov qword [rsi + 0x3e0], rax
movaps xmm0, xmmword [rsp + 0x800]
movups xmmword [rsi + 0x3e8], xmm0
mov r8, qword [rsp + 0x810]
mov qword [rsi + 0x3f8], r8
lea rdi, [rsi + 0x400]
mov byte [rsi + 0x400], 0
movq xmm1, rbp
movq xmm0, rbx
punpcklqdq xmm0, xmm1
jmp 0x1400627a7
mov rcx, qword [rsi + 0x1a0]
mov rdx, qword [rsi + 0x1a8]
mov rax, qword [rsi + 0x1b0]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdx
call qword [rdx + 0x40]
mov r14d, eax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140062754
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x2000
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
movzx ecx, byte [rsi + 0x199]
test ecx, ecx
je 0x1400648da
cmp ecx, 2
jne 0x1400648d8
mov ecx, r14d
jmp 0x1400648da
movdqu xmm0, xmmword [rsi + 0x350]
mov rax, qword [rsi + 0x3e0]
mov rcx, qword [rsi + 0x1d0]
mov rdx, qword [rsi + 0x1d8]
movdqu xmmword [rsi + 0x1e0], xmm0
mov qword [rsi + 0x360], rax
mov qword [rsi + 0x1f0], rcx
mov qword [rsi + 0x1f8], rdx
mov ecx, dword [rax + 0x40]
lea edx, [rcx - 0x4000]
cmp edx, 0xffc000
jae case.0x14006214f.1
mov r8, qword [rax + 0x30]
mov rdx, r8
shr rdx, 0x20
jne case.0x14006214f.1
lea rdx, [rsi + 0x3e8]
mov r10d, dword [rax + 0x38]
mov r9d, dword [rax + 0x3c]
cmp qword [rax], 0
je 0x140062805
mov rax, qword [rax + 8]
jmp 0x14006280a
mov eax, 0xa
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x178], r11
mov dword [rsi + 0x368], 1
mov dword [rsi + 0x36c], r10d
mov qword [rsi + 0x370], 0x1e
mov dword [rsi + 0x378], 0
mov qword [rsi + 0x380], 0xffffffffffffffff
mov qword [rsi + 0x388], r8
mov qword [rsi + 0x390], rax
mov qword [rsi + 0x398], 0x14
mov dword [rsi + 0x3a0], 0
mov qword [rsi + 0x3a8], 1
mov dword [rsi + 0x3b0], 0
mov dword [rsi + 0x3b8], 1
mov dword [rsi + 0x3bc], r9d
mov dword [rsi + 0x3c0], 1
mov dword [rsi + 0x3c4], ecx
mov dword [rsi + 0x3c8], 0
mov dword [rsi + 0x3d0], 0
mov byte [rsi + 0x3d8], 0
mov dword [rsi + 0x3dc], 1
mov dword [rsi + 0x200], 1
mov dword [rsi + 0x204], r10d
mov qword [rsi + 0x208], 0x1e
mov dword [rsi + 0x210], 0
mov qword [rsi + 0x218], 0xffffffffffffffff
mov qword [rsi + 0x220], r8
mov qword [rsi + 0x228], rax
mov qword [rsi + 0x230], 0x14
mov dword [rsi + 0x238], 0
mov qword [rsi + 0x240], 1
mov dword [rsi + 0x248], 0
mov dword [rsi + 0x250], 1
mov dword [rsi + 0x254], r9d
mov dword [rsi + 0x258], 1
mov dword [rsi + 0x25c], ecx
mov dword [rsi + 0x260], 0
mov dword [rsi + 0x268], 0
mov byte [rsi + 0x270], 0
mov dword [rsi + 0x274], 1
mov rax, qword [rdx + 0x10]
mov qword [rsi + 0x288], rax
movups xmm0, xmmword [rdx]
movups xmmword [rsi + 0x278], xmm0
lea rdx, [rsi + 0x348]
mov byte [rsi + 0x348], 0
lea rax, [rsi + 0x290]
mov rcx, qword [rsi + 0x288]
mov qword [rsi + 0x2a0], rcx
movups xmm0, xmmword [rsi + 0x278]
movups xmmword [rsi + 0x290], xmm0
movups xmm0, xmmword [rsi + 0x200]
movdqu xmm1, xmmword [rsi + 0x210]
movups xmm2, xmmword [rsi + 0x220]
movups xmm3, xmmword [rsi + 0x230]
movups xmmword [rsi + 0x2a8], xmm0
movdqu xmmword [rsi + 0x2b8], xmm1
movups xmmword [rsi + 0x2c8], xmm2
movups xmmword [rsi + 0x2d8], xmm3
movups xmm0, xmmword [rsi + 0x240]
movups xmmword [rsi + 0x2e8], xmm0
movups xmm0, xmmword [rsi + 0x250]
movups xmmword [rsi + 0x2f8], xmm0
movdqu xmm0, xmmword [rsi + 0x260]
movdqu xmmword [rsi + 0x308], xmm0
mov rcx, qword [rsi + 0x270]
mov qword [rsi + 0x318], rcx
mov qword [rsi + 0x320], rax
lea rdi, [rsi + 0x340]
mov byte [rsi + 0x340], 0
mov qword [rsp + 0x40], rdx
mov qword [rsi + 0x328], rax
lea rax, str.PRI__HTTP_2.0_r_n_r_nSM_r_n_r_n
mov qword [rsi + 0x330], rax
mov qword [rsi + 0x338], 0x18
mov eax, 0x18
lea rbx, [rsp + 0xa30]
lea r14, str.combase.dll
movabs rbp, 0x1700000003
nop word [rax + rax]
test rax, rax
je 0x140062bc2
mov rcx, qword [rsi + 0x328]
mov r9, qword [rsi + 0x330]
mov rdx, qword [rcx]
mov r10, qword [rcx + 8]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov r8, r15
call qword [r10 + 0x20]
mov rax, qword [rsp + 0xa30]
cmp rax, 2
je 0x140062b1d
mov rcx, qword [rsp + 0xa38]
test rax, rax
jne 0x140062b2a
mov rdx, qword [rsi + 0x330]
mov rax, qword [rsi + 0x338]
mov qword [rsi + 0x330], r14
mov qword [rsi + 0x338], 0
sub rax, rcx
jb case.0x14006214f.1
add rdx, rcx
mov qword [rsi + 0x330], rdx
mov qword [rsi + 0x338], rax
test rcx, rcx
jne 0x140062a90
jmp 0x140062b36
mov byte [rdi], 3
mov rax, qword [rsp + 0x40]
mov byte [rax], 3
jmp 0x140062ba2
mov rbp, rcx
test rcx, rcx
je 0x140062bc2
mov qword [rsp + 0x90], rbp
mov byte [rsi + 0x340], 1
mov rbx, qword [rsi + 0x290]
mov rdi, qword [rsi + 0x298]
mov rcx, rbx
call qword [rdi]
mov byte [rsp + 0x98], 4
mov ebp, 2
cmp qword [rdi + 8], 0
je 0x140062b88
cmp qword [rdi + 0x10], 0x11
jb 0x140062b77
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x40]
mov byte [rax], 1
cmp rbp, 3
jne 0x140063df2
mov rax, qword [rsp + 0x58]
mov byte [rax], 3
mov rax, qword [rsp + 0xb0]
mov byte [rax], 3
mov byte [r12 + 0x70], 3
mov al, 3
jmp 0x14006b111
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x130], r12
mov byte [rsi + 0x340], 1
mov rbx, qword [rsi + 0x290]
mov rdi, qword [rsi + 0x298]
mov r15, qword [rsi + 0x2a0]
mov rcx, rbx
call qword [rdi + 0x40]
test al, al
mov eax, 0x100
mov r12d, 0x400
cmovne r12, rax
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
mov qword [rsp + 0x2ea0], 0
movdqa xmmword [rsp + 0x540], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140062c58
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x4000
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov r14, rax
mov qword [rsp + 0xa30], 1
mov qword [rsp + 0xa38], 0
mov qword [rsp + 0xa48], 3
mov qword [rsp + 0xa50], 0
mov qword [rsp + 0xa58], 9
mov byte [rsp + 0xa60], 1
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140062ce0
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x2000
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov word [rsp + 0xbf0], 0
mov qword [rsp + 0xbd0], rax
mov qword [rsp + 0xbd8], 0
mov qword [rsp + 0xbe0], 0x2000
mov qword [rsp + 0xbe8], 0x11
mov byte [rsp + 0xbf2], 0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140062d5f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x1000
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rcx, r12
or rcx, 9
mov qword [rsp + 0xbf8], 0
mov qword [rsp + 0xc58], 0x1000
mov qword [rsp + 0xc08], 8
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xc10], xmm0
movdqu xmmword [rsp + 0xc20], xmm0
mov qword [rsp + 0xc30], 0x1000
mov qword [rsp + 0xc38], rax
mov qword [rsp + 0xc40], 0
mov qword [rsp + 0xc48], 0x1000
mov qword [rsp + 0xc50], 0xd
mov qword [rsp + 0xa78], 2
movups xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rsp + 0xa80], xmm0
mov qword [rsp + 0xa90], 8
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0xa98], xmm0
mov qword [rsp + 0xaa8], 8
mov rax, qword [rsp + 0x2ea0]
mov qword [rsp + 0xac0], rax
movaps xmm0, xmmword [rsp + 0x2e90]
movups xmmword [rsp + 0xab0], xmm0
mov qword [rsp + 0xac8], 0
movaps xmm0, xmmword [rsp + 0x540]
movups xmmword [rsp + 0xad0], xmm0
mov qword [rsp + 0xae0], 0x1000
mov qword [rsp + 0xae8], 3
movups xmm0, xmmword [rsp + 0x19c0]
movups xmm1, xmmword [rsp + 0x19d0]
movups xmm2, xmmword [rsp + 0x19e0]
movups xmm3, xmmword [rsp + 0x19f0]
movups xmmword [rsp + 0xaf0], xmm0
movups xmmword [rsp + 0xb00], xmm1
movups xmmword [rsp + 0xb10], xmm2
movups xmmword [rsp + 0xb20], xmm3
mov qword [rsp + 0xb30], 4
movdqu xmm0, xmmword [rsp + 0x2950]
movdqu xmm1, xmmword [rsp + 0x2960]
movups xmm2, xmmword [rsp + 0x2970]
movups xmm3, xmmword [rsp + 0x2980]
movdqu xmmword [rsp + 0xb38], xmm0
movdqu xmmword [rsp + 0xb48], xmm1
movups xmmword [rsp + 0xb58], xmm2
movups xmmword [rsp + 0xb68], xmm3
mov qword [rsp + 0xb78], r14
mov qword [rsp + 0xb80], 0
mov qword [rsp + 0xb88], 0x4000
mov qword [rsp + 0xb90], 0x15
mov qword [rsp + 0xb98], 0
mov qword [rsp + 0xba0], r12
mov qword [rsp + 0xba8], rcx
mov dword [rsp + 0xbb0], 0x4000
mov qword [rsp + 0xbb8], rbx
mov qword [rsp + 0xbc0], rdi
mov qword [rsp + 0xbc8], r15
mov qword [rsp + 0xa40], 0x4000
mov qword [rsp + 0xa68], 0
mov qword [rsp + 0xc60], 2
mov qword [rsp + 0xda0], 0x1000000
mov eax, dword [rsi + 0x300]
test eax, eax
je 0x140062fdd
mov ecx, dword [rsi + 0x304]
lea rdx, [rcx - 0x4000]
cmp rdx, 0xffc000
jae case.0x14006214f.1
mov qword [rsp + 0xa40], rcx
mov ecx, dword [rsi + 0x308]
test ecx, ecx
je 0x140062ff7
mov edx, dword [rsi + 0x30c]
mov qword [rsp + 0xda0], rdx
jmp 0x140062ff7
mov qword [rsp + 0x48], r13
movzx r8d, byte [rsi + 0x318]
movdqu xmm0, xmmword [rsi + 0x2e0]
movdqu xmm1, xmmword [rsi + 0x2f0]
mov r9d, dword [rsi + 0x304]
mov r10, qword [rsi + 0x310]
movdqu xmmword [rsp + 0x19c4], xmm0
movdqu xmmword [rsp + 0x19d4], xmm1
mov dword [rsp + 0x19e4], eax
mov dword [rsp + 0x19e8], r9d
mov dword [rsp + 0x19ec], ecx
mov dword [rsp + 0x19f0], edx
mov qword [rsp + 0x19f4], r10
mov byte [rsp + 0x19fc], r8b
mov byte [rsp + 0x19c0], 4
lea rcx, [rsp + 0xa78]
lea rdx, [rsp + 0x19c0]
call fcn.140092a40
cmp al, 0xc
jne case.0x14006214f.1
mov rax, qword [rsp + 0xa30]
mov qword [rsp + 0x110], rax
movzx eax, byte [rsp + 0xa38]
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0xa3f]
mov dword [rsp + 0x158], eax
movzx eax, word [rsp + 0xa3d]
mov qword [rsp + 0x128], rax
mov eax, dword [rsp + 0xa39]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0xa40]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa48]
mov qword [rsp + 0x170], rax
mov eax, dword [rsi + 0x2e8]
mov qword [rsp + 0x78], rax
test rax, rax
sete bl
mov edx, dword [rsi + 0x2ec]
mov ecx, dword [rsi + 0x2f8]
mov eax, dword [rsi + 0x310]
mov qword [rsp + 0x50], rax
test rax, rax
setne bpl
mov qword [rsp + 0x60], rcx
test rcx, rcx
mov eax, dword [rsi + 0x2fc]
mov edi, 0xffff
mov dword [rsp + 0x1a0], eax
cmovne edi, eax
mov eax, dword [rsi + 0x314]
mov dword [rsp + 0xc0], edx
test edx, edx
setne byte [rsp + 0x120]
mov dword [rsp + 0xc4], eax
test eax, eax
setne byte [rsp + 0xe8]
mov rax, qword [rsp + 0xa50]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xa60]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0xa68]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0xa88]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0xa90]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0xa98]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0xaa0]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0xaa8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0xab0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0xac0]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0xac8]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0xad0]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0xae8]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0xaf8]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xb08]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xb10]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0xb18]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0xb20]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xb28]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0xb30]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xb38]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xb40]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xb48]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xb50]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0xb58]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xb60]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0xb68]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0xb88]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xb98]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0xba0]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0xba8]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0xbb0]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xbb8]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0xbc0]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0xbc8]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0xbd0]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0xbd8]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xbe0]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0xbe8]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0xbf0]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0xbf8]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0xc00]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0xc08]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0xc18]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0xc20]
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0xc28]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0xc30]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0xc38]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0xc40]
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0xc48]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0xc60]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0xc80]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0xc88]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0xc90]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0xca8]
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0xcb8]
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0xcc0]
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0xcd0]
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0xcd8]
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0xce0]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0xce8]
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0xcf0]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0xcf8]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0xd00]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0xd08]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0xd10]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0xd18]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0xd20]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0xd28]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0xd38]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0xd40]
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0xd48]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0xd58]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0xd60]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0xd68]
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0x4d0], rax
mov rax, qword [rsp + 0xd78]
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0xd80]
mov qword [rsp + 0x4b8], rax
mov rax, qword [rsp + 0xd88]
mov qword [rsp + 0x4e0], rax
mov rax, qword [rsp + 0xd90]
mov qword [rsp + 0x4c0], rax
mov rax, qword [rsp + 0xd98]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xda0]
mov qword [rsp + 0x4c8], rax
mov r12d, dword [rsi + 0x31c]
mov rax, qword [rsi + 0x2c0]
mov qword [rsp + 0x160], rax
mov r14, qword [rsi + 0x2c8]
mov r15, qword [rsi + 0x2b0]
mov r13d, dword [rsi + 0x2b8]
mov rax, qword [rsi + 0x2d0]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsi + 0x2d8]
mov qword [rsp + 0x80], rax
movzx eax, byte [rsi + 0x318]
mov qword [rsp + 0x68], rax
mov eax, dword [rsi + 0x2e0]
mov qword [rsp + 0xa0], rax
mov eax, dword [rsi + 0x2e4]
mov dword [rsp + 0x148], eax
mov eax, dword [rsi + 0x2f0]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 0x2f4]
mov qword [rsp + 0x38], rax
mov eax, dword [rsi + 0x300]
mov qword [rsp + 0x70], rax
mov eax, dword [rsi + 0x304]
mov dword [rsp + 0x150], eax
mov eax, dword [rsi + 0x308]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsi + 0x30c]
mov dword [rsp + 0xbc], eax
xor ecx, ecx
call fcn.1400ef760
test rax, rax
je case.0x14006214f.1
movups xmm6, xmmword [rax]
inc qword [rax]
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
movdqa xmmword [rsp + 0x19c0], xmm0
movdqa xmmword [rsp + 0x19d0], xmm0
movdqa xmmword [rsp + 0x2950], xmm0
movdqa xmmword [rsp + 0x2960], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140063942
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x230
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
or bl, byte [rsp + 0x120]
and bpl, byte [rsp + 0xe8]
xor r8d, r8d
cmp qword [rsp + 0x28], 1
sbb r8, r8
or r8, qword [rsp + 0x38]
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov ecx, dword [rsp + 0xd8]
mov edx, dword [rsp + 0xdb]
mov dword [rax + 0x19], ecx
mov dword [rax + 0x1c], edx
movabs rcx, 0x200000000
mov qword [rax + 0x20], rcx
mov dword [rax + 0x28], 0
mov qword [rax + 0x30], r15
mov dword [rax + 0x38], r13d
mov qword [rax + 0x40], 8
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movups xmmword [rax + 0x48], xmm0
movups xmmword [rax + 0x58], xmm1
movabs rcx, 0xffff0000ffff
mov qword [rax + 0x68], rcx
mov dword [rax + 0x70], 0
movups xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rax + 0x74], xmm0
mov dword [rax + 0x84], 0
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rax + 0x88], xmm0
mov dword [rax + 0x98], 0
movups xmm0, xmmword [rsp + 0x540]
movups xmmword [rax + 0x9c], xmm0
mov dword [rax + 0xac], edi
mov qword [rax + 0xb0], 0
mov dword [rax + 0xb8], 0x7fffffff
mov byte [rax + 0xbc], bl
mov byte [rax + 0xbd], bpl
mov dword [rax + 0xc0], 0
mov dword [rax + 0xc4], r12d
mov qword [rax + 0xc8], rcx
mov qword [rax + 0xd0], r14
mov dword [rax + 0xd8], 0
movups xmm0, xmmword [rsp + 0x598]
movups xmmword [rax + 0xdc], xmm0
mov dword [rax + 0xec], 0
movups xmm0, xmmword [rsp + 0x138]
movups xmmword [rax + 0xf0], xmm0
mov dword [rax + 0x100], 0
movups xmm0, xmmword [rsp + 0x4e8]
movups xmmword [rax + 0x104], xmm0
mov dword [rax + 0x114], 0
mov dword [rax + 0x120], 0
movabs rcx, 0xffff7fffffff
mov qword [rax + 0x128], rcx
mov word [rax + 0x130], 1
movzx ecx, word [rsp + 0x81e]
mov word [rax + 0x136], cx
mov ecx, dword [rsp + 0x81a]
mov dword [rax + 0x132], ecx
mov byte [rax + 0x138], 3
mov qword [rax + 0x160], 0
mov rcx, qword [rsp + 0x160]
mov qword [rax + 0x170], rcx
mov qword [rax + 0x178], 0
mov qword [rax + 0x180], r8
mov qword [rax + 0x188], 0
mov rcx, qword [rsp + 0x1a8]
mov qword [rax + 0x190], rcx
mov qword [rax + 0x198], 0
mov rcx, qword [rsp + 0x80]
mov qword [rax + 0x1a0], rcx
mov qword [rax + 0x1a8], 0
mov byte [rax + 0x1b0], 0
mov qword [rax + 0x1b8], 8
movaps xmm0, xmmword [rsp + 0x19c0]
movdqa xmm1, xmmword [rsp + 0x19d0]
movdqu xmmword [rax + 0x1d0], xmm1
movups xmmword [rax + 0x1c0], xmm0
movups xmm0, xmmword [0x140173c80]
movups xmmword [rax + 0x1f0], xmm0
movups xmm0, xmmword [0x140173c70]
movups xmmword [rax + 0x1e0], xmm0
mov qword [rax + 0x200], 8
movdqa xmm0, xmmword [rsp + 0x2e90]
movdqu xmmword [rax + 0x208], xmm0
movups xmmword [rax + 0x218], xmm6
mov qword [rax + 0x228], 1
movzx ecx, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
mov rdi, rax
je 0x140063c33
mov r12, qword [rsp + 0x130]
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x110]
jmp 0x140063c65
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
mov r12, qword [rsp + 0x130]
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x110]
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x48
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbx, rdi
add rbx, 0x10
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], 8
pxor xmm0, xmm0
movdqu xmmword [rax + 0x28], xmm0
mov qword [rsp + 0x120], rax
movdqu xmmword [rax + 0x38], xmm0
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [rdi + 0x18]
test al, al
jne case.0x14006214f.1
inc qword [rdi + 0x228]
mov rcx, rbx
call fcn.140118b6c
lock inc qword [rdi]
jle case.0x14006214f.1
mov rax, qword [rsp + 0x120]
lock inc qword [rax]
mov rbx, qword [rsp + 0x88]
jle case.0x14006214f.1
cmp dword [rsi + 0x2a8], 0
je 0x140063d21
mov edx, dword [rsi + 0x2ac]
test edx, edx
js case.0x14006214f.1
mov rcx, rdi
call fcn.1400bf5b0
mov ecx, dword [rsp + 0x158]
shl ecx, 0x10
mov rax, qword [rsp + 0x128]
or eax, ecx
shl rax, 0x20
or rbx, rax
mov eax, dword [rsp + 0x148]
mov rcx, qword [rsp + 0x78]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x78], rcx
mov eax, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x28]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x28], rcx
mov rax, qword [rsp + 0x60]
shl rax, 0x20
add rax, qword [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov eax, dword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x70]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x70], rcx
mov eax, dword [rsp + 0x150]
mov rcx, qword [rsp + 0xa8]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0xa8], rcx
mov eax, dword [rsp + 0xbc]
mov rcx, qword [rsp + 0x50]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x50], rcx
mov eax, dword [rsp + 0xc4]
mov rcx, qword [rsp + 0x68]
shl rcx, 0x20
or rcx, rax
mov rax, qword [rsp + 0x40]
mov byte [rax], 1
cmp rbp, 3
je 0x140062ba2
cmp rbp, 2
jne 0x140063eb2
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0xa30], al
mov dword [rsp + 0xa31], ebx
mov rax, rbx
shr rax, 0x30
mov byte [rsp + 0xa37], al
shr rbx, 0x20
mov word [rsp + 0xa35], bx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0xa48], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xa50], rax
lea rcx, [rsp + 0xa30]
call fcn.14003daf0
mov rdi, rax
mov rax, qword [rsi + 0x1f0]
test rax, rax
je 0x140063ea1
lock dec qword [rax]
jne 0x140063ea1
mov rcx, qword [rsi + 0x1f0]
mov rdx, qword [rsi + 0x1f8]
call fcn.14006f370
lea rcx, [rsi + 0x1e0]
call fcn.140058400
jmp 0x1400686e4
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x68], rcx
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140063eea
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbx, rax
mov qword [rax], 0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140063f35
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x10
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov r14, rax
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140063f81
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x60
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
movabs rcx, 0x7fffffffffffffff
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], r14
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], 1
inc rcx
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], 1
mov qword [rax + 0x48], 0
mov qword [rax + 0x58], 0
mov qword [rsp + 0xe8], rax
lock inc qword [rax]
jle case.0x14006214f.1
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
mov r14, qword [rsp + 0xa0]
jne 0x14006402c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x38
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x18], 0
mov qword [rax + 0x20], 0
mov qword [rsp + 0x1a8], rax
mov byte [rax + 0x30], 0
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x10b], ecx
mov dword [rsp + 0x108], eax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400640b8
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x48
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov qword [rsp + 0x48], r13
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], 0
mov byte [rax + 0x20], 0
mov qword [rax + 0x28], 0
mov byte [rax + 0x38], 0
mov word [rax + 0x40], 0
lock inc qword [rax]
jle case.0x14006214f.1
mov qword [rsp + 0x40], rax
shl r14, 0x20
or r14, 1
mov rax, qword [rsi + 0x360]
movzx ebx, byte [rax + 0x44]
mov ecx, dword [rax + 0x3c]
mov dword [rsp + 0xbc], ecx
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x158], rcx
mov r13d, dword [rax + 0x28]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x1a0], rcx
mov ecx, dword [rax + 0x18]
mov dword [rsp + 0xc0], ecx
movzx eax, byte [rax + 0x45]
mov byte [rsp + 0xc4], al
test bl, bl
mov rax, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x4e0]
mov r8, qword [rsp + 0x4b8]
mov r9, qword [rsp + 0x4d8]
mov r10, qword [rsp + 0x4d0]
mov r11, qword [rsp + 0x530]
mov dword [rsp + 0x160], r13d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x110], rbp
mov qword [rsp + 0xa0], r14
jne 0x140064c92
cmp r13d, 0x3b9aca00
jne 0x140064c92
mov rbx, qword [rsp + 0x4c8]
mov qword [rsp + 0x508], rbx
mov rbx, rax
mov qword [rsp + 0x4c0], rcx
mov qword [rsp + 0x4b8], r9
mov r9, r10
mov r10, r11
mov r11, qword [rsp + 0x4b0]
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x438], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0x408], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x400], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x3e8], rax
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x150], rcx
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0xa8], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x1c0], rax
mov eax, 2
mov qword [rsp + 0x118], rax
mov eax, 0x200
mov qword [rsp + 0x518], rax
xor eax, eax
mov qword [rsp + 0x510], rax
xor eax, eax
mov qword [rsp + 0x520], rax
mov qword [rsp + 0x528], rdi
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x500], rbp
mov eax, 0
mov qword [rsp + 0x128], rax
xor eax, eax
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0xe8]
mov r13, qword [rsp + 0x48]
jmp 0x1400651d2
mov cl, 1
mov qword [rsp + 0x48], r13
cmp qword [rsi + 0x118], 0
mov qword [rsp + 0x30], r15
mov r13, r12
je 0x1400648ff
mov r9, qword [rsi + 0x120]
mov edx, 1
jmp 0x140064907
mov r9d, 0x2000
xor edx, edx
movzx r14d, byte [rsi + 0x195]
mov r12d, dword [rsi + 0x191]
movzx r15d, byte [rsi + 0x196]
movzx edi, byte [rsi + 0x197]
movzx r8d, byte [rsi + 0x190]
cmp qword [rsi + 0x128], 0
mov dword [rsp + 0x58], ecx
mov qword [rsp + 0x90], rax
je 0x14006496b
mov rdx, qword [rsi + 0x130]
cmp rdx, 0x1fff
jbe case.0x14006214f.1
mov qword [rsp + 0x68], rdx
mov r9d, 0x2000
xor eax, eax
mov qword [rsp + 0x60], rax
jmp 0x14006497a
mov qword [rsp + 0x60], rdx
mov eax, 0x66000
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x88], r9
movups xmm0, xmmword [rsp + 0x19c0]
movdqu xmm1, xmmword [rsp + 0x19d0]
movups xmm2, xmmword [rsp + 0x19e0]
movups xmm3, xmmword [rsp + 0x19f0]
movaps xmmword [rsp + 0xa30], xmm0
movdqa xmmword [rsp + 0xa40], xmm1
movaps xmmword [rsp + 0xa50], xmm2
movaps xmmword [rsp + 0xa60], xmm3
movdqu xmm0, xmmword [rsp + 0x1a00]
movdqa xmmword [rsp + 0xa70], xmm0
mov rcx, qword [rsp + 0x1a10]
mov qword [rsp + 0xa80], rcx
mov ecx, dword [rsp + 0x6a0]
mov edx, dword [rsp + 0x6a3]
mov dword [rsp + 0x640], ecx
cmp r8b, 1
mov eax, 0x2010001
sbb rax, 0
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x643], edx
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x2e90], xmm0
movdqa xmmword [rsp + 0x2950], xmm0
mov qword [rsp + 0x2960], 0
mov eax, dword [rsp + 0x800]
mov ecx, dword [rsp + 0x803]
mov dword [rsp + 0x903], ecx
mov dword [rsp + 0x900], eax
movzx eax, word [rsp + 0x544]
mov word [rsp + 0x184], ax
mov eax, dword [rsp + 0x540]
mov dword [rsp + 0x180], eax
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140064a9b
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x28
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
shl r14, 0x20
or r14, r12
shl r15, 0x38
shl rdi, 0x30
or rdi, r15
movabs rcx, 0xffffffffff
and rcx, r14
shl rcx, 8
or rcx, rdi
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x178], rax
mov qword [rax], 0
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x870], rax
movaps xmm0, xmmword [rsp + 0xa70]
movaps xmmword [rsp + 0x860], xmm0
movaps xmm0, xmmword [rsp + 0xa30]
movaps xmm1, xmmword [rsp + 0xa40]
movaps xmm2, xmmword [rsp + 0xa50]
movaps xmm3, xmmword [rsp + 0xa60]
movaps xmmword [rsp + 0x850], xmm3
movaps xmmword [rsp + 0x840], xmm2
movaps xmmword [rsp + 0x830], xmm1
movaps xmmword [rsp + 0x820], xmm0
mov eax, dword [rsp + 0x640]
mov ecx, dword [rsp + 0x643]
mov dword [rsp + 0x538], eax
mov dword [rsp + 0x53b], ecx
movaps xmm0, xmmword [rsp + 0x2e90]
movaps xmmword [rsp + 0x720], xmm0
mov rax, qword [rsp + 0x2960]
mov qword [rsp + 0x710], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmmword [rsp + 0x700], xmm0
mov eax, dword [rsp + 0x900]
mov ecx, dword [rsp + 0x903]
mov dword [rsp + 0x5eb], ecx
mov dword [rsp + 0x5e8], eax
movzx eax, word [rsp + 0x184]
mov word [rsp + 0x574], ax
mov eax, dword [rsp + 0x180]
mov dword [rsp + 0x570], eax
movups xmm0, xmmword [rsp + 0x8d8]
movaps xmmword [rsp + 0x6f0], xmm0
mov eax, dword [rsp + 0x8eb]
mov ecx, dword [rsp + 0x8ee]
mov dword [rsp + 0x5e3], ecx
mov dword [rsp + 0x5e0], eax
movups xmm0, xmmword [rsp + 0x730]
movups xmm1, xmmword [rsp + 0x740]
movaps xmmword [rsp + 0x6d0], xmm1
movaps xmmword [rsp + 0x6c0], xmm0
mov eax, dword [rsp + 0x8f9]
mov ecx, dword [rsp + 0x8fc]
mov dword [rsp + 0x5db], ecx
mov dword [rsp + 0x5d8], eax
mov eax, dword [rsp + 0x8f2]
mov ecx, dword [rsp + 0x8f5]
mov dword [rsp + 0x5d3], ecx
mov dword [rsp + 0x5d0], eax
mov eax, 0xb
mov qword [rsp + 0x28], rax
mov eax, 2
mov qword [rsp + 0x40], rax
mov eax, 3
mov qword [rsp + 0x50], rax
xor eax, eax
mov qword [rsp + 0x70], rax
xor r14d, r14d
mov r12, r13
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
jmp 0x1400688fc
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140064cbd
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x48
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x40], 0
pxor xmm0, xmm0
movdqu xmmword [rax + 0x10], xmm0
movdqu xmmword [rax + 0x28], xmm0
lock inc qword [rax]
jle case.0x14006214f.1
mov r15, r12
mov qword [rsp + 0x128], rax
mov ebp, 0x3b9aca00
movabs r12, 0x44b82fa09b5a53
test bl, bl
mov r13, qword [rsp + 0x48]
je 0x140064db9
mov qword [rsp + 0xa30], 0
lea rcx, [rsp + 0xa30]
call sub.KERNEL32.dll_QueryPerformanceCounter
test eax, eax
je 0x14006b137
mov rbx, qword [rsp + 0xa30]
mov rcx, qword [0x1401a4140]
test rcx, rcx
jne 0x140064d97
mov rax, qword [rsi + 0x320]
jmp 0x140062a44
xor edi, edi
mov dword [rsp + 0xf4], 0x3b9aca00
mov ebx, 0x3b9aca00
jmp 0x140064e2e
mov r8d, dword [rsp + 0x160]
cmp r8d, 0x3b9aca00
jne 0x140064e44
movdqa xmm0, xmmword [rsp + 0x19c0]
movdqa xmmword [rsp + 0x540], xmm0
mov eax, dword [rsp + 0x19d0]
mov dword [rsp + 0x550], eax
mov eax, dword [rsp + 0x2e90]
mov dword [rsp + 0x4e8], eax
movzx eax, word [rsp + 0x2e94]
mov word [rsp + 0x4ec], ax
mov r14, qword [rsi + 0x1f0]
test r14, r14
mov qword [rsp + 0x4c8], rbx
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0x4e0], r8
mov qword [rsp + 0x4d8], r9
mov qword [rsp + 0x4d0], r10
je 0x140065bb7
mov rbp, r11
mov rdi, qword [rsi + 0x1f8]
mov r15, qword [rdi + 0x10]
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140065281
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0xf80
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbx, rax
dec r15
and r15, 0xfffffffffffffff0
add r14, r15
add r14, 0x10
mov qword [rax], 1
mov rax, qword [rsp + 0xe8]
mov qword [rbx + 8], rax
mov rax, qword [rsp + 0x118]
mov qword [rbx + 0x10], rax
mov rax, qword [rsp + 0x500]
mov qword [rbx + 0x18], rax
movzx eax, byte [rsp + 0x98]
mov byte [rbx + 0x20], al
mov rcx, qword [rsp + 0x88]
mov rax, rcx
shr rax, 0x30
mov byte [rbx + 0x27], al
mov dword [rbx + 0x21], ecx
shr rcx, 0x20
mov word [rbx + 0x25], cx
mov rax, qword [rsp + 0x90]
mov qword [rbx + 0x28], rax
mov rax, qword [rsp + 0x170]
mov qword [rbx + 0x30], rax
mov rax, qword [rsp + 0x168]
mov qword [rbx + 0x38], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rbx + 0x40], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rbx + 0x48], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rbx + 0x50], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rbx + 0x58], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rbx + 0x60], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rbx + 0x68], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rbx + 0x70], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rbx + 0x78], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rbx + 0x80], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rbx + 0x88], rax
mov rax, qword [rsp + 0x200]
mov qword [rbx + 0x90], rax
mov rax, qword [rsp + 0x208]
mov qword [rbx + 0x98], rax
mov rax, qword [rsp + 0x210]
mov qword [rbx + 0xa0], rax
mov rax, qword [rsp + 0x218]
mov qword [rbx + 0xa8], rax
mov rax, qword [rsp + 0x220]
mov qword [rbx + 0xb0], rax
mov rax, qword [rsp + 0x228]
mov qword [rbx + 0xb8], rax
mov rax, qword [rsp + 0x230]
mov qword [rbx + 0xc0], rax
mov rax, qword [rsp + 0x238]
mov qword [rbx + 0xc8], rax
mov rax, qword [rsp + 0x240]
mov qword [rbx + 0xd0], rax
mov rax, qword [rsp + 0x248]
mov qword [rbx + 0xd8], rax
mov rax, qword [rsp + 0x250]
mov qword [rbx + 0xe0], rax
mov rax, qword [rsp + 0x258]
mov qword [rbx + 0xe8], rax
mov rax, qword [rsp + 0x260]
mov qword [rbx + 0xf0], rax
mov rax, qword [rsp + 0x268]
mov qword [rbx + 0xf8], rax
mov rax, qword [rsp + 0x270]
mov qword [rbx + 0x100], rax
mov rax, qword [rsp + 0x278]
mov qword [rbx + 0x108], rax
mov rax, qword [rsp + 0x280]
mov qword [rbx + 0x110], rax
mov rax, qword [rsp + 0x288]
mov qword [rbx + 0x118], rax
mov rax, qword [rsp + 0x290]
mov qword [rbx + 0x120], rax
mov rax, qword [rsp + 0x298]
mov qword [rbx + 0x128], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rbx + 0x130], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rbx + 0x138], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rbx + 0x140], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rbx + 0x148], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rbx + 0x150], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rbx + 0x158], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rbx + 0x160], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rbx + 0x168], rax
mov rax, qword [rsp + 0x2e0]
mov qword [rbx + 0x170], rax
mov rax, qword [rsp + 0x2e8]
mov qword [rbx + 0x178], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rbx + 0x180], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rbx + 0x188], rax
mov rax, qword [rsp + 0x300]
mov qword [rbx + 0x190], rax
mov rax, qword [rsp + 0x308]
mov qword [rbx + 0x198], rax
mov rax, qword [rsp + 0x310]
mov qword [rbx + 0x1a0], rax
mov rax, qword [rsp + 0x318]
mov qword [rbx + 0x1a8], rax
mov rax, qword [rsp + 0x320]
mov qword [rbx + 0x1b0], rax
mov rax, qword [rsp + 0x328]
mov qword [rbx + 0x1b8], rax
mov rax, qword [rsp + 0x330]
mov qword [rbx + 0x1c0], rax
mov rax, qword [rsp + 0x338]
mov qword [rbx + 0x1c8], rax
mov rax, qword [rsp + 0x340]
mov qword [rbx + 0x1d0], rax
mov rax, qword [rsp + 0x348]
mov qword [rbx + 0x1d8], rax
mov rax, qword [rsp + 0x350]
mov qword [rbx + 0x1e0], rax
mov rax, qword [rsp + 0x358]
mov qword [rbx + 0x1e8], rax
mov rax, qword [rsp + 0x360]
mov qword [rbx + 0x1f0], rax
mov rax, qword [rsp + 0x368]
mov qword [rbx + 0x1f8], rax
mov rax, qword [rsp + 0x370]
mov qword [rbx + 0x200], rax
mov rax, qword [rsp + 0x378]
mov qword [rbx + 0x208], rax
mov rax, qword [rsp + 0x380]
mov qword [rbx + 0x210], rax
mov rax, qword [rsp + 0x388]
mov qword [rbx + 0x218], rax
mov rax, qword [rsp + 0x390]
mov qword [rbx + 0x220], rax
mov rax, qword [rsp + 0x398]
mov qword [rbx + 0x228], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rbx + 0x230], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rbx + 0x238], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rbx + 0x240], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rbx + 0x248], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rbx + 0x250], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rbx + 0x258], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rbx + 0x260], rax
mov rax, qword [rsp + 0x3d8]
mov qword [rbx + 0x268], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rbx + 0x270], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rbx + 0x278], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rbx + 0x280], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rbx + 0x288], rax
mov rax, qword [rsp + 0x400]
mov qword [rbx + 0x290], rax
mov rax, qword [rsp + 0x408]
mov qword [rbx + 0x298], rax
mov rax, qword [rsp + 0x410]
mov qword [rbx + 0x2a0], rax
mov rax, qword [rsp + 0x418]
mov qword [rbx + 0x2a8], rax
mov rax, qword [rsp + 0x420]
mov qword [rbx + 0x2b0], rax
mov rax, qword [rsp + 0x428]
mov qword [rbx + 0x2b8], rax
mov rax, qword [rsp + 0x430]
mov qword [rbx + 0x2c0], rax
mov rax, qword [rsp + 0x438]
mov qword [rbx + 0x2c8], rax
mov rax, qword [rsp + 0x440]
mov qword [rbx + 0x2d0], rax
mov rax, qword [rsp + 0x448]
mov qword [rbx + 0x2d8], rax
mov rax, qword [rsp + 0x450]
mov qword [rbx + 0x2e0], rax
mov rax, qword [rsp + 0x458]
mov qword [rbx + 0x2e8], rax
mov rax, qword [rsp + 0x460]
mov qword [rbx + 0x2f0], rax
mov rax, qword [rsp + 0x468]
mov qword [rbx + 0x2f8], rax
mov rax, qword [rsp + 0x470]
mov qword [rbx + 0x300], rax
mov rax, qword [rsp + 0x478]
mov qword [rbx + 0x308], rax
mov rax, qword [rsp + 0x480]
mov qword [rbx + 0x310], rax
mov rax, qword [rsp + 0x488]
mov qword [rbx + 0x318], rax
mov rax, qword [rsp + 0x490]
mov qword [rbx + 0x320], rax
mov rax, qword [rsp + 0x498]
mov qword [rbx + 0x328], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rbx + 0x330], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rbx + 0x338], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rbx + 0x340], rax
mov qword [rbx + 0x348], rbp
mov rax, qword [rsp + 0x4d0]
mov qword [rbx + 0x350], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rbx + 0x358], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rbx + 0x360], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rbx + 0x368], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rbx + 0x370], rax
mov rax, qword [rsp + 0xe0]
mov qword [rbx + 0x378], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rbx + 0x380], rax
mov rax, qword [rsp + 0x508]
mov qword [rbx + 0x388], rax
mov qword [rbx + 0x390], 2
pxor xmm0, xmm0
movdqu xmmword [rbx + 0x3d8], xmm0
movdqu xmmword [rbx + 0x3c8], xmm0
movdqu xmmword [rbx + 0x3b8], xmm0
movdqu xmmword [rbx + 0x3a8], xmm0
movdqu xmmword [rbx + 0x398], xmm0
mov rax, qword [rsp + 0x128]
mov qword [rbx + 0x3e8], rax
mov qword [rbx + 0x3f0], 0
mov rax, qword [rsp + 0x510]
mov qword [rbx + 0x3f8], rax
mov rax, qword [rsp + 0x518]
mov qword [rbx + 0x400], rax
mov qword [rbx + 0x408], 0
mov rax, qword [rsp + 0x520]
mov qword [rbx + 0x410], rax
mov rax, qword [rsp + 0x528]
mov qword [rbx + 0x418], rax
mov rax, qword [rsp + 0x148]
mov qword [rbx + 0x420], rax
mov qword [rbx + 0x428], 0
mov rax, qword [rsp + 0xa0]
mov qword [rbx + 0x448], rax
mov rax, qword [rsp + 0x78]
mov qword [rbx + 0x450], rax
mov rax, qword [rsp + 0x28]
mov qword [rbx + 0x458], rax
mov rax, qword [rsp + 0x60]
mov qword [rbx + 0x460], rax
mov rax, qword [rsp + 0x70]
mov qword [rbx + 0x468], rax
mov rax, qword [rsp + 0xa8]
mov qword [rbx + 0x470], rax
mov rax, qword [rsp + 0x50]
mov qword [rbx + 0x478], rax
mov rax, qword [rsp + 0x68]
mov qword [rbx + 0x480], rax
mov rax, qword [rsp + 0x150]
mov qword [rbx + 0x488], rax
mov qword [rbx + 0x490], 2
movdqu xmmword [rbx + 0x4b8], xmm0
movdqu xmmword [rbx + 0x4a8], xmm0
movdqu xmmword [rbx + 0x498], xmm0
mov qword [rbx + 0x4c8], 0
mov eax, dword [rsp + 0xf4]
mov dword [rbx + 0x4d0], eax
movdqa xmm0, xmmword [rsp + 0x540]
movdqu xmmword [rbx + 0x4d4], xmm0
mov eax, dword [rsp + 0x550]
mov dword [rbx + 0x4e4], eax
mov eax, dword [rsp + 0xbc]
mov dword [rbx + 0x4e8], eax
mov dword [rbx + 0x4ec], 0
mov rax, qword [rsp + 0x158]
mov qword [rbx + 0x4f0], rax
mov eax, dword [rsp + 0x160]
mov dword [rbx + 0x4f8], eax
mov rax, qword [rsp + 0x1a0]
mov qword [rbx + 0x500], rax
mov eax, dword [rsp + 0xc0]
mov dword [rbx + 0x508], eax
mov rax, qword [rsp + 0x560]
mov qword [rbx + 0x510], rax
movzx eax, byte [rsp + 0xc4]
mov byte [rbx + 0x518], al
mov byte [rbx + 0x519], 0
mov eax, dword [rsp + 0x4e8]
mov dword [rbx + 0x51a], eax
movzx eax, word [rsp + 0x4ec]
mov word [rbx + 0x51e], ax
mov rax, qword [rsp + 0x80]
mov qword [rbx + 0x520], rax
mov rax, qword [rsp + 0x40]
mov qword [rbx + 0x528], rax
lea rcx, [rbx + 0x530]
lea rdx, [rsp + 0x19c0]
mov r8d, 0x518
call sub.msvcrt.dll_memcpy
mov byte [rbx + 0xa48], 0
mov rcx, rbx
add rcx, 0xa49
lea rdx, [rsp + 0xa30]
mov r8d, 0x537
call sub.msvcrt.dll_memcpy
lea r8, [0x140170da0]
mov rcx, r14
mov rdx, rbx
call qword [rdi + 0x18]
mov r15, qword [rsp + 0x30]
jmp 0x140068688
mov eax, 1
lock xadd qword [0x140123150], rax
mov qword [rsp + 0x598], rax
movaps xmm0, xmmword [rsp + 0x540]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [rsp + 0x550]
mov dword [rsp + 0x190], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x138], eax
movzx eax, word [rsp + 0x4ec]
mov word [rsp + 0x13c], ax
mov qword [rsp + 0x19c0], 1
mov qword [rsp + 0x19c8], rcx
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x19d0], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x19d8], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x19e0], al
mov rax, qword [rsp + 0x88]
mov r14, rax
shr r14, 0x30
mov byte [rsp + 0x19e7], r14b
mov rbp, rax
shr rbp, 0x20
mov word [rsp + 0x19e5], bp
mov dword [rsp + 0x19e1], eax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x19e8], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x19f0], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x19f8], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1a00], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x1a08], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1a10], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0x1a18], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x1a20], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1a30], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1a38], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x1a40], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x1a48], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x1a50], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x1a58], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x1a60], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x1a68], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x1a70], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x1a78], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x1a80], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x1a88], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x1a90], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x1aa0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x1aa8], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x1ab0], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x1ac0], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x1ac8], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x1ad0], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x1ad8], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x1ae0], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x1ae8], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x1af0], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x1af8], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x1b00], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x1b08], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x1b10], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x1b18], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x1b20], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x1b28], rax
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0x1b30], rax
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x1b38], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x1b40], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x1b48], rax
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x1b50], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x1b58], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x1b60], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x1b68], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x1b70], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x1b78], rax
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x1b80], rax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x1b88], rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x1b90], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x1b98], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x1ba0], rax
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x1ba8], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x1bb0], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x1bb8], rax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x1bc0], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x1bc8], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x1bd0], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x1bd8], rax
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x1be0], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x1be8], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x1bf0], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x1bf8], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x1c00], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x1c08], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x1c10], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x1c18], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x1c20], rax
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0x1c28], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x1c30], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0x1c38], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x1c40], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x1c48], rax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0x1c50], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x1c58], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x1c60], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x1c68], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x1c70], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x1c78], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x1c80], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0x1c88], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x1c90], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x1c98], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x1ca0], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x1ca8], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x1cb0], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x1cb8], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1cc0], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x1cc8], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x1cd0], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x1cd8], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0x1ce0], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x1ce8], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x1cf0], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0x1cf8], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0x1d00], rax
mov qword [rsp + 0x530], r11
mov qword [rsp + 0x1d08], r11
mov qword [rsp + 0x1d10], r10
mov qword [rsp + 0x1d18], r9
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0x1d20], rax
mov qword [rsp + 0x1d28], r8
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x1d30], rax
mov qword [rsp + 0x1d38], rdx
mov qword [rsp + 0x1d40], rbx
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x1d48], rax
mov qword [rsp + 0x1d50], 2
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d98], xmm0
movups xmmword [rsp + 0x1d88], xmm0
movups xmmword [rsp + 0x1d78], xmm0
movups xmmword [rsp + 0x1d68], xmm0
movups xmmword [rsp + 0x1d58], xmm0
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x1da8], rax
mov qword [rsp + 0x1db0], 0
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x1db8], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x1dc0], rax
mov qword [rsp + 0x1dc8], 0
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x1dd0], rax
mov rax, qword [rsp + 0x528]
mov qword [rsp + 0x1dd8], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x1de0], rax
mov qword [rsp + 0x1de8], 0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x1e08], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1e10], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x1e18], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x1e20], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x1e28], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x1e30], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x1e38], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x1e40], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x1e48], rax
mov qword [rsp + 0x1e50], 2
movups xmmword [rsp + 0x1e78], xmm0
movups xmmword [rsp + 0x1e68], xmm0
movups xmmword [rsp + 0x1e58], xmm0
mov qword [rsp + 0x1e88], 0
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x1e90], eax
movdqa xmm0, xmmword [rsp + 0x180]
movdqu xmmword [rsp + 0x1e94], xmm0
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0x1ea4], eax
mov eax, dword [rsp + 0xbc]
mov dword [rsp + 0x1ea8], eax
mov dword [rsp + 0x1eac], 0
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x1eb0], rax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x1eb8], eax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x1ec0], rax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x1ec8], eax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x1ed0], rax
movzx eax, byte [rsp + 0xc4]
mov byte [rsp + 0x1ed8], al
mov byte [rsp + 0x1ed9], 0
movzx eax, word [rsp + 0x13c]
mov word [rsp + 0x1ede], ax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x1eda], eax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x1ee0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x1ee8], rax
lea rcx, [rsp + 0x1ef0]
lea rdx, [rsp + 0x2e90]
mov r8d, 0x518
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x2408], 0
lea rcx, [rsp + 0x2409]
lea rdx, [rsp + 0x2950]
mov r8d, 0x537
call sub.msvcrt.dll_memcpy
lea rdi, [rsp + 0x598]
mov qword [rsp + 0x2940], rdi
xor ecx, ecx
call fcn.1400bf680
test rax, rax
je 0x14006b168
mov rdx, rax
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jae case.0x14006214f.1
inc rax
mov qword [rdx], rax
mov r13d, dword [rdx + 8]
mov qword [rsp + 0xa30], 1
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0xa48], rax
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0xa50], al
mov byte [rsp + 0xa57], r14b
mov word [rsp + 0xa55], bp
mov rax, qword [rsp + 0x88]
mov dword [rsp + 0xa51], eax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0xa60], rax
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0xa68], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0xa78], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0x1c8]
mov qword [rsp + 0xa88], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0xa90], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0xa98], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xaa0], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0xaa8], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0xab0], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0xab8], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0xaf0], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0xaf8], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xb18], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0xb38], rax
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0xb40], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0xb48], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0xb50], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0xb58], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0xb60], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0xb70], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0xb78], rax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0xb88], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0xb98], rax
mov rax, qword [rsp + 0x2e0]
mov qword [rsp + 0xba0], rax
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0xba8], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0xbb0], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0xbb8], rax
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0xbc0], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0xbc8], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0xbd0], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0xbd8], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0xbe0], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0xbe8], rax
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0xbf0], rax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0xbf8], rax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0xc00], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0xc08], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0xc10], rax
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0xc18], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0xc20], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0xc28], rax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0xc30], rax
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0xc38], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0xc40], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0xc48], rax
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0xc50], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0xc80], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0xc88], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0x3e8]
mov qword [rsp + 0xca8], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0xcb0], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0xcb8], rax
mov rax, qword [rsp + 0x400]
mov qword [rsp + 0xcc0], rax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0xcc8], rax
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0xcd0], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0xcd8], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0xce0], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0xce8], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0xcf0], rax
mov rax, qword [rsp + 0x438]
mov qword [rsp + 0xcf8], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0xd00], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0xd08], rax
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0xd10], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0xd18], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0xd20], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0xd28], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0xd40], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xd48], rax
mov rax, qword [rsp + 0x490]
mov qword [rsp + 0xd50], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0xd60], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0xd68], rax
mov rax, qword [rsp + 0x4b0]
mov qword [rsp + 0xd70], rax
mov rax, qword [rsp + 0x530]
mov qword [rsp + 0xd78], rax
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0xd80], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0xd88], rax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0xd90], rax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0xd98], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0xda0], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xda8], rax
mov rax, qword [rsp + 0x4c8]
mov qword [rsp + 0xdb0], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0xdb8], rax
mov qword [rsp + 0xdc0], 2
pxor xmm0, xmm0
movdqu xmmword [rsp + 0xe08], xmm0
movdqu xmmword [rsp + 0xdf8], xmm0
movdqu xmmword [rsp + 0xde8], xmm0
movdqu xmmword [rsp + 0xdd8], xmm0
movdqu xmmword [rsp + 0xdc8], xmm0
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xe18], rax
mov qword [rsp + 0xe20], 0
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0xe28], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0xe30], rax
mov qword [rsp + 0xe38], 0
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0xe40], rax
mov rax, qword [rsp + 0x528]
mov qword [rsp + 0xe48], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0xe50], rax
mov qword [rsp + 0xe58], 0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xe78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xe80], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xe88], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xe90], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xe98], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xea0], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xea8], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xeb0], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0xeb8], rax
mov qword [rsp + 0xec0], 2
movdqu xmmword [rsp + 0xee8], xmm0
movdqu xmmword [rsp + 0xed8], xmm0
movdqu xmmword [rsp + 0xec8], xmm0
mov qword [rsp + 0xef8], 0
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0xf00], eax
movdqa xmm0, xmmword [rsp + 0x180]
movdqu xmmword [rsp + 0xf04], xmm0
mov eax, dword [rsp + 0x190]
mov dword [rsp + 0xf14], eax
mov eax, dword [rsp + 0xbc]
mov dword [rsp + 0xf18], eax
mov dword [rsp + 0xf1c], 0
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xf20], rax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0xf28], eax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0xf30], rax
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0xf38], eax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0xf40], rax
movzx eax, byte [rsp + 0xc4]
mov byte [rsp + 0xf48], al
mov byte [rsp + 0xf49], 0
movzx eax, word [rsp + 0x13c]
mov word [rsp + 0xf4e], ax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0xf4a], eax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf50], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xf58], rax
lea rcx, [rsp + 0xf60]
mov rbx, rdx
lea rdx, [rsp + 0x2e90]
mov r8d, 0x518
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x1478], 0
lea rcx, [rsp + 0x1479]
lea rdx, [rsp + 0x2950]
mov r8d, 0x537
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x19b0], rdi
cmp r13d, 2
je 0x14006b179
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x950], rax
movups xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x940], xmm0
movups xmm0, xmmword [rsp + 0x640]
movups xmm1, xmmword [rsp + 0x650]
movups xmm2, xmmword [rsp + 0x660]
movups xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x930], xmm3
movaps xmmword [rsp + 0x920], xmm2
movaps xmmword [rsp + 0x910], xmm1
movaps xmmword [rsp + 0x900], xmm0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd3]
mov dword [rsp + 0x5f0], eax
mov dword [rsp + 0x5f3], ecx
mov rax, qword [rsp + 0x58]
mov byte [rax], 1
movaps xmm0, xmmword [rsp + 0x900]
movaps xmm1, xmmword [rsp + 0x910]
movaps xmm2, xmmword [rsp + 0x920]
movaps xmm3, xmmword [rsp + 0x930]
movaps xmmword [rsp + 0x880], xmm0
movaps xmmword [rsp + 0x890], xmm1
movaps xmmword [rsp + 0x8a0], xmm2
movaps xmmword [rsp + 0x8b0], xmm3
movaps xmm0, xmmword [rsp + 0x940]
movaps xmmword [rsp + 0x8c0], xmm0
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x8d0], rax
mov eax, dword [rsp + 0x5f0]
mov ecx, dword [rsp + 0x5f3]
mov dword [rsp + 0x5f8], eax
mov dword [rsp + 0x5fb], ecx
mov rcx, qword [rsp + 0x178]
call fcn.1400582d0
cmp rbp, 2
jne 0x140068862
mov rax, qword [rsi + 0x1b8]
lock dec qword [rax]
jne 0x140068810
mov rcx, qword [rsi + 0x1b8]
call fcn.14006e3d0
lea rbx, [rsi + 0x1c0]
mov rcx, rbx
call fcn.1400d2040
mov rax, qword [rsi + 0x1c0]
lock dec qword [rax]
jne 0x140068834
mov rcx, qword [rbx]
call fcn.14006fc70
mov qword [rsp + 0x38], rdi
mov rax, qword [rsi + 0x180]
test rax, rax
je 0x140068aa8
lock dec qword [rax]
mov r14d, 4
mov dword [rsp + 0x58], eax
je 0x140068a93
jmp 0x140068ab2
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x870], rax
movaps xmm0, xmmword [rsp + 0x8c0]
movaps xmmword [rsp + 0x860], xmm0
movaps xmm0, xmmword [rsp + 0x880]
movaps xmm1, xmmword [rsp + 0x890]
movaps xmm2, xmmword [rsp + 0x8a0]
movaps xmm3, xmmword [rsp + 0x8b0]
movaps xmmword [rsp + 0x850], xmm3
movaps xmmword [rsp + 0x840], xmm2
movaps xmmword [rsp + 0x830], xmm1
movaps xmmword [rsp + 0x820], xmm0
mov eax, dword [rsp + 0x5f8]
mov ecx, dword [rsp + 0x5fb]
mov dword [rsp + 0x538], eax
mov dword [rsp + 0x53b], ecx
mov r14d, 2
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x110], rdi
mov rax, qword [rsi + 0x1b8]
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rsi + 0x1c0]
movaps xmmword [rsp + 0x580], xmm0
movaps xmm0, xmmword [rsp + 0x820]
movaps xmm1, xmmword [rsp + 0x830]
movaps xmm2, xmmword [rsp + 0x840]
movaps xmm3, xmmword [rsp + 0x850]
movaps xmmword [rsp + 0x780], xmm0
movaps xmmword [rsp + 0x790], xmm1
movaps xmmword [rsp + 0x7a0], xmm2
movaps xmmword [rsp + 0x7b0], xmm3
movaps xmm0, xmmword [rsp + 0x860]
movaps xmmword [rsp + 0x7c0], xmm0
mov rax, qword [rsp + 0x870]
mov qword [rsp + 0x7d0], rax
mov eax, dword [rsp + 0x538]
mov ecx, dword [rsp + 0x53b]
mov dword [rsp + 0x100], eax
mov dword [rsp + 0x103], ecx
movaps xmm0, xmmword [rsp + 0x720]
movaps xmmword [rsp + 0x760], xmm0
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x9f0], xmm0
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0xa00], rax
mov eax, dword [rsp + 0x5e8]
mov ecx, dword [rsp + 0x5eb]
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfb], ecx
mov eax, dword [rsp + 0x570]
mov dword [rsp + 0x578], eax
movzx eax, word [rsp + 0x574]
mov word [rsp + 0x57c], ax
movaps xmm0, xmmword [rsp + 0x6f0]
movaps xmmword [rsp + 0x750], xmm0
mov eax, dword [rsp + 0x5e0]
mov ecx, dword [rsp + 0x5e3]
mov dword [rsp + 0xcb], ecx
mov dword [rsp + 0xc8], eax
movaps xmm0, xmmword [rsp + 0x6c0]
movaps xmm1, xmmword [rsp + 0x6d0]
movaps xmmword [rsp + 0x620], xmm1
movaps xmmword [rsp + 0x610], xmm0
mov eax, dword [rsp + 0x5d8]
mov ecx, dword [rsp + 0x5db]
mov dword [rsp + 0x60b], ecx
mov dword [rsp + 0x608], eax
mov eax, dword [rsp + 0x5d0]
mov ecx, dword [rsp + 0x5d3]
mov dword [rsp + 0x603], ecx
mov dword [rsp + 0x600], eax
mov rax, qword [rsi + 0x180]
test rax, rax
je 0x140068ab2
lock dec qword [rax]
jne 0x140068ab2
mov rcx, qword [rsi + 0x180]
mov rdx, qword [rsi + 0x188]
call fcn.14006f370
jmp 0x140068ab2
mov r14d, 4
mov dword [rsp + 0x58], eax
movaps xmm0, xmmword [rsp + 0x580]
movaps xmmword [rsp + 0x630], xmm0
movaps xmm0, xmmword [rsp + 0x780]
movaps xmm1, xmmword [rsp + 0x790]
movaps xmm2, xmmword [rsp + 0x7a0]
movaps xmm3, xmmword [rsp + 0x7b0]
movaps xmmword [rsp + 0x990], xmm0
movaps xmmword [rsp + 0x9a0], xmm1
movaps xmmword [rsp + 0x9b0], xmm2
movaps xmmword [rsp + 0x9c0], xmm3
movaps xmm0, xmmword [rsp + 0x7c0]
movaps xmmword [rsp + 0x9d0], xmm0
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x9e0], rax
mov eax, dword [rsp + 0x100]
mov ecx, dword [rsp + 0x103]
mov dword [rsp + 0x5c8], eax
mov dword [rsp + 0x5cb], ecx
movaps xmm0, xmmword [rsp + 0x760]
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmm0, xmmword [rsp + 0x9f0]
movaps xmmword [rsp + 0x970], xmm0
mov rax, qword [rsp + 0xa00]
mov qword [rsp + 0x980], rax
mov eax, dword [rsp + 0xf8]
mov ecx, dword [rsp + 0xfb]
mov dword [rsp + 0x5c0], eax
mov dword [rsp + 0x5c3], ecx
mov eax, dword [rsp + 0x578]
mov dword [rsp + 0x568], eax
movzx eax, word [rsp + 0x57c]
mov word [rsp + 0x56c], ax
movaps xmm0, xmmword [rsp + 0x750]
movaps xmmword [rsp + 0x960], xmm0
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xcb]
mov dword [rsp + 0x5bb], ecx
mov dword [rsp + 0x5b8], eax
movaps xmm0, xmmword [rsp + 0x610]
movaps xmm1, xmmword [rsp + 0x620]
movaps xmmword [rsp + 0x7f0], xmm1
movaps xmmword [rsp + 0x7e0], xmm0
mov eax, dword [rsp + 0x608]
mov ecx, dword [rsp + 0x60b]
mov dword [rsp + 0x5b3], ecx
mov dword [rsp + 0x5b0], eax
mov eax, dword [rsp + 0x600]
mov ecx, dword [rsp + 0x603]
mov dword [rsp + 0x5ab], ecx
mov dword [rsp + 0x5a8], eax
mov rax, qword [rsp + 0xb0]
mov byte [rax], 1
movaps xmm0, xmmword [rsp + 0x630]
movaps xmmword [rsp + 0x800], xmm0
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x690], rax
movaps xmm0, xmmword [rsp + 0x9d0]
movaps xmmword [rsp + 0x680], xmm0
movaps xmm0, xmmword [rsp + 0x990]
movaps xmm1, xmmword [rsp + 0x9a0]
movaps xmm2, xmmword [rsp + 0x9b0]
movaps xmm3, xmmword [rsp + 0x9c0]
movaps xmmword [rsp + 0x670], xmm3
movaps xmmword [rsp + 0x660], xmm2
movaps xmmword [rsp + 0x650], xmm1
movaps xmmword [rsp + 0x640], xmm0
mov eax, dword [rsp + 0x5c8]
mov ecx, dword [rsp + 0x5cb]
mov dword [rsp + 0xdb], ecx
mov dword [rsp + 0xd8], eax
movaps xmm0, xmmword [rsp + 0x6e0]
movaps xmmword [rsp + 0x700], xmm0
mov rax, qword [rsp + 0x980]
mov qword [rsp + 0x740], rax
movaps xmm0, xmmword [rsp + 0x970]
movaps xmmword [rsp + 0x730], xmm0
mov eax, dword [rsp + 0x5c0]
mov ecx, dword [rsp + 0x5c3]
mov dword [rsp + 0xd3], ecx
mov dword [rsp + 0xd0], eax
movzx eax, word [rsp + 0x56c]
mov word [rsp + 0xcc], ax
mov eax, dword [rsp + 0x568]
mov dword [rsp + 0xc8], eax
movaps xmm0, xmmword [rsp + 0x960]
movaps xmmword [rsp + 0x180], xmm0
mov eax, dword [rsp + 0x5b8]
mov ecx, dword [rsp + 0x5bb]
mov dword [rsp + 0x10b], ecx
mov dword [rsp + 0x108], eax
movdqa xmm0, xmmword [rsp + 0x7e0]
movdqa xmm1, xmmword [rsp + 0x7f0]
movdqa xmmword [rsp + 0x910], xmm1
movdqa xmmword [rsp + 0x900], xmm0
mov eax, dword [rsp + 0x5b0]
mov ecx, dword [rsp + 0x5b3]
mov dword [rsp + 0x103], ecx
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x5a8]
mov ecx, dword [rsp + 0x5ab]
mov dword [rsp + 0xfb], ecx
mov dword [rsp + 0xf8], eax
mov rcx, r13
call fcn.140058010
cmp r14d, 4
jne 0x140068dda
mov r15, qword [rsp + 0x38]
mov rax, qword [rsi + 0x68]
test rax, rax
jne 0x14006a6eb
jmp 0x14006a6fe
mov qword [rsp + 0x30], r15
movaps xmm0, xmmword [rsp + 0x800]
movaps xmmword [rsp + 0x970], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x2ee0], rax
movaps xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x2ed0], xmm0
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x2ec0], xmm3
movaps xmmword [rsp + 0x2eb0], xmm2
movaps xmmword [rsp + 0x2ea0], xmm1
movaps xmmword [rsp + 0x2e90], xmm0
mov eax, dword [rsp + 0xd8]
mov ecx, dword [rsp + 0xdb]
mov dword [rsp + 0x763], ecx
mov dword [rsp + 0x760], eax
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x6a0], xmm0
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x620], rax
movaps xmm0, xmmword [rsp + 0x730]
movaps xmmword [rsp + 0x610], xmm0
mov eax, dword [rsp + 0xd0]
mov ecx, dword [rsp + 0xd3]
mov dword [rsp + 0x753], ecx
mov dword [rsp + 0x750], eax
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x6e4], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x6e0], eax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x9f0], xmm0
mov eax, dword [rsp + 0x108]
mov ecx, dword [rsp + 0x10b]
mov dword [rsp + 0x8db], ecx
mov dword [rsp + 0x8d8], eax
movdqa xmm0, xmmword [rsp + 0x900]
movdqa xmm1, xmmword [rsp + 0x910]
movdqa xmmword [rsp + 0x890], xmm1
movdqa xmmword [rsp + 0x880], xmm0
mov eax, dword [rsp + 0x100]
mov ecx, dword [rsp + 0x103]
mov dword [rsp + 0x723], ecx
mov dword [rsp + 0x720], eax
mov eax, dword [rsp + 0xf8]
mov ecx, dword [rsp + 0xfb]
mov dword [rsp + 0x6f3], ecx
mov dword [rsp + 0x6f0], eax
mov r15, qword [rsi + 0xf8]
test r15, r15
mov qword [rsp + 0x130], r12
je 0x1400692d4
mov rdi, qword [rsi + 0x100]
mov r12, qword [rdi + 0x10]
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140068fab
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x1e8
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
dec r12
and r12, 0xfffffffffffffff0
lea rcx, [r12 + r15]
add rcx, 0x10
mov qword [rax], r14
mov qword [rax + 8], 2
mov rdx, qword [rsp + 0x50]
mov qword [rax + 0x10], rdx
movaps xmm0, xmmword [rsp + 0x2e90]
movaps xmm1, xmmword [rsp + 0x2ea0]
movaps xmm2, xmmword [rsp + 0x2eb0]
movaps xmm3, xmmword [rsp + 0x2ec0]
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm1
movups xmmword [rax + 0x38], xmm2
movups xmmword [rax + 0x48], xmm3
movaps xmm0, xmmword [rsp + 0x2ed0]
movups xmmword [rax + 0x58], xmm0
mov rdx, qword [rsp + 0x2ee0]
mov qword [rax + 0x68], rdx
mov qword [rax + 0x70], 0
mov rdx, qword [rsp + 0xe8]
mov qword [rax + 0x78], rdx
mov rdx, qword [rsp + 0x1a8]
mov qword [rax + 0x80], rdx
mov byte [rax + 0x88], 0
mov edx, dword [rsp + 0x760]
mov r8d, dword [rsp + 0x763]
mov dword [rax + 0x89], edx
mov dword [rax + 0x8c], r8d
mov rdx, qword [rsp + 0x40]
mov qword [rax + 0x90], rdx
mov rdx, qword [rsp + 0x110]
mov qword [rax + 0x98], rdx
mov rdx, qword [rsp + 0x120]
mov qword [rax + 0xa0], rdx
mov rdx, qword [rsp + 0x28]
mov qword [rax + 0xa8], rdx
mov rdx, qword [rsp + 0xe0]
mov qword [rax + 0xb8], rdx
mov rdx, qword [rsp + 0x70]
mov qword [rax + 0xc0], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0xc8], rdx
mov rdx, qword [rsp + 0x78]
mov qword [rax + 0xd0], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rax + 0xd8], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rax + 0xe0], rdx
mov r8, qword [rsp + 0x68]
mov qword [rax + 0xe8], r8
mov rdx, qword [rsp + 0x98]
mov qword [rax + 0xf0], rdx
mov rdx, qword [rsp + 0xa0]
mov qword [rax + 0xf8], rdx
mov rdx, qword [rsp + 0xa8]
mov qword [rax + 0x100], rdx
mov rdx, qword [rsp + 0x90]
mov qword [rax + 0x108], rdx
mov qword [rax + 0x110], 0x2000
movaps xmm0, xmmword [rsp + 0x6a0]
movups xmmword [rax + 0x118], xmm0
mov qword [rax + 0x128], 8
mov rdx, qword [rsp + 0x620]
mov qword [rax + 0x140], rdx
movaps xmm0, xmmword [rsp + 0x610]
movups xmmword [rax + 0x130], xmm0
mov qword [rax + 0x148], r8
mov edx, dword [rsp + 0x58]
mov byte [rax + 0x150], dl
mov edx, dword [rsp + 0x750]
mov r8d, dword [rsp + 0x753]
mov dword [rax + 0x151], edx
mov dword [rax + 0x154], r8d
mov qword [rax + 0x158], 1
xorps xmm0, xmm0
movups xmmword [rax + 0x160], xmm0
mov qword [rax + 0x170], 1
mov word [rax + 0x178], 0
movzx edx, word [rsp + 0x6e4]
mov word [rax + 0x17e], dx
mov edx, dword [rsp + 0x6e0]
mov dword [rax + 0x17a], edx
mov qword [rax + 0x180], 2
movaps xmm0, xmmword [rsp + 0x9f0]
movups xmmword [rax + 0x188], xmm0
mov qword [rax + 0x198], rbx
mov qword [rax + 0x1a0], rbp
mov byte [rax + 0x1a8], 0
mov edx, dword [rsp + 0x8d8]
mov r8d, dword [rsp + 0x8db]
mov dword [rax + 0x1ac], r8d
mov dword [rax + 0x1a9], edx
movdqa xmm0, xmmword [rsp + 0x880]
movdqa xmm1, xmmword [rsp + 0x890]
movdqu xmmword [rax + 0x1c0], xmm1
movdqu xmmword [rax + 0x1b0], xmm0
mov byte [rax + 0x1d0], 3
mov edx, dword [rsp + 0x720]
mov r8d, dword [rsp + 0x723]
mov dword [rax + 0x1d4], r8d
mov dword [rax + 0x1d1], edx
mov rdx, qword [rsp + 0x178]
mov qword [rax + 0x1d8], rdx
mov byte [rax + 0x1e0], 0
mov edx, dword [rsp + 0x6f0]
mov r8d, dword [rsp + 0x6f3]
mov dword [rax + 0x1e4], r8d
mov dword [rax + 0x1e1], edx
lea r8, [0x140170d80]
mov rdx, rax
call qword [rdi + 0x18]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jmp 0x14006a53c
mov eax, 1
lock xadd qword [0x140123150], rax
mov qword [rsp + 0xa10], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x2950], xmm0
movaps xmmword [rsp + 0x2960], xmm1
movaps xmmword [rsp + 0x2970], xmm2
movaps xmmword [rsp + 0x2980], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movaps xmmword [rsp + 0x2990], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x29a0], rax
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0x543], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x540], eax
movaps xmm0, xmmword [rsp + 0x700]
movaps xmmword [rsp + 0x6c0], xmm0
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x9a0], rax
movaps xmm0, xmmword [rsp + 0x730]
movaps xmmword [rsp + 0x990], xmm0
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0x59b], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x598], eax
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x634], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x630], eax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x7e0], xmm0
mov eax, dword [rsp + 0x10b]
mov dword [rsp + 0x13b], eax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x138], eax
movaps xmm0, xmmword [rsp + 0x900]
movaps xmm1, xmmword [rsp + 0x910]
movaps xmmword [rsp + 0x790], xmm1
movaps xmmword [rsp + 0x780], xmm0
mov eax, dword [rsp + 0x103]
mov dword [rsp + 0x4eb], eax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0xfb]
mov dword [rsp + 0x583], eax
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x580], eax
mov qword [rsp + 0x19c0], r14
mov qword [rsp + 0x19c8], 2
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x19d0], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movups xmmword [rsp + 0x19d8], xmm0
movups xmmword [rsp + 0x19e8], xmm1
movups xmmword [rsp + 0x19f8], xmm2
movups xmmword [rsp + 0x1a08], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movups xmmword [rsp + 0x1a18], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x1a28], rax
mov qword [rsp + 0x1a30], 0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x1a38], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x1a40], rax
mov byte [rsp + 0x1a48], 0
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0x1a4c], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x1a49], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x1a50], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x1a58], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x1a60], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x1a68], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x1a78], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x1a80], rax
mov r15, qword [rsp + 0x80]
mov qword [rsp + 0x1a88], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x1a90], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x1a98], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x1aa0], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x1aa8], rcx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x1ab0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x1ab8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x1ac0], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x1ac8], rax
mov qword [rsp + 0x1ad0], 0x2000
movaps xmm0, xmmword [rsp + 0x700]
movups xmmword [rsp + 0x1ad8], xmm0
mov qword [rsp + 0x1ae8], 8
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x1b00], rax
movaps xmm0, xmmword [rsp + 0x730]
movups xmmword [rsp + 0x1af0], xmm0
mov qword [rsp + 0x1b08], rcx
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x1b10], al
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0x1b14], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x1b11], eax
mov qword [rsp + 0x1b18], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b20], xmm0
mov qword [rsp + 0x1b30], 1
mov word [rsp + 0x1b38], 0
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0x1b3e], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x1b3a], eax
mov qword [rsp + 0x1b40], 2
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x1b48], xmm0
mov qword [rsp + 0x1b58], rbx
mov qword [rsp + 0x1b60], rbp
mov byte [rsp + 0x1b68], 0
mov eax, dword [rsp + 0x10b]
mov dword [rsp + 0x1b6c], eax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x1b69], eax
movdqa xmm0, xmmword [rsp + 0x900]
movdqa xmm1, xmmword [rsp + 0x910]
movdqu xmmword [rsp + 0x1b80], xmm1
movdqu xmmword [rsp + 0x1b70], xmm0
mov byte [rsp + 0x1b90], 3
mov eax, dword [rsp + 0x103]
mov dword [rsp + 0x1b94], eax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x1b91], eax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x1b98], rax
mov byte [rsp + 0x1ba0], 0
mov eax, dword [rsp + 0xfb]
mov dword [rsp + 0x1ba4], eax
mov eax, dword [rsp + 0xf8]
mov dword [rsp + 0x1ba1], eax
lea rdi, [rsp + 0xa10]
mov qword [rsp + 0x1ba8], rdi
xor ecx, ecx
call fcn.1400bf680
test rax, rax
je 0x14006b140
mov rdx, rax
mov rax, qword [rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jae case.0x14006214f.1
mov qword [rsp + 0x48], r13
inc rax
mov qword [rdx], rax
cmp dword [rdx + 8], 2
mov qword [rsp + 0xa30], r14
mov qword [rsp + 0xa38], 2
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa40], rax
movaps xmm0, xmmword [rsp + 0x640]
movaps xmm1, xmmword [rsp + 0x650]
movaps xmm2, xmmword [rsp + 0x660]
movaps xmm3, xmmword [rsp + 0x670]
movups xmmword [rsp + 0xa48], xmm0
movups xmmword [rsp + 0xa58], xmm1
movups xmmword [rsp + 0xa68], xmm2
movups xmmword [rsp + 0xa78], xmm3
movaps xmm0, xmmword [rsp + 0x680]
movups xmmword [rsp + 0xa88], xmm0
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0xa98], rax
mov qword [rsp + 0xaa0], 0
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xaa8], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0xab0], rax
mov byte [rsp + 0xab8], 0
mov eax, dword [rsp + 0xdb]
mov dword [rsp + 0xabc], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0xab9], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xaf0], rax
mov qword [rsp + 0xaf8], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xb10], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0xb18], rcx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xb38], rax
mov qword [rsp + 0xb40], 0x2000
movaps xmm0, xmmword [rsp + 0x700]
movups xmmword [rsp + 0xb48], xmm0
mov qword [rsp + 0xb58], 8
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0xb70], rax
movaps xmm0, xmmword [rsp + 0x730]
movups xmmword [rsp + 0xb60], xmm0
mov qword [rsp + 0xb78], rcx
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0xb80], al
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0xb81], eax
mov eax, dword [rsp + 0xd3]
mov dword [rsp + 0xb84], eax
mov qword [rsp + 0xb88], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0xb90], xmm0
mov qword [rsp + 0xba0], 1
mov word [rsp + 0xba8], 0
movzx eax, word [rsp + 0xcc]
mov word [rsp + 0xbae], ax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0xbaa], eax
mov qword [rsp + 0xbb0], 2
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0xbb8], xmm0
mov qword [rsp + 0xbc8], rbx
mov qword [rsp + 0xbd0], rbp
mov byte [rsp + 0xbd8], 0
mov eax, dword [rsp + 0x13b]
mov dword [rsp + 0xbdc], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0xbd9], eax
movdqa xmm0, xmmword [rsp + 0x780]
movdqa xmm1, xmmword [rsp + 0x790]
movdqu xmmword [rsp + 0xbf0], xmm1
movdqu xmmword [rsp + 0xbe0], xmm0
mov byte [rsp + 0xc00], 3
mov eax, dword [rsp + 0x4eb]
mov dword [rsp + 0xc04], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0xc01], eax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0xc08], rax
mov byte [rsp + 0xc10], 0
mov eax, dword [rsp + 0x583]
mov dword [rsp + 0xc14], eax
mov eax, dword [rsp + 0x580]
mov dword [rsp + 0xc11], eax
mov qword [rsp + 0xc18], rdi
je 0x14006b151
mov r12, qword [rsp + 0xa10]
mov r13, rdx
add r13, 0x10
cmp qword [rdx + 8], 0
mov qword [rsp + 0xb0], rdx
je 0x140069f89
mov rdi, qword [r13]
lock inc qword [rdi]
jle case.0x14006214f.1
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140069b77
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x300
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 0xcc
mov qword [rcx + 0x88], 0
lea rax, [0x14016ff60]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0
mov qword [rcx + 0xa0], rdi
mov qword [rcx + 0xa8], r12
mov qword [rcx + 0xb0], r14
mov qword [rcx + 0xb8], 2
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movaps xmm2, xmmword [rsp + 0x2970]
movaps xmm3, xmmword [rsp + 0x2980]
movups xmmword [rcx + 0xc8], xmm0
movups xmmword [rcx + 0xd8], xmm1
movups xmmword [rcx + 0xe8], xmm2
movups xmmword [rcx + 0xf8], xmm3
movaps xmm0, xmmword [rsp + 0x2990]
movups xmmword [rcx + 0x108], xmm0
mov rax, qword [rsp + 0x29a0]
mov qword [rcx + 0x118], rax
mov qword [rcx + 0x120], 0
mov rax, qword [rsp + 0xe8]
mov qword [rcx + 0x128], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x130], rax
mov byte [rcx + 0x138], 0
mov eax, dword [rsp + 0x540]
mov edx, dword [rsp + 0x543]
mov dword [rcx + 0x13c], edx
mov dword [rcx + 0x139], eax
mov rax, qword [rsp + 0x40]
mov qword [rcx + 0x140], rax
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x148], rax
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x150], rax
mov rax, qword [rsp + 0x28]
mov qword [rcx + 0x158], rax
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x168], rax
mov rax, qword [rsp + 0x70]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], r15
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x180], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x188], rax
mov rax, qword [rsp + 0x88]
mov qword [rcx + 0x190], rax
mov rdx, qword [rsp + 0x68]
mov qword [rcx + 0x198], rdx
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0x1a0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0x1a8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0x1b0], rax
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0x1b8], rax
mov qword [rcx + 0x1c0], 0x2000
movaps xmm0, xmmword [rsp + 0x6c0]
movups xmmword [rcx + 0x1c8], xmm0
mov qword [rcx + 0x1d8], 8
movdqa xmm0, xmmword [rsp + 0x990]
movdqu xmmword [rcx + 0x1e0], xmm0
mov rax, qword [rsp + 0x9a0]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], rdx
mov eax, dword [rsp + 0x58]
mov byte [rcx + 0x200], al
mov eax, dword [rsp + 0x598]
mov edx, dword [rsp + 0x59b]
mov dword [rcx + 0x204], edx
mov dword [rcx + 0x201], eax
mov qword [rcx + 0x208], 1
pxor xmm0, xmm0
movdqa xmmword [rcx + 0x210], xmm0
mov qword [rcx + 0x220], 1
mov word [rcx + 0x228], 0
mov eax, dword [rsp + 0x630]
mov dword [rcx + 0x22a], eax
movzx eax, word [rsp + 0x634]
mov word [rcx + 0x22e], ax
lea r12, [rcx + 0x80]
mov qword [rcx + 0x230], 2
movaps xmm1, xmmword [rsp + 0x7e0]
movups xmmword [rcx + 0x238], xmm1
mov qword [rcx + 0x248], rbx
mov qword [rcx + 0x250], rbp
mov byte [rcx + 0x258], 0
mov eax, dword [rsp + 0x138]
mov edx, dword [rsp + 0x13b]
mov dword [rcx + 0x25c], edx
mov dword [rcx + 0x259], eax
movdqa xmm1, xmmword [rsp + 0x780]
movaps xmm2, xmmword [rsp + 0x790]
movdqu xmmword [rcx + 0x260], xmm1
movups xmmword [rcx + 0x270], xmm2
mov byte [rcx + 0x280], 3
mov eax, dword [rsp + 0x4e8]
mov edx, dword [rsp + 0x4eb]
mov dword [rcx + 0x284], edx
mov dword [rcx + 0x281], eax
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x288], rax
mov byte [rcx + 0x290], 0
mov eax, dword [rsp + 0x580]
mov edx, dword [rsp + 0x583]
mov dword [rcx + 0x294], edx
mov dword [rcx + 0x291], eax
movdqu xmmword [rcx + 0x298], xmm0
mov qword [rcx + 0x2a8], 0
mov rax, qword [rdi + 0x90]
mov qword [rcx + 0x98], rax
mov rax, qword [rcx + 0x90]
mov rax, qword [rax + 0x48]
mov r14, qword [rcx + rax + 0x80]
mov r15, qword [rdi + 0x70]
mov r13, qword [rdi + 0x88]
and r13, r14
shl r13, 5
lea rbx, [r15 + r13]
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [r15 + r13 + 8]
movzx eax, byte [rdi + 0x98]
test al, al
je 0x14006a3dc
mov rcx, rbx
call fcn.140118b6c
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x30]
mov rax, 0xffffffffffffffc0
lock xadd qword [r12], rax
cmp rax, 0x3f
jbe case.0x14006214f.1
and rax, 0xffffffffffffffc0
cmp rax, 0x40
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
je 0x14006a3cc
jmp 0x14006a514
mov rdi, qword [r13]
lock inc qword [rdi]
jle case.0x14006214f.1
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x140069fc2
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x300
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rcx, rax
and rcx, 0xffffffffffffff80
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], 0xcc
mov qword [rcx + 0x88], 0
lea rax, [0x14016fbf0]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0
mov qword [rcx + 0xa0], rdi
mov qword [rcx + 0xa8], r12
mov qword [rcx + 0xb0], r14
mov qword [rcx + 0xb8], 2
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0xc0], rax
movaps xmm0, xmmword [rsp + 0x2950]
movaps xmm1, xmmword [rsp + 0x2960]
movaps xmm2, xmmword [rsp + 0x2970]
movaps xmm3, xmmword [rsp + 0x2980]
movups xmmword [rcx + 0xc8], xmm0
movups xmmword [rcx + 0xd8], xmm1
movups xmmword [rcx + 0xe8], xmm2
movups xmmword [rcx + 0xf8], xmm3
movaps xmm0, xmmword [rsp + 0x2990]
movups xmmword [rcx + 0x108], xmm0
mov rax, qword [rsp + 0x29a0]
mov qword [rcx + 0x118], rax
mov qword [rcx + 0x120], 0
mov rax, qword [rsp + 0xe8]
mov qword [rcx + 0x128], rax
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x130], rax
mov byte [rcx + 0x138], 0
mov eax, dword [rsp + 0x540]
mov edx, dword [rsp + 0x543]
mov dword [rcx + 0x13c], edx
mov dword [rcx + 0x139], eax
mov rax, qword [rsp + 0x40]
mov qword [rcx + 0x140], rax
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x148], rax
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x150], rax
mov rax, qword [rsp + 0x28]
mov qword [rcx + 0x158], rax
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x168], rax
mov rax, qword [rsp + 0x70]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], r15
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x180], rax
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x188], rax
mov rax, qword [rsp + 0x88]
mov qword [rcx + 0x190], rax
mov rdx, qword [rsp + 0x68]
mov qword [rcx + 0x198], rdx
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0x1a0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0x1a8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0x1b0], rax
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0x1b8], rax
mov qword [rcx + 0x1c0], 0x2000
movaps xmm0, xmmword [rsp + 0x6c0]
movups xmmword [rcx + 0x1c8], xmm0
mov qword [rcx + 0x1d8], 8
movdqa xmm0, xmmword [rsp + 0x990]
movdqu xmmword [rcx + 0x1e0], xmm0
mov rax, qword [rsp + 0x9a0]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], rdx
mov eax, dword [rsp + 0x58]
mov byte [rcx + 0x200], al
mov eax, dword [rsp + 0x598]
mov edx, dword [rsp + 0x59b]
mov dword [rcx + 0x204], edx
mov dword [rcx + 0x201], eax
mov qword [rcx + 0x208], 1
pxor xmm0, xmm0
movdqa xmmword [rcx + 0x210], xmm0
mov qword [rcx + 0x220], 1
mov word [rcx + 0x228], 0
mov eax, dword [rsp + 0x630]
mov dword [rcx + 0x22a], eax
movzx eax, word [rsp + 0x634]
mov word [rcx + 0x22e], ax
lea r12, [rcx + 0x80]
mov qword [rcx + 0x230], 2
movaps xmm1, xmmword [rsp + 0x7e0]
movups xmmword [rcx + 0x238], xmm1
mov qword [rcx + 0x248], rbx
mov qword [rcx + 0x250], rbp
mov byte [rcx + 0x258], 0
mov eax, dword [rsp + 0x138]
mov edx, dword [rsp + 0x13b]
mov dword [rcx + 0x25c], edx
mov dword [rcx + 0x259], eax
movdqa xmm1, xmmword [rsp + 0x780]
movaps xmm2, xmmword [rsp + 0x790]
movdqu xmmword [rcx + 0x260], xmm1
movups xmmword [rcx + 0x270], xmm2
mov byte [rcx + 0x280], 3
mov eax, dword [rsp + 0x4e8]
mov edx, dword [rsp + 0x4eb]
mov dword [rcx + 0x284], edx
mov dword [rcx + 0x281], eax
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x288], rax
mov byte [rcx + 0x290], 0
mov eax, dword [rsp + 0x580]
mov edx, dword [rsp + 0x583]
mov dword [rcx + 0x294], edx
mov dword [rcx + 0x291], eax
movdqu xmmword [rcx + 0x298], xmm0
mov qword [rcx + 0x2a8], 0
mov rax, qword [rdi + 0x80]
mov qword [rcx + 0x98], rax
mov rax, qword [rcx + 0x90]
mov rax, qword [rax + 0x48]
mov r14, qword [rcx + rax + 0x80]
mov r15, qword [rdi + 0x60]
mov rbp, qword [rdi + 0x78]
and rbp, r14
shl rbp, 5
lea rbx, [r15 + rbp]
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [r15 + rbp + 8]
movzx eax, byte [rdi + 0x88]
test al, al
je 0x14006a493
mov rcx, rbx
call fcn.140118b6c
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x30]
mov rax, 0xffffffffffffffc0
lock xadd qword [r12], rax
cmp rax, 0x3f
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jbe case.0x14006214f.1
and rax, 0xffffffffffffffc0
cmp rax, 0x40
mov r13, qword [rsp + 0x48]
jne 0x14006a514
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x10]
jmp 0x14006a514
mov rcx, qword [r12 + 0x10]
mov rax, qword [rcx + 0x48]
cmp qword [r12 + rax], r14
jne case.0x14006214f.1
mov rax, qword [rbx + 0x10]
cmp rax, r12
mov r13, qword [rsp + 0x48]
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
je case.0x14006214f.1
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx + 8], rax
mov rcx, qword [r12 + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx], 0
test rax, rax
je 0x14006a436
mov rcx, qword [rax + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [rax + rcx], r12
mov qword [rbx + 0x10], r12
cmp qword [rbx + 0x18], 0
jne 0x14006a445
mov qword [rbx + 0x18], r12
lock inc qword [rdi + 0x80]
mov rcx, rbx
call fcn.140118b6c
add rdi, 0x10
mov byte [rsp + 0x960], 0
mov qword [rsp + 0x820], rdi
mov qword [rsp + 0x828], r12
lea rax, [rsp + 0x960]
mov qword [rsp + 0x830], rax
lea rcx, [rsp + 0x820]
call fcn.140106f80
jmp 0x14006a514
mov rcx, qword [r12 + 0x10]
mov rax, qword [rcx + 0x48]
cmp qword [r12 + rax], r14
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
jne case.0x14006214f.1
mov rax, qword [rbx + 0x10]
cmp rax, r12
je case.0x14006214f.1
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx + 8], rax
mov rcx, qword [r12 + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [r12 + rcx], 0
test rax, rax
je 0x14006a4e8
mov rcx, qword [rax + 0x10]
mov rcx, qword [rcx + 0x38]
mov qword [rax + rcx], r12
mov qword [rbx + 0x10], r12
cmp qword [rbx + 0x18], 0
jne 0x14006a4f7
mov qword [rbx + 0x18], r12
lock inc qword [rdi + 0x70]
mov rcx, rbx
call fcn.140118b6c
mov rcx, r13
mov rdx, r12
call fcn.1401066b0
mov r13, qword [rsp + 0x48]
mov rax, qword [rsp + 0xb0]
dec qword [rax]
mov ecx, 0x84
mov eax, 0xcc
lock cmpxchg qword [r12], rcx
je 0x14006a53c
mov rax, qword [r12 + 0x10]
mov rcx, r12
call qword [rax + 0x20]
mov qword [rsi + 0x130], r14
movaps xmm0, xmmword [rsp + 0x970]
movups xmmword [rsi + 0x138], xmm0
lea rdi, [rsi + 0x148]
mov byte [rsi + 0x148], 0
mov r12, qword [rsp + 0x130]
mov rax, qword [rsi + 0x140]
mov qword [r13 + 0x10], rax
movdqu xmm0, xmmword [rsi + 0x130]
movdqu xmmword [r13], xmm0
cmp byte [rsi + 0x128], 2
je case.0x14006214f.1
mov rcx, r13
mov rdx, r15
call fcn.1401184d0
test al, al
je 0x14006a645
movzx eax, al
cmp eax, 2
je 0x14006a829
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x14006a5d8
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x38
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbx, rax
mov qword [rax], 0
mov byte [rax + 0x29], 2
mov byte [rax + 0x30], 5
mov bpl, 2
cmp byte [rsi + 0x128], 2
je 0x14006a643
mov rax, qword [r13]
lock dec qword [rax]
jne 0x14006a61f
mov rcx, qword [r13]
call fcn.14006e3d0
lea r14, [rsi + 0x120]
mov rcx, r14
call fcn.1400d2040
mov rax, qword [rsi + 0x120]
lock dec qword [rax]
jne 0x14006a643
mov rcx, qword [r14]
call fcn.14006fc70
jmp 0x14006a692
movzx ebp, byte [rsi + 0x128]
mov byte [rsi + 0x128], 2
cmp ebp, 3
je 0x14006a829
cmp ebp, 2
je case.0x14006214f.1
mov rbx, qword [rsi + 0x118]
mov rax, qword [rsi + 0x120]
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + 0x12c]
mov dword [rsp + 0xa33], eax
mov eax, dword [rsi + 0x129]
mov dword [rsp + 0xa30], eax
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x19c3], ecx
mov dword [rsp + 0x19c0], eax
mov byte [rdi], 1
mov eax, dword [rsp + 0x19c0]
mov ecx, dword [rsp + 0x19c3]
mov dword [rsp + 0x990], eax
mov dword [rsp + 0x993], ecx
mov rcx, r13
call fcn.140058100
cmp bpl, 2
jne 0x14006a839
mov r15, rbx
mov rax, qword [rsi + 0x68]
test rax, rax
je 0x14006a6fe
lock dec qword [rax]
jne 0x14006a6fe
mov rcx, qword [rsi + 0x68]
mov rdx, qword [rsi + 0x70]
call fcn.14006f370
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x14006a723
lock dec qword [rax]
jne 0x14006a723
mov rcx, qword [rsi + 0xf8]
mov rdx, qword [rsi + 0x100]
call fcn.14006f370
mov rax, qword [rsi + 0x108]
test rax, rax
je 0x14006a741
lock dec qword [rax]
jne 0x14006a741
lea rcx, [rsi + 0x108]
call fcn.14006e840
lea rcx, [rsi + 0xc0]
call fcn.1400a76a0
cmp byte [rsi + 0xc0], 2
jb 0x14006a780
mov rbx, qword [rsi + 0xc8]
lea rcx, [rbx + 0x18]
mov rax, qword [rbx]
mov rdx, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rcx, [rsi + 0xe8]
mov rax, qword [rsi + 0xd0]
mov rdx, qword [rsi + 0xd8]
mov r8, qword [rsi + 0xe0]
call qword [rax + 0x10]
mov rax, qword [rsi + 0xf0]
test rax, rax
je 0x14006a7cd
cmp rax, 0xffffffffffffffff
je 0x14006a7cd
lock dec qword [rax + 8]
jne 0x14006a7cd
mov r8, qword [rsi + 0xf0]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsi + 0xa0]
test rbx, rbx
je 0x14006a808
mov rdi, qword [rsi + 0xa8]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14006a808
cmp qword [rdi + 0x10], 0x11
jb 0x14006a7f7
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsi + 0xb0]
lock dec qword [rax]
mov dil, 2
jne 0x14006a824
mov rcx, qword [rsi + 0xb0]
call fcn.140047ea0
jmp 0x14006b062
mov byte [rdi], 3
mov byte [r12 + 0x70], 3
mov al, 4
jmp 0x14006b111
mov r8b, 2
cmp byte [rsi + 0x110], 0
jne 0x14006a864
mov eax, dword [rsp + 0x990]
mov ecx, dword [rsp + 0x993]
mov dword [rsp + 0x823], ecx
mov dword [rsp + 0x820], eax
mov r8d, ebp
lea rdi, [rsi + 0x108]
mov rax, qword [rsi + 0xf0]
mov qword [rsp + 0x19f0], rax
movdqu xmm0, xmmword [rsi + 0xc0]
movdqu xmm1, xmmword [rsi + 0xd0]
movups xmm2, xmmword [rsi + 0xe0]
movaps xmmword [rsp + 0x19e0], xmm2
movdqa xmmword [rsp + 0x19d0], xmm1
movdqa xmmword [rsp + 0x19c0], xmm0
mov r9, qword [rsi + 0xa0]
mov r10, qword [rsi + 0xa8]
mov rax, qword [rsi + 0xb0]
mov qword [rsp + 0xb0], rax
movzx eax, byte [rsi + 0xb8]
mov byte [rsp + 0x48], al
movzx ebp, byte [rsi + 0xb9]
lea rax, [rsi + 0xba]
movzx ecx, word [rsi + 0xbe]
mov word [rsp + 0x6c4], cx
mov ecx, dword [rsi + 0xba]
mov dword [rsp + 0x6c0], ecx
mov r14, qword [rsi + 0x108]
test r14, r14
mov byte [rsp + 0x40], r8b
je 0x14006a928
cmp r8b, 2
jne 0x14006a961
test r9, r9
je 0x14006a994
mov r15, r9
mov rcx, r9
mov r13, r10
call qword [r10 + 0x18]
jmp 0x14006a99c
mov ecx, dword [rsp + 0x820]
mov edx, dword [rsp + 0x823]
mov dword [rsp + 0x2953], edx
mov dword [rsp + 0x2950], ecx
mov ecx, dword [rax]
mov dword [rsp + 0x880], ecx
movzx eax, word [rax + 4]
mov word [rsp + 0x884], ax
xor r14d, r14d
jmp 0x14006acfe
movzx ecx, word [rax + 4]
mov word [rsp + 0x784], cx
mov eax, dword [rax]
mov dword [rsp + 0x780], eax
mov eax, dword [rsp + 0x820]
mov ecx, dword [rsp + 0x823]
mov dword [rsp + 0xa30], eax
mov dword [rsp + 0xa33], ecx
jmp 0x14006aa03
mov r13, r10
mov r15, r9
xor eax, eax
mov rcx, qword [rsp + 0x28]
mov r11, qword [rsp + 0xb0]
lock inc qword [r11]
jle case.0x14006214f.1
lock inc qword [rbx]
jle case.0x14006214f.1
lock inc qword [rcx + 0x1d0]
lock inc qword [rcx]
jle case.0x14006214f.1
mov r9, r15
mov r10, r13
movzx r8d, word [rsp + 0x6c4]
mov word [rsp + 0x784], r8w
mov r8d, dword [rsp + 0x6c0]
mov dword [rsp + 0x780], r8d
cmp bpl, 2
jne 0x14006aa70
mov r14, qword [rdi]
mov bpl, 2
mov eax, dword [rsp + 0xa30]
mov ecx, dword [rsp + 0xa33]
mov dword [rsp + 0x2953], ecx
mov dword [rsp + 0x2950], eax
mov eax, dword [rsp + 0x780]
mov dword [rsp + 0x880], eax
movzx eax, word [rsp + 0x784]
mov word [rsp + 0x884], ax
jmp 0x14006aa41
pause
mov rax, qword [r14 + 8]
nop word cs:[rax + rax]
cmp rax, 0xffffffffffffffff
je 0x14006aa3f
test rax, rax
js case.0x14006214f.1
lea rcx, [rax + 1]
lock cmpxchg qword [r14 + 8], rcx
jne 0x14006aa50
jmp 0x14006acfe
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xa30], rbx
mov qword [rsp + 0xa38], rcx
mov byte [rsp + 0xa40], 2
mov qword [rsp + 0xa48], r9
mov qword [rsp + 0xa50], r10
mov qword [rsp + 0xa58], r11
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0xa60], al
mov byte [rsp + 0xa61], bpl
mov eax, dword [rsp + 0x6c0]
mov dword [rsp + 0xa62], eax
movzx eax, word [rsp + 0x6c4]
mov word [rsp + 0xa66], ax
lea r13, [r14 + 0x10]
mov rcx, r13
call sub.KERNEL32.dll_AcquireSRWLockExclusive
movzx eax, byte [r14 + 0x18]
test al, al
jne case.0x14006214f.1
movzx eax, byte [rsp + 0x19c0]
test rax, rax
mov byte [rsp + 0x30], bpl
je 0x14006ab1b
cmp eax, 1
jne 0x14006ab22
mov al, 1
movzx ecx, byte [rsp + 0x19c1]
jmp 0x14006abab
xor eax, eax
jmp 0x14006abab
mov r15, rdi
mov rdi, qword [rsp + 0x19c8]
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x14006ab58
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x20
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov rbp, rax
lea rdx, [rdi + 0x18]
mov rax, qword [rdi]
mov r8, qword [rdi + 8]
mov r9, qword [rdi + 0x10]
lea rcx, [rsp + 0x2950]
call qword [rax]
movdqu xmm0, xmmword [rsp + 0x2950]
movdqu xmm1, xmmword [rsp + 0x2960]
movdqu xmmword [rbp + 0x10], xmm1
movdqu xmmword [rbp], xmm0
mov al, 2
mov rdi, r15
lea r15, [r14 + 0x20]
mov byte [rsp + 0x2950], al
mov byte [rsp + 0x2951], cl
mov qword [rsp + 0x2958], rbp
lea rcx, [rsp + 0x2960]
lea rdx, [rsp + 0x19e8]
mov rax, qword [rsp + 0x19d0]
mov r8, qword [rsp + 0x19d8]
mov r9, qword [rsp + 0x19e0]
call qword [rax]
lea rdx, [rsp + 0x2950]
lea r8, [rsp + 0xa30]
mov rcx, r15
mov r9, rdi
call fcn.1400a7ab0
lea rcx, [r14 + 0x30]
lea r15, [rsp + 0x19c0]
mov rdx, r15
call fcn.1400d0db0
add r14, 0x90
lea rcx, [rsp + 0x2950]
mov rdx, r14
mov r8, r15
call fcn.1400d1010
mov r14, qword [rsp + 0x2950]
test r14, r14
je 0x14006ac6e
lea rcx, [rsp + 0x2950]
call fcn.14008a7f0
cmp qword [rsp + 0x2958], 0
je 0x14006ac6e
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x19f0]
test rax, rax
movzx ebp, byte [rsp + 0x30]
je 0x14006aca3
cmp rax, 0xffffffffffffffff
je 0x14006aca3
lock dec qword [rax + 8]
jne 0x14006aca3
mov r8, qword [rsp + 0x19f0]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x19f0], 0
mov eax, dword [rsp + 0x2e90]
mov ecx, dword [rsp + 0x2e93]
mov dword [rsp + 0x2950], eax
mov dword [rsp + 0x2953], ecx
mov eax, dword [rsp + 0x610]
mov dword [rsp + 0x880], eax
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x884], ax
mov rcx, r13
call fcn.140118b6c
xor r14d, r14d
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x38]
mov eax, dword [rsp + 0x2950]
mov ecx, dword [rsp + 0x2953]
mov dword [rsp + 0x783], ecx
mov dword [rsp + 0x780], eax
mov eax, dword [rsp + 0x880]
mov dword [rsp + 0x610], eax
movzx eax, word [rsp + 0x884]
mov word [rsp + 0x614], ax
movzx eax, byte [rsp + 0x19c0]
test rax, rax
mov byte [rsp + 0x30], bpl
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x38], r10
je 0x14006ad68
cmp eax, 1
jne 0x14006ad6f
mov al, 1
movzx ecx, byte [rsp + 0x19c1]
jmp 0x14006adfd
xor eax, eax
jmp 0x14006adfd
mov qword [rsp + 0x50], rdi
mov rdi, qword [rsp + 0x19c8]
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x14006ada7
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je case.0x14006214f.1
mov rcx, rax
mov qword [0x1401a4160], rax
mov r8d, 0x20
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je case.0x14006214f.1
mov r15, rax
lea rdx, [rdi + 0x18]
mov rax, qword [rdi]
mov r8, qword [rdi + 8]
mov r9, qword [rdi + 0x10]
lea rcx, [rsp + 0x2950]
call qword [rax]
movdqu xmm0, xmmword [rsp + 0x2950]
movdqu xmm1, xmmword [rsp + 0x2960]
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
mov al, 2
mov rdi, qword [rsp + 0x50]
mov byte [rsp + 0x2950], al
mov byte [rsp + 0x2951], cl
mov qword [rsp + 0x2958], r15
lea rcx, [rsp + 0x2960]
lea r13, [rsp + 0x19e8]
mov rax, qword [rsp + 0x19d0]
mov r8, qword [rsp + 0x19d8]
mov r9, qword [rsp + 0x19e0]
mov rdx, r13
call qword [rax]
mov eax, dword [rsp + 0x780]
mov ecx, dword [rsp + 0x783]
mov dword [rsp + 0x883], ecx
mov dword [rsp + 0x880], eax
mov eax, dword [rsp + 0x610]
mov dword [rsp + 0x7e0], eax
movzx eax, word [rsp + 0x614]
mov word [rsp + 0x7e4], ax
mov r15, qword [rsp + 0x2950]
movups xmm0, xmmword [rsp + 0x2958]
movaps xmmword [rsp + 0x2e90], xmm0
movups xmm0, xmmword [rsp + 0x2968]
movaps xmmword [rsp + 0x2ea0], xmm0
mov rax, qword [rsp + 0x2978]
mov qword [rsp + 0x2eb0], rax
lea rcx, [rsp + 0x19c0]
call fcn.1400a76a0
cmp byte [rsp + 0x19c0], 2
jb 0x14006af0a
mov rbp, rbx
mov rbx, rdi
mov rdi, r12
mov r12, qword [rsp + 0x19c8]
lea rcx, [r12 + 0x18]
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
mov r8, qword [r12 + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, r12
mov r12, rdi
mov rdi, rbx
mov rbx, rbp
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x19d0]
mov rdx, qword [rsp + 0x19d8]
mov r8, qword [rsp + 0x19e0]
mov rcx, r13
call qword [rax + 0x10]
mov rax, qword [rsp + 0x19f0]
test rax, rax
je 0x14006af58
cmp rax, 0xffffffffffffffff
je 0x14006af58
lock dec qword [rax + 8]
jne 0x14006af58
mov r8, qword [rsp + 0x19f0]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movdqa xmm0, xmmword [rsp + 0x2e90]
movdqa xmm1, xmmword [rsp + 0x2ea0]
movdqa xmmword [rsp + 0xa30], xmm0
movdqa xmmword [rsp + 0xa40], xmm1
mov rax, qword [rsp + 0x2eb0]
mov qword [rsp + 0xa50], rax
mov eax, dword [rsp + 0x880]
mov ecx, dword [rsp + 0x883]
mov dword [rsp + 0x19c0], eax
mov dword [rsp + 0x19c3], ecx
mov eax, dword [rsp + 0x7e0]
mov dword [rsp + 0x610], eax
movzx eax, word [rsp + 0x7e4]
mov word [rsp + 0x614], ax
mov eax, dword [rsp + 0x780]
mov ecx, dword [rsp + 0x783]
mov dword [rsp + 0x2953], ecx
mov dword [rsp + 0x2950], eax
mov rax, qword [rsi + 0x68]
mov eax, dword [rsi + 0x68]
mov eax, dword [rsi + 0x68]
test rax, rax
movzx r13d, byte [rsp + 0x30]
movzx ebp, byte [rsp + 0x48]
je 0x14006b009
lock dec qword [rax]
jne 0x14006b009
mov rcx, qword [rsi + 0x68]
mov rdx, qword [rsi + 0x70]
call fcn.14006f370
mov rax, qword [rsi + 0xf8]
test rax, rax
je 0x14006b02e
lock dec qword [rax]
jne 0x14006b02e
mov rcx, qword [rsi + 0xf8]
mov rdx, qword [rsi + 0x100]
call fcn.14006f370
mov rax, qword [rdi]
test rax, rax
invalid
je 0x14006b044
sal byte [rsi + rcx - 0x10], 0x48
dec dword [rax]
lock dec qword [rax]
jne 0x14006b044
or byte [rax - 0x77], cl
stc
mov rcx, rdi
call fcn.14006e840
add byte [rcx], dh
dec dword [rax - 0x75]
and al, 0x28
xor edi, edi
mov rcx, qword [rsp + 0x28]
movzx edx, byte [rsp + 0x40]
mov r8, qword [rsp + 0xb0]
and al, 0xb0
add byte [rax], al
add byte [rbx + rcx*4 + 0x4c], cl
and al, 0x58
and al, 0xb0
add byte [rax], al
add byte [rbx + rcx*4 + 0x4c], cl
and al, 0x58
mov r10, qword [rsp + 0x38]
mov qword [r12], r15
mov dword [rsp], edi
movdqa xmm0, xmmword [rsp + 0xa30]
movdqa xmm1, xmmword [rsp + 0xa40]
and al, 0x40
or al, byte [rax]
add bl, dh
movq qword [r12 + 8], mm0
and al, 0x40
or al, byte [rax]
add bl, dh
movq qword [r12 + 8], mm0
movdqu xmmword [r12 + 0x18], xmm1
and al, 0x18
mov rax, qword [rsp + 0xa50]
mov qword [r12 + 0x28], rax
or al, byte [rax]
add byte [rcx - 0x77], cl
and al, 0x28
mov qword [r12 + 0x30], rbx
mov qword [r12 + 0x38], rcx
and al, 0x38
and al, 0x38
mov byte [r12 + 0x40], dl
mov eax, dword [rsp + 0x19c0]
mov ecx, dword [rsp + 0x19c3]
and al, 0xc3
sbb dword [rax], eax
add byte [rcx - 0x77], al
and al, 0x41
and al, 0x41
and al, 0xc3
sbb dword [rax], eax
add byte [rcx - 0x77], al
and al, 0x41
and al, 0x41
and al, 0x41
mov dword [r12 + 0x44], ecx
mov qword [r12 + 0x48], r9
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x48], ecx
mov qword [r12 + 0x50], r10
push rax
mov qword [r12 + 0x58], r8
mov byte [r12 + 0x60], bpl
insb byte [rdi], dx
and al, 0x60
insb byte [rdi], dx
and al, 0x60
mov byte [r12 + 0x61], r13b
mov eax, dword [rsp + 0x610]
mov dword [r12 + 0x62], eax
mov dword [rsp + 0x62], eax
mov dword [rsp + 0x62], eax
movzx eax, word [rsp + 0x614]
mov word [r12 + 0x66], ax
and al, 0x66
and al, 0x66
mov qword [r12 + 0x68], r14
mov byte [r12 + 0x70], dil
mov byte [rsp + 0x70], bh
mov byte [rsp + 0x70], bh
mov eax, dword [rsp + 0x2950]
mov ecx, dword [rsp + 0x2953]
mov dword [r12 + 0x74], ecx
mov dword [r12 + 0x71], eax
mov dword [rsp + 0x71], eax
mov dword [rsp + 0x71], eax
mov al, 1
mov byte [rsi + 0x111], al
adc dword [rcx], eax
add byte [rax], al
movaps xmm6, xmmword [rsp + 0x33b0]
mov al, 0x33
add byte [rax], al
add rsp, 0x33c8
pop rbx
pop rbp
xor eax, dword [rax]
add byte [rbx + 0x5d], bl
pop rdi
pop rsi
pop r12
pop rsp
pop rsp
pop r13
pop r14
pop r15
ret
ud2
call sub.KERNEL32.dll_GetLastError
ud2
lea rcx, [rsp + 0x19c0]
call fcn.1400849e0
add dword [rax], eax
add dword [rax], eax
ud2
lea rcx, [rsp + 0xa30]
mov rsi, rdx
call fcn.1400849e0
dec qword [rsi]
ud2
lea rcx, [rsp + 0x19c0]
call fcn.140086690
ud2
and al, 0xc0
sbb dword [rax], eax
add al, ch
sbb esi, dword [rbp + 0xb0f0001]
ud2
mov word [rax + rsi], fs
or al, byte [rax]
add al, ch
or dh, byte [rbp - 0xb7ffff]
or ecx, dword [rdi]
or ecx, dword [rdi]
ud2
invalid
invalid
ud2
add dword [rax], 0
add byte [rcx - 0x3a], al
test byte [rbx + riz], ah
add dword [rax], eax
add byte [rax], al
cmp qword [r15 + 0x1c8], rcx
jbe case.0x14005df56.59
mov rcx, qword [r15 + 0x1b8]
mov ecx, dword [rdi + 0x1b8]
test rcx, rcx
je case.0x14005df56.59
cmp dword [rcx + rax], 2
je case.0x14005df56.59
add rcx, rax
cmp dword [rcx + 0x114], edx
jne case.0x14005df56.59
mov eax, dword [rcx + 0x84]
xor ebx, ebx
fild dword [rbp - 0x3cb1f040]
fild dword [rbp - 0x3cb1f040]
mov rdx, qword [r15 + 0xd0]
cmp rax, rdx
cmovb rdx, rax
sub rdx, qword [rcx + 0x88]
cmovae rbx, rdx
mov rcx, rdi
stc
stc
call fcn.140118b6c
mov byte [rsi], 5
add dh, al
invalid
mov qword [rsi + 8], rbx
jmp 0x14006dddd
or al, byte [rax]
mov byte [rsi], 6
jmp 0x14006dddd
mov edx, dword [rax]
mov rcx, qword [rax + 8]
call qword [rdx]
mov r14, rax
mov esi, eax
or bh, bh
adc cl, byte [rcx - 0x77]
mov esi, eax
mov esi, eax
mov rbx, rdx
mov rax, qword [r12 + 0x90]
mov eax, dword [rsp + 0x90]
mov eax, dword [rsp + 0x90]
test byte [rax + rdx*4], ah
add byte [rax], al
add byte [rax - 0x7b], cl
sal byte [rbx + rcx + 0x49], 0x8b
je 0x14006ddc2
invalid
invalid
mov word [rax + rbx*4], fs
test rax, rax
je 0x14006ddc2
mov rcx, qword [r12 + 0x98]
call qword [rax + 0x18]
invalid
add byte [rax], al
add bh, bh
push rax
sbb byte [rbp - 0x77], cl
mov ah, 0x24
and al, 0x90
mov qword [r12 + 0x90], r14
mov qword [r12 + 0x98], rbx
pushfq
and al, 0x98
add byte [rax], al
add byte [rax - 0x77], cl
stc
and al, 0x90
add byte [rax], al
add byte [rcx - 0x77], cl
pushfq
and al, 0x98
add byte [rax], al
add byte [rax - 0x77], cl
stc
call fcn.140118b6c
mov byte [rsi], 7
invalid
invalid
invalid
invalid
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop rsp
pop rsp
pop r14
pop r15
ret
ud2
sub rsp, 0x20
mov rsi, rcx
cmp qword [rcx], 0
invalid
add byte [rax + 0x75023879], al
cmp byte [rcx + 0x38], 2
jne 0x14006de1a
invalid
sbb byte [rax - 0x75], cl
or al, r14b
or al, dh
mov rax, qword [rsi + 8]
lock dec qword [rax]
or al, dh
dec qword [rax]
jne 0x14006de67
pop rbx
mov rcx, qword [rsi + 8]
add rsp, 0x20
pop rsi
jmp fcn.140047ea0
cmp qword [rsi + 0x10], 0
je 0x14006de33
jle 0x14006de2e
add byte [rdx + rdx + 0x4c], dh
mov eax, dword [rsi + 8]
mov r8, qword [rsi + 8]
mov rcx, qword [0x1401a4160]
xor edx, edx
add byte [rcx], dh
shr al, cl
shr dword [rbp - 0x7cb7fff6], 0x7e
and byte [rax], al
call sub.KERNEL32.dll_HeapFree
cmp qword [rsi + 0x20], 0
je 0x14006de4c
mov r8, qword [rsi + 0x18]
mov eax, dword [rsi + 0x18]
sbb byte [rax - 0x75], r9b
or eax, 0x13631b
sbb esp, dword [rbx + 0x13]
invalid
mov rcx, qword [0x1401a4160]
sbb esp, dword [rbx + 0x13]
add byte [rcx], dh
xor edx, edx
call sub.KERNEL32.dll_HeapFree
invalid
xor edx, edx
call sub.KERNEL32.dll_HeapFree
invalid
add byte [rax - 0x75], cl
xor al, r14b
mov rax, qword [rsi + 0x30]
lock dec qword [rax]
dec qword [rax]
jne 0x14006de67
add rsi, 0x30
mov rcx, rsi
int1
int1
add rsp, 0x20
pop rsi
jmp fcn.140047d20
std
invalid
std
call qword [rax + 0x20c48348]
invalid
nop
add rsp, 0x20
invalid
and byte [rsi - 0x3d], bl
nop
pop rsi
ret
clc
invalid
or eax, dword [rax]
sbb byte [r8 - 0x7d], cl
clc
add dword [rbx + rsi + 0x48], esi
test eax, eax
and byte [rax - 0x75], cl
push rcx
sub byte [rax - 0x75], cl
adc byte [rbx + rcx*4 + 0x41], cl
xor byte [rax - 0x7d], cl
sar dword [rax], 0x48
jmp rax
mov al, 1
xchg byte [rsi + 0x40], al
mov al, 1
xchg byte [rsi + 0x20], al
test al, al
jne 0x14006f14b
mov rax, qword [rsi + 0x10]
mov rcx, qword [rsi + 0x18]
mov qword [rsi + 0x10], 0
xor edx, edx
xchg byte [rsi + 0x20], dl
test rax, rax
je 0x14006f14b
adc byte [rax - 0x75], r9b
sbb byte [rax - 0x39], r9b
adc byte [rax], r8b
add byte [rax], al
add byte [rcx], dh
rol byte [rsi - 0x7ab7dfaa], cl
sal byte [rbx + rax - 1], 0x50
or byte [rsi - 0x247bc7a2], al
call qword [rax + 8]
xchg byte [rsi + 0x38], bl
test bl, bl
je 0x14006f1df
add byte [rcx - 0x75], cl
xchg al, cl
add byte [rax], al
add al, dh
dec qword [rax]
mov rax, qword [r14 + 0xc8]
lock dec qword [rax]
jne 0x14006f16f
mov rcx, qword [r14 + 0xc8]
call fcn.140039b20
mov rax, qword [r14 + 0x20]
mov eax, dword [rsi + 0x20]
test rax, rax
je 0x14006f18b
sal byte [rbx + rdx - 0x10], 0x48
dec dword [rax]
lock dec qword [rax]
jne 0x14006f18b
mov rcx, qword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
call fcn.14006f370
and byte [rcx - 0x75], r9b
push rsi
sub al, ch
in eax, 1
add byte [rax], al
mov rax, qword [rsp + 0x50]
mov r8, qword [rax]
cmp r8, 0xffffffffffffffff
je 0x14006f1c6
lock dec qword [r8 + 8]
jne 0x14006f1c6
mov rcx, qword [0x1401a4160]
adc eax, dword [rax]
xor edx, edx
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
invalid
mov byte [rax], al
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rdi
invalid
pop rdi
jmp sub.KERNEL32.dll_HeapFree
add byte [rdi], cl
sub byte [rsp + 0x70], dh
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
add byte [rax], al
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsi + 0x28]
mov eax, dword [rsi + 0x28]
mov rcx, qword [rsi + 0x30]
mov qword [rsi + 0x28], 0
test rax, rax
test eax, eax
xor byte [rax - 0x39], r9b
sub byte [rax], r8b
add byte [rax], al
add byte [rax - 0x7b], cl
test eax, eax
je 0x14006f1f7
invalid
push rax
test eax, eax
je 0x14006f1f7
call qword [rax + 0x18]
push rax
sbb byte [rcx], dh
rol byte [rsi - 0x74b6c7ba], 0x86
enter 0, 0
add byte [rax], al
invalid
xor eax, eax
xchg byte [rsi + 0x38], al
mov rax, qword [r14 + 0xc8]
add byte [rax], al
invalid
add byte [rax], al
add al, dh
dec qword [rax]
dec dword [rax]
lock dec qword [rax]
dec dword [rax]
je 0x14006f163
jmp 0x14006f16f
invalid
or esp, dword [rsi + 0x2e]
nop dword [rax + rax]
adc r8, qword [r8]
invalid
invalid
nop word cs:[rax + rax]
mov esi, ecx
wait
add byte [rax], al
add byte [rax - 0x75], cl
jle 0x14006f2ad
test qword [rbx], r9
test dword [rbx], ecx
add bl, ch
and ah, byte [rsi + 0xf]
invalid
out 0xdb, eax
add dword [rax], eax
nop dword [rax]
add byte [rax], al
add byte [rax - 0x7f], cl
invalid
add byte [rax], al
retf
mov dh, 0x47
loopne 0x14006f30f
cmp eax, 6
lea rcx, [rdi + 8]
mov rax, qword [rdi - 0x10]
mov rdx, qword [rdi - 8]
mov r8, qword [rdi]
jmp 0x14006f304
call qword [rax + 0x10]
jmp 0x14006f2b0
cmp qword [rdi - 8], 0
je 0x14006f2b0
movabs al, byte [0x450d8b48f0478b4c]
adc r8, qword [rax]
mov r8, qword [rdi - 0x10]
mov rcx, qword [0x1401a4160]
invalid
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14006f2b0
dec qword [rsi + 8]
sub byte [rbx + 0x5f], bl
add byte [rax + 0x28c48348], dl
sub esp, 0x20
xlatb
dec dword [rax - 0x7d]
loopne 0x14006f379
add ecx, eax
cmp esi, 0xffffffff
dec qword [rsi + 8]
cmp ebx, 9
add byte [rax], al
add byte [rax + 0xf], cl
ret
add byte [rax], al
clc
adc dword [rdx + 4], esi
mov esi, dword [rsi - 8]
jbe case.0x14005fbb6.29
ror byte [rcx - 0x77], cl
invalid
push rdi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rbx, qword [rcx + 0x30]
test rbx, rbx
je 0x14006f47f
mov rdi, qword [rsi + 0x20]
add rdi, 0x18
lea r14, [0x140127800]
add bl, ch
invalid
add bl, ch
lea rcx, es:[rdi + 0x18]
mov rax, qword [rdi]
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
call qword [rax + 0x10]
nop dword [rax + rax]
add rdi, 0x130
dec rbx
je 0x14006f47f
cmp dword [rdi - 0x18], 2
je 0x14006f430
movzx eax, byte [rdi - 8]
cmp rax, 6
ja 0x14006f430
movsxd rax, dword [r14 + rax*4]
add rax, r14
jmp rax
cmp qword [rsi + 0x28], 0
je 0x14006f498
mov r8, qword [rsi + 0x20]
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp rsi, 0xffffffffffffffff
je 0x14006f4bf
lock dec qword [rsi + 8]
jne 0x14006f4bf
mov rcx, qword [0x1401a4160]
xor edx, edx
mov r8, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret