Function at 0x140002d50
Capabilities:
Authenticate hmac
Encode data using base64
Set registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x10928
call fcn.14010fc60
sub rsp, rax
movdqa xmmword [rsp + 0x10910], xmm7
movaps xmmword [rsp + 0x10900], xmm6
mov ecx, 5
xor edx, edx
call fcn.140089e40
lea rax, [0x1401b5d6b]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x9b5d318d51fbdba
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095560
movabs rcx, 0xc01b8d9efa5fa167
xor rcx, qword [rax]
movabs rdx, 0xb659267f84aabc0a
xor rdx, qword [rax + 8]
mov r8d, 0xc04769b4
xor r8d, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
xor al, 0x8c
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov dword [rsp + 0x640], r8d
mov byte [rsp + 0x644], al
lea rdi, [rsp + 0x248]
lea rbx, [rsp + 0x630]
mov r8d, 0x15
mov rcx, rdi
mov rdx, rbx
call fcn.1400d5660
lea rsi, [rsp + 0x900]
mov rcx, rsi
mov rdx, rdi
call fcn.1400beca0
mov rcx, rsi
call fcn.140001d70
lea rax, [0x1401b4eec]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x56b1214d40e143f3
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d90
mov r13, qword [rax]
mov r12, qword [rax + 8]
mov r15, qword [rax + 0x10]
mov r14d, dword [rax + 0x18]
movzx ebp, byte [rax + 0x1c]
movzx eax, byte [0x140259141]
mov edx, 0x1d
xor ecx, ecx
call fcn.14008b700
test rax, rax
jne 0x140002ec5
ud2
mov rsi, rax
xor bpl, 0x87
xor r14d, 0xbb5d76a3
movabs rax, 0x74b437e74618fbb0
xor r15, rax
movabs rax, 0xcd846da8c6f0b0dd
xor r12, rax
movabs rax, 0xd92d65b072b593d7
xor r13, rax
mov qword [rsi], r13
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r15
mov dword [rsi + 0x18], r14d
mov byte [rsi + 0x1c], bpl
lea rcx, [rsp + 0x900]
mov r8d, 0x1d
mov rdx, rsi
call fcn.140093010
cmp dword [rsp + 0x900], 2
jne 0x140004dfe
mov rax, qword [rsp + 0x908]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140002f96
test rcx, rcx
je 0x140002f96
lea r14, [rax - 1]
mov r15, qword [rax - 1]
mov r12, qword [rax + 7]
mov rcx, r15
call qword [r12]
cmp qword [r12 + 8], 0
je 0x140002f85
cmp qword [r12 + 0x10], 0x11
jb 0x140002f74
mov r15, qword [r15 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x900], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x908], xmm0
mov dword [rsp + 0x918], 7
mov qword [rsp + 0x91c], 0
mov word [rsp + 0x924], 0
mov byte [rsp + 0x921], 1
mov byte [rsp + 0x924], 1
mov byte [rsp + 0x923], 1
lea r8, [rsp + 0x900]
mov edx, 0x1d
mov rcx, rsi
call fcn.140092af0
mov r14, rax
mov rsi, rdx
lea rax, [0x1401b5adb]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7b013ad4dcde078e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400951f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test r14, r14
jne case.0x140009348.0
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rax, [0x1401b1f3e]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x5f5e3637a20afe5e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094940
mov rsi, qword [rax]
movzx ebp, word [rax + 8]
movzx r14d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r14d, 0x10
or ebp, r14d
mov ecx, ebp
shr ecx, 0x10
xor cl, 0xb4
mov edx, ebp
xor dl, 0x49
shr ebp, 8
xor bpl, 0xc
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
movabs rdx, 0x55564f31388b4504
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov rbp, rax
mov byte [rax + 0xa], cl
lea rax, [0x1401bb7c0]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd0fb1325a07b03ff
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095430
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
xor sil, 0xa2
movabs rcx, 0x56c7fa6540e0029c
xor r14, rcx
movabs rcx, 0xb469d49f98eadaa0
xor r15, rcx
mov qword [rax], r14
mov qword [rax + 8], r15
mov r13, rax
mov byte [rax + 0x10], sil
lea rax, [0x1401b8461]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xaf28dd302d87e215
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095600
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xfd
mov edx, r14d
xor dl, 0x33
shr r14d, 8
xor r14b, 0xeb
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0x836b9971e022cfbb
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov r12, rax
mov byte [rax + 0xa], cl
lea rax, [0x1401b2b2a]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xccb8469e24358be
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095940
mov esi, dword [rax]
movzx r14d, word [rax + 4]
movzx r15d, byte [rax + 6]
movzx eax, byte [0x140259141]
mov edx, 7
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xd5
mov edx, r14d
xor dl, 0xdf
shr r14d, 8
xor r14b, 0xd9
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
xor esi, 0x5e40bab4
mov dword [rax], esi
mov word [rax + 4], r8w
mov qword [rsp + 0x58], rax
mov byte [rax + 6], cl
lea rax, [0x1401b287f]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc77c9ca8db0d5e91
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095100
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xf8
mov edx, r14d
xor dl, 0x36
shr r14d, 8
xor r14b, 0x10
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xca33b1621b5abb7
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0x78], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401bbdcc]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xfbfc13325140612c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400949a0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xde
mov edx, r14d
xor dl, 0xfb
shr r14d, 8
xor r14b, 0x6f
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xcdccb16b51727f46
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xe0], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401ae90b]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xa2991da5b2d69caf
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095330
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov ecx, r14d
xor cl, 0xdc
shr r14d, 8
xor r14b, 0x36
movzx edx, r14b
shl edx, 8
movzx ecx, cl
or ecx, edx
movabs rdx, 0x84da3cfee439f646
xor rsi, rdx
mov qword [rax], rsi
mov qword [rsp + 0x80], rax
mov word [rax + 8], cx
lea rax, [0x1401bb4a1]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc5af0535160d44b0
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400950d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0x3f
mov edx, r14d
xor dl, 0x15
shr r14d, 8
xor r14b, 0xfb
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0x15eff8ce37e264b4
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xd8], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401ba3e4]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x46d5b0d770ec3667
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095710
mov rsi, qword [rax]
movzx eax, byte [0x140259141]
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
movabs rcx, 0x44ca42fbaab337b9
xor rsi, rcx
mov qword [rsp + 0xd0], rax
mov qword [rax], rsi
lea rax, [0x1401bc541]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd0d7046a04e328f7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094c50
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov ecx, r14d
shr ecx, 0x10
xor cl, 0xea
mov edx, r14d
xor dl, 0xe8
shr r14d, 8
xor r14b, 0xd2
movzx edx, dl
movzx r8d, r14b
shl r8d, 8
or r8d, edx
movabs rdx, 0xf3f29fef41954a63
xor rsi, rdx
mov qword [rax], rsi
mov word [rax + 8], r8w
mov qword [rsp + 0xc8], rax
mov byte [rax + 0xa], cl
lea rax, [0x1401b200d]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x97a4a96db8574bf1
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094c80
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
xor sil, 0xaf
xor r14d, 0x3c27cd84
movabs rcx, 0x99dc45b186f073d4
xor r15, rcx
mov qword [rax], r15
mov dword [rax + 8], r14d
mov qword [rsp + 0xc0], rax
mov byte [rax + 0xc], sil
lea rax, [0x1401b52cf]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd90468d885176347
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400957e0
mov r14, qword [rax]
mov esi, dword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xc
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xb0], rax
test rax, rax
je case.0x140009348.0
xor esi, 0xdeae2882
movabs rax, 0xff0aa516a169d246
xor r14, rax
mov rax, qword [rsp + 0xb0]
mov qword [rax], r14
mov dword [rax + 8], esi
lea rax, [0x1401bc0bd]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x138310e52a73feeb
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095a20
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xa8], rax
test rax, rax
je case.0x140009348.0
xor sil, 0x97
xor r14d, 0x609e347
movabs rax, 0x47296212bd947180
xor r15, rax
mov rax, qword [rsp + 0xa8]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401b95a5]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1c5a062303b215d4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095810
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xa0], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0x14
shr r14d, 8
xor r14b, 0xce
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xd461e826094b6621
xor rsi, rcx
mov rcx, qword [rsp + 0xa0]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b6cea]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xc9f592e4d2bb0db7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095530
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov esi, dword [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x14
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x98], rax
test rax, rax
je case.0x140009348.0
xor esi, 0x3bc616a6
movabs rax, 0x12472150f0dc9a97
xor r14, rax
movabs rax, 0xb8a15df8625656b8
xor r15, rax
mov rax, qword [rsp + 0x98]
mov qword [rax], r15
mov qword [rax + 8], r14
mov dword [rax + 0x10], esi
lea rax, [0x1401b1545]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x3add394929baf205
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400957b0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x90], rax
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov eax, r14d
shr eax, 0x10
xor al, 0x8a
mov ecx, r14d
xor cl, 4
shr r14d, 8
xor r14b, 0x64
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x7215580ebc534b52
xor rsi, rcx
mov rcx, qword [rsp + 0x90]
mov qword [rcx], rsi
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401ba1ef]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x59829e0d6dc65f37
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094a90
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x138], rax
test rax, rax
je case.0x140009348.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [section..rdata]
mov rax, qword [rsp + 0x138]
movdqu xmmword [rax], xmm1
lea rax, [0x1401ba36d]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xcc4f5e55b85ed973
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400955d0
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x130], rax
test rax, rax
je case.0x140009348.0
xor sil, 0x76
xor r14d, 0x9753f987
movabs rax, 0xd752795b329ccbc9
xor r15, rax
mov rax, qword [rsp + 0x130]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401af884]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1fe76d18dfd3bf4d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095260
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx r15d, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x128], rax
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or r14d, r15d
mov eax, r14d
shr eax, 0x10
xor al, 0xa9
mov ecx, r14d
xor cl, 0x38
shr r14d, 8
xor r14b, 0x47
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x480e0478814a2949
xor rsi, rcx
mov rcx, qword [rsp + 0x128]
mov qword [rcx], rsi
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401b2538]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xdced97a074ffac0c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094e90
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x120], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0xe2
shr r14d, 8
xor r14b, 0xca
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xc932f56dfe6b65a2
xor rsi, rcx
mov rcx, qword [rsp + 0x120]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b2855]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6e5b7c3c08050927
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400958a0
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x118], rax
test rax, rax
je case.0x140009348.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6010]
mov rax, qword [rsp + 0x118]
movdqu xmmword [rax], xmm1
lea rax, [0x1401b8781]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xec9f058a19c878fc
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095b20
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x110], rax
test rax, rax
je case.0x140009348.0
xor sil, 0xbd
movabs rax, 0x7cc6ece81c145a46
xor r14, rax
movabs rax, 0x9aa2c51d8a2c34e5
xor r15, rax
mov rax, qword [rsp + 0x110]
mov qword [rax], r14
mov qword [rax + 8], r15
mov byte [rax + 0x10], sil
lea rax, [0x1401b801d]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xceb259798f30d63e
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095ac0
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov r15d, dword [rax + 8]
movzx esi, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x108], rax
test rax, rax
je case.0x140009348.0
shl r14d, 0x10
or esi, r14d
mov eax, esi
shr eax, 0x10
xor al, 2
mov ecx, esi
xor cl, 0xd0
shr esi, 8
xor sil, 0xba
movzx ecx, cl
movzx edx, sil
shl edx, 8
or edx, ecx
xor r15d, 0x4a91fa3b
movabs rcx, 0x7ebe4aae3b39c69b
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x108]
mov qword [rcx], r8
mov dword [rcx + 8], r15d
mov word [rcx + 0xc], dx
mov byte [rcx + 0xe], al
lea rax, [0x1401b3a7a]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x37ee496d20cafb95
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095920
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x100], rax
test rax, rax
je case.0x140009348.0
xor sil, 0xdd
xor r14d, 0xb37567bc
movabs rax, 0xdfdb3c1063f2a5b2
xor r15, rax
mov rax, qword [rsp + 0x100]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401bd769]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x41c36da8116e7e3c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400954d0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0xf8], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0x53
shr r14d, 8
xor r14b, 0xbd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xbf1a8c79016025b2
xor rsi, rcx
mov rcx, qword [rsp + 0xf8]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b0199]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xa38e24ae4e063d2c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094cd0
mov r14, qword [rax]
mov r15, qword [rax + 8]
movzx esi, byte [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x11
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x158], rax
test rax, rax
je case.0x140009348.0
xor sil, 0x93
movabs rax, 0x7ac8a29d675324d9
xor r14, rax
movabs rax, 0x8cf6b3b3bdfd8fd0
xor r15, rax
mov rax, qword [rsp + 0x158]
mov qword [rax], r14
mov qword [rax + 8], r15
mov byte [rax + 0x10], sil
lea rax, [0x1401b4668]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xd1ff33bd152a79f9
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094880
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x150], rax
test rax, rax
je case.0x140009348.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6020]
mov rax, qword [rsp + 0x150]
movdqu xmmword [rax], xmm1
lea rax, [0x1401bcdfb]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7805c6e8e61210a7
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400953d0
mov rsi, qword [rax]
mov r15, qword [rax + 8]
movzx r14d, word [rax + 0x10]
movzx eax, byte [0x140259141]
mov edx, 0x12
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x148], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0xae
shr r14d, 8
xor r14b, 0xcd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x15a6e174c5ab8576
xor rsi, rcx
movabs rcx, 0x31265d2ff888b3b0
xor r15, rcx
mov rcx, qword [rsp + 0x148]
mov qword [rcx], rsi
mov qword [rcx + 8], r15
mov word [rcx + 0x10], ax
lea rax, [0x1401b6535]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6847696be2586932
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094f20
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1b0], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0xf4
shr r14d, 8
xor r14b, 0xfd
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x49f2bc498c93cb99
xor rsi, rcx
mov rcx, qword [rsp + 0x1b0]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401ba2ff]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6dcb5539947e193a
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094ef0
mov rsi, qword [rax]
movzx r14d, word [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0xa
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1a8], rax
test rax, rax
je case.0x140009348.0
mov eax, r14d
xor al, 0xbd
shr r14d, 8
xor r14b, 0x8a
movzx ecx, r14b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x3973af51a8bd8df0
xor rsi, rcx
mov rcx, qword [rsp + 0x1a8]
mov qword [rcx], rsi
mov word [rcx + 8], ax
lea rax, [0x1401b98ab]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xdab2751adb8f01e4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d30
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
movzx r14d, word [rax + 8]
movzx esi, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x1a0], rax
test rax, rax
je case.0x140009348.0
shl esi, 0x10
or r14d, esi
mov eax, r14d
shr eax, 0x10
xor al, 0x4f
mov ecx, r14d
xor cl, 0xe
shr r14d, 8
xor r14b, 0xd1
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x191604055339c56f
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x1a0]
mov qword [rcx], r8
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401b73a0]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xb239b1271ba67198
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095480
mov rsi, qword [rax]
mov r14, qword [rax + 8]
movzx eax, byte [0x140259141]
mov edx, 0x10
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x198], rax
test rax, rax
je case.0x140009348.0
movq xmm0, r14
movq xmm1, rsi
punpcklqdq xmm1, xmm0
pxor xmm1, xmmword [0x1401b6030]
mov rax, qword [rsp + 0x198]
movdqu xmmword [rax], xmm1
lea rax, [0x1401b1ba3]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xde6ac0025175944d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095b50
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x190], rax
test rax, rax
je case.0x140009348.0
xor sil, 0x2a
xor r14d, 0x70dc688c
movabs rax, 0xc4b3d636a36ad403
xor r15, rax
mov rax, qword [rsp + 0x190]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401bafff]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x352c881db7f523a4
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094b50
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
movzx r14d, word [rax + 8]
movzx esi, byte [rax + 0xa]
movzx eax, byte [0x140259141]
mov edx, 0xb
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x188], rax
test rax, rax
je case.0x140009348.0
shl esi, 0x10
or r14d, esi
mov eax, r14d
shr eax, 0x10
xor al, 0xb7
mov ecx, r14d
xor cl, 0x88
shr r14d, 8
xor r14b, 0x6e
movzx ecx, cl
movzx edx, r14b
shl edx, 8
or edx, ecx
movabs rcx, 0x64b7949acbbe8227
mov r8, qword [rsp + 0x60]
xor r8, rcx
mov rcx, qword [rsp + 0x188]
mov qword [rcx], r8
mov word [rcx + 8], dx
mov byte [rcx + 0xa], al
lea rax, [0x1401ae748]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xb020a65d5c5c4cb6
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095060
mov r15, qword [rax]
mov r14d, dword [rax + 8]
movzx esi, byte [rax + 0xc]
movzx eax, byte [0x140259141]
mov edx, 0xd
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x180], rax
test rax, rax
je case.0x140009348.0
xor sil, 0xdb
xor r14d, 0x27596cda
movabs rax, 0xc7990c9fd749b3e5
xor r15, rax
mov rax, qword [rsp + 0x180]
mov qword [rax], r15
mov dword [rax + 8], r14d
mov byte [rax + 0xc], sil
lea rax, [0x1401b410e]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xf1644c264838d70f
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095090
mov rcx, qword [rax]
mov qword [rsp + 0xb8], rcx
mov ecx, dword [rax + 8]
mov dword [rsp + 0x60], ecx
movzx esi, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x178], rax
test rax, rax
je case.0x140009348.0
shl r14d, 0x10
or esi, r14d
mov eax, esi
shr eax, 0x10
xor al, 0x9f
mov ecx, esi
xor cl, 0xd0
shr esi, 8
xor sil, 0x3f
movzx ecx, cl
movzx edx, sil
shl edx, 8
or edx, ecx
mov r8d, dword [rsp + 0x60]
xor r8d, 0x53137be7
movabs rcx, 0x4961c38f96fb9cdf
mov r9, qword [rsp + 0xb8]
xor r9, rcx
mov rcx, qword [rsp + 0x178]
mov qword [rcx], r9
mov dword [rcx + 8], r8d
mov word [rcx + 0xc], dx
mov byte [rcx + 0xe], al
movzx eax, byte [0x140259141]
mov edx, 0x240
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x60], rax
test rax, rax
je case.0x140009348.0
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rbp
mov qword [rcx + 8], 0xb
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 0x11
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], 0xb
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], 7
mov rax, qword [rsp + 0x78]
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x48], 0xb
mov rax, qword [rsp + 0xe0]
mov qword [rcx + 0x50], rax
mov qword [rcx + 0x58], 0xb
mov rax, qword [rsp + 0x80]
mov qword [rcx + 0x60], rax
mov qword [rcx + 0x68], 0xa
mov rax, qword [rsp + 0xd8]
mov qword [rcx + 0x70], rax
mov qword [rcx + 0x78], 0xb
mov rax, qword [rsp + 0xd0]
mov qword [rcx + 0x80], rax
mov qword [rcx + 0x88], 8
mov rax, qword [rsp + 0xc8]
mov qword [rcx + 0x90], rax
mov qword [rcx + 0x98], 0xb
mov rax, qword [rsp + 0xc0]
mov qword [rcx + 0xa0], rax
mov qword [rcx + 0xa8], 0xd
mov rax, qword [rsp + 0xb0]
mov qword [rcx + 0xb0], rax
mov qword [rcx + 0xb8], 0xc
mov rax, qword [rsp + 0xa8]
mov qword [rcx + 0xc0], rax
mov qword [rcx + 0xc8], 0xd
mov rax, qword [rsp + 0xa0]
mov qword [rcx + 0xd0], rax
mov qword [rcx + 0xd8], 0xa
mov rax, qword [rsp + 0x98]
mov qword [rcx + 0xe0], rax
mov qword [rcx + 0xe8], 0x14
mov rax, qword [rsp + 0x90]
mov qword [rcx + 0xf0], rax
mov qword [rcx + 0xf8], 0xb
mov rax, qword [rsp + 0x138]
mov qword [rcx + 0x100], rax
mov qword [rcx + 0x108], 0x10
mov rax, qword [rsp + 0x130]
mov qword [rcx + 0x110], rax
mov qword [rcx + 0x118], 0xd
mov rax, qword [rsp + 0x128]
mov qword [rcx + 0x120], rax
mov qword [rcx + 0x128], 0xb
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0x130], rax
mov qword [rcx + 0x138], 0xa
mov rax, qword [rsp + 0x118]
mov qword [rcx + 0x140], rax
mov qword [rcx + 0x148], 0x10
mov rax, qword [rsp + 0x110]
mov qword [rcx + 0x150], rax
mov qword [rcx + 0x158], 0x11
mov rax, qword [rsp + 0x108]
mov qword [rcx + 0x160], rax
mov qword [rcx + 0x168], 0xf
mov rax, qword [rsp + 0x100]
mov qword [rcx + 0x170], rax
mov qword [rcx + 0x178], 0xd
mov rax, qword [rsp + 0xf8]
mov qword [rcx + 0x180], rax
mov qword [rcx + 0x188], 0xa
mov rax, qword [rsp + 0x158]
mov qword [rcx + 0x190], rax
mov qword [rcx + 0x198], 0x11
mov rax, qword [rsp + 0x150]
mov qword [rcx + 0x1a0], rax
mov qword [rcx + 0x1a8], 0x10
mov rax, qword [rsp + 0x148]
mov qword [rcx + 0x1b0], rax
mov qword [rcx + 0x1b8], 0x12
mov rax, qword [rsp + 0x1b0]
mov qword [rcx + 0x1c0], rax
mov qword [rcx + 0x1c8], 0xa
mov rax, qword [rsp + 0x1a8]
mov qword [rcx + 0x1d0], rax
mov qword [rcx + 0x1d8], 0xa
mov rax, qword [rsp + 0x1a0]
mov qword [rcx + 0x1e0], rax
mov qword [rcx + 0x1e8], 0xb
mov rax, qword [rsp + 0x198]
mov qword [rcx + 0x1f0], rax
mov qword [rcx + 0x1f8], 0x10
mov rax, qword [rsp + 0x190]
mov qword [rcx + 0x200], rax
mov qword [rcx + 0x208], 0xd
mov rax, qword [rsp + 0x188]
mov qword [rcx + 0x210], rax
mov qword [rcx + 0x218], 0xb
mov rax, qword [rsp + 0x180]
mov qword [rcx + 0x220], rax
mov qword [rcx + 0x228], 0xd
mov rax, qword [rsp + 0x178]
mov qword [rcx + 0x230], rax
mov qword [rcx + 0x238], 0xf
lea rax, [0x1401b968c]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x9cc5f657c1110a3b
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094b10
movabs rcx, 0x74f915d28f7399b0
xor rcx, qword [rax]
movabs rdx, 0x4de6740c9e2ca093
xor rdx, qword [rax + 8]
movabs r8, 0x348a33f2ef91025f
xor r8, qword [rax + 0x10]
movzx eax, byte [rax + 0x18]
xor al, 0x88
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov qword [rsp + 0x640], r8
mov byte [rsp + 0x648], al
lea rax, [0x1401b2dbb]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x728d343c531675d
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095730
mov rcx, qword [rax]
mov qword [rsp + 0x80], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x78], rcx
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x58], rcx
mov rbp, qword [rax + 0x20]
mov r13, qword [rax + 0x28]
mov r12, qword [rax + 0x30]
mov r15, qword [rax + 0x38]
mov r14, qword [rax + 0x40]
movzx esi, byte [rax + 0x48]
movzx eax, byte [0x140259141]
mov edx, 0x49
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
xor sil, 0x2f
movabs rcx, 0x7467db489e718522
xor r14, rcx
movabs rcx, 0x1be6c810a7c4f69b
xor r15, rcx
movabs rcx, 0xfc53dc557b9e4f6
xor r12, rcx
movabs rcx, 0xeb2be93071eabc05
xor r13, rcx
movabs rcx, 0x6c2af1aa32163689
xor rbp, rcx
movabs rcx, 0xd9368746792b389a
mov rdx, qword [rsp + 0x58]
xor rdx, rcx
movabs rcx, 0xd02c0b7b3a96d8dd
mov r8, qword [rsp + 0x78]
xor r8, rcx
movabs rcx, 0xf8f68335e09c23e5
mov r9, qword [rsp + 0xe0]
xor r9, rcx
movabs rcx, 0xf13eb85f3a9d8a54
mov r10, qword [rsp + 0x80]
xor r10, rcx
mov qword [rax], r10
mov qword [rax + 8], r9
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], r13
mov qword [rax + 0x30], r12
mov qword [rax + 0x38], r15
mov qword [rax + 0x40], r14
mov byte [rax + 0x48], sil
mov qword [rsp + 0x860], 0x49
mov qword [rsp + 0x868], rax
mov qword [rsp + 0x870], 0x49
xor r14d, r14d
jmp 0x140004e19
call fcn.14001a360
call fcn.140092960
add r14, 0x10
cmp r14, 0x240
je 0x1400050db
mov rax, qword [rsp + 0x60]
add rax, r14
mov qword [rsp + 0x748], rax
lea rax, [rsp + 0x860]
mov qword [rsp + 0x248], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x250], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x258], rax
lea rax, [0x14009d920]
mov qword [rsp + 0x260], rax
lea rax, [0x1401be200]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rdi
mov qword [rsp + 0x918], 2
mov qword [rsp + 0x520], 0
mov qword [rsp + 0x528], 1
mov qword [rsp + 0x530], 0
lea rcx, [rsp + 0x520]
lea rdx, [0x1401bea00]
lea r8, [rsp + 0x900]
call fcn.14000c7a0
test al, al
jne case.0x140009348.0
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x58], rax
mov r15, qword [rsp + 0x528]
mov rax, qword [rsp + 0x530]
add rax, r15
mov qword [rsp + 0x900], r15
mov qword [rsp + 0x908], rax
mov word [rsp + 0x910], 0
mov dword [rsp + 0x918], 1
mov rcx, rdi
lea r12, [rsp + 0x900]
mov rdx, r12
call fcn.14009a6f0
mov qword [rsp + 0x900], 0
mov dword [rsp + 0x520], 0
mov rsi, qword [rsp + 0x250]
lea rax, [rsp + 0x520]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
mov rcx, 0xffffffff80000002
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call sub.ADVAPI32.dll_RegCreateKeyExW
mov ebp, eax
test eax, eax
je 0x140004fb4
mov r13, rbp
shl r13, 0x20
or r13, 2
jmp 0x140004fbc
mov r13, qword [rsp + 0x900]
cmp qword [rsp + 0x248], 0
je 0x140004fd8
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [0x140259141]
test ebp, ebp
jne 0x140005100
mov edx, 4
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rbp, rax
mov dword [rax], 0x41888887
mov qword [rsp + 0x900], rbx
lea rax, [rsp + 0x649]
mov qword [rsp + 0x908], rax
mov word [rsp + 0x910], 0
mov dword [rsp + 0x918], 1
mov rcx, rdi
lea rdx, [rsp + 0x900]
call fcn.14009a6f0
mov r12, qword [rsp + 0x250]
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], 4
mov rcx, r13
mov rdx, r12
xor r8d, r8d
mov r9d, 4
call sub.ADVAPI32.dll_RegSetValueExW
mov esi, eax
cmp qword [rsp + 0x248], 0
je 0x140005089
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
test esi, esi
jne 0x140005141
movabs rax, 0xffffffff7fffffff
cmp r13, rax
ja 0x1400050b9
mov rcx, r13
call sub.ADVAPI32.dll_RegCloseKey
cmp qword [rsp + 0x58], 0
je 0x140004e08
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
jmp 0x140004e08
cmp qword [rsp + 0x860], 0
je 0x140005218
mov r8, qword [rsp + 0x868]
mov rcx, qword [0x1402590e0]
xor edx, edx
jmp 0x140005213
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov r14, rax
mov qword [rax], r13
cmp qword [rsp + 0x58], 0
je 0x140005186
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x860], 0
jne 0x140005191
jmp 0x1400051a7
movzx eax, byte [0x140259141]
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov r14, rax
shl rsi, 0x20
or rsi, 2
mov qword [rax], rsi
movabs rax, 0xffffffff7fffffff
cmp r13, rax
jbe 0x14000723c
cmp qword [rsp + 0x58], 0
jne 0x140005123
cmp qword [rsp + 0x860], 0
je 0x1400051a7
mov r8, qword [rsp + 0x868]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [r14]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140005207
test rcx, rcx
je 0x140005207
lea rsi, [rax - 1]
mov r15, qword [rax - 1]
mov r12, qword [rax + 7]
mov rcx, r15
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400051f6
cmp qword [r12 + 0x10], 0x11
jb 0x1400051e5
mov r15, qword [r15 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401b18c9]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7e80b2a4baf4def8
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094a20
mov r14, qword [rax]
mov esi, dword [rax + 8]
movzx ebp, word [rax + 0xc]
movzx r15d, byte [rax + 0xe]
movzx eax, byte [0x140259141]
xor r13d, r13d
mov edx, 0xf
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl r15d, 0x10
or ebp, r15d
mov ecx, ebp
shr ecx, 0x10
xor cl, 8
mov edx, ebp
xor dl, 0xd8
shr ebp, 8
xor bpl, 0x4b
movzx edx, dl
movzx r8d, bpl
shl r8d, 8
or r8d, edx
xor esi, 0x357d39f9
movabs rdx, 0x3aff2d71cd4dba52
xor r14, rdx
mov qword [rax], r14
mov dword [rax + 8], esi
mov word [rax + 0xc], r8w
mov byte [rax + 0xe], cl
mov qword [rsp + 0x748], 0xf
mov qword [rsp + 0x750], rax
mov qword [rsp + 0x758], 0xf
lea rax, [rsp + 0x748]
mov qword [rsp + 0x630], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x638], rax
lea rax, [0x1401be1b8]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rbx
mov qword [rsp + 0x918], 1
lea r15, [rsp + 0x900]
mov rcx, rdi
mov rdx, r15
call fcn.14000ba20
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x5f0], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x5e8], rax
mov r14d, 0xa
jmp 0x1400053b2
cmp qword [rsp + 0x6c0], 0
je 0x1400053ac
mov r8, qword [rsp + 0x6c8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
inc r13d
add r14, r14
lea rax, [0x1401b8bc6]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x7ec5999f20771633
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140095030
mov rcx, qword [rax]
movabs rdx, 0x1c93f9ab3e60787c
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x100e40761773a778
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0xfd388af3d81d62b6
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0xc581fe1660b504c0
xor r9, r10
mov r10d, dword [rax + 0x20]
mov r11d, 0xb22b25d7
xor r10d, r11d
movzx r11d, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
mov esi, eax
shr esi, 8
xor al, 0x7f
xor sil, 0x7d
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0xa4
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov dword [rsp + 0x268], r10d
mov word [rsp + 0x26c], si
mov byte [rsp + 0x26e], r11b
mov r8d, 0x27
mov rcx, r15
mov rdx, rdi
call fcn.1400d5660
mov rcx, rbx
mov rdx, r15
call fcn.1400beca0
mov r12, qword [rsp + 0x630]
movabs rax, 0x8000000000000001
cmp r12, rax
je 0x1400059f3
cmp r13d, 4
je 0x140005cd8
lea rax, [0x1401aeba0]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0xeee6fff6f44c86cc
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140095240
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov r11d, eax
shr r11d, 8
xor al, 0x3d
xor r11b, 0x43
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
movabs rax, 0x2d9796f95f144630
xor rcx, rax
mov qword [rsp + 0x248], rcx
movabs rax, 0x4982a99b3653f2fd
xor rdx, rax
mov qword [rsp + 0x250], rdx
movabs rax, 0x2dc2abd8a893fa3
xor r8, rax
mov qword [rsp + 0x258], r8
movabs rax, 0x6d839fa676f2e678
xor r9, rax
mov qword [rsp + 0x260], r9
mov word [rsp + 0x268], r11w
xor r10b, 0x9d
mov byte [rsp + 0x26a], r10b
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x23
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33b0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbbf8]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x910], rax
mov qword [rsp + 0x918], 1
mov rcx, r15
call fcn.140081090
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x1400056a2
mov rsi, rax
test r14, r14
js 0x14000569a
imul rax, r14, 0xffffffffff676980
mov qword [rsp + 0x900], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rsi
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x14000569a
mov rcx, rsi
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov ebp, eax
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
cmp ebp, 0xffffffff
jne 0x1400056ba
jmp 0x1400056a2
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
imul rcx, r14, 0x3e8
mov eax, 0xffffffff
cmp rcx, rax
cmovae rcx, rax
call sub.KERNEL32.dll_Sleep
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x14000576a
movabs rax, 0x8000000000000001
cmp r12, rax
jne 0x140005811
cmp qword [rsp + 0x638], 0
je 0x140005701
mov r8, qword [rsp + 0x640]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x690], 0
je 0x140005722
mov r8, qword [rsp + 0x698]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6b8]
test rsi, rsi
je 0x140005895
mov r12, qword [rsp + 0x6b0]
add r12, 8
jmp 0x14000574e
add r12, 0x20
dec rsi
je 0x140005895
cmp qword [r12 - 8], 0
je 0x140005741
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140005741
mov rax, qword [rsp + 0x638]
movabs rcx, 0x8000000000000001
lea rsi, [rcx - 1]
cmp rax, rsi
je 0x1400057a0
test rax, rax
je 0x1400057a0
mov r8, qword [rsp + 0x640]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x650]
cmp rax, rsi
je 0x1400057c8
test rax, rax
je 0x1400057c8
mov r8, qword [rsp + 0x658]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6a8]
test rsi, rsi
je 0x1400053ac
mov r12, qword [rsp + 0x6b0]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400053ac
cmp qword [r12 + 0x10], 0x11
jb 0x140005800
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
jmp 0x1400053a7
test r12, r12
je 0x14000582c
mov r8, qword [rsp + 0x638]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x688], 0
je 0x14000584d
mov r8, qword [rsp + 0x690]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6b0]
test rsi, rsi
je 0x14000593a
mov r12, qword [rsp + 0x6a8]
add r12, 8
jmp 0x140005879
add r12, 0x20
dec rsi
je 0x14000593a
cmp qword [r12 - 8], 0
je 0x14000586c
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14000586c
cmp qword [rsp + 0x6a8], 0
je 0x1400058b6
mov r8, qword [rsp + 0x6b0]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x718]
mov r12, qword [rsp + 0x720]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x1400058f2
cmp qword [r12 + 0x10], 0x11
jb 0x1400058e1
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6d0]
test rsi, rsi
je 0x14000538b
mov r12, qword [rsp + 0x6c8]
add r12, 8
jmp 0x14000591e
add r12, 0x58
dec rsi
je 0x14000538b
cmp qword [r12 - 8], 0
je 0x140005911
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140005911
cmp qword [rsp + 0x6a0], 0
je 0x14000595b
mov r8, qword [rsp + 0x6a8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x710]
mov r12, qword [rsp + 0x718]
mov rcx, rsi
call qword [r12]
cmp qword [r12 + 8], 0
je 0x140005997
cmp qword [r12 + 0x10], 0x11
jb 0x140005986
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x6c8]
test rsi, rsi
je 0x1400059d7
mov r12, qword [rsp + 0x6c0]
add r12, 8
jmp 0x1400059bb
add r12, 0x58
dec rsi
je 0x1400059d7
cmp qword [r12 - 8], 0
je 0x1400059b2
mov r8, qword [r12]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400059b2
cmp qword [rsp + 0x6b8], 0
je 0x1400053ac
mov r8, qword [rsp + 0x6c0]
jmp 0x14000539e
mov dword [rsp + 0x900], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x908], xmm0
mov dword [rsp + 0x918], 7
mov qword [rsp + 0x91c], 0
mov word [rsp + 0x924], 0
mov byte [rsp + 0x921], 1
mov byte [rsp + 0x924], 1
mov byte [rsp + 0x923], 1
lea r8, [rsp + 0x900]
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.140092af0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401b9915]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x59789f596de3e805
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095a50
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test rdi, rdi
jne case.0x140009348.0
mov qword [rsp + 0x740], rsi
lea rcx, [rsp + 0x638]
call fcn.1400b6a90
mov rdi, rax
mov rbx, rdx
lea rcx, [rsp + 0x900]
lea r9, [rsp + 0x740]
mov rdx, rax
mov r8, rbx
call fcn.14009dca0
lea rax, [0x1401bac3a]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x98a13d3b335fd405
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140095990
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x900], 0
jne case.0x140009348.0
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140005b95
cmp qword [rbx + 0x10], 0x11
jb 0x140005b84
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.14009b7c0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401aefa4]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x41b867205bde68bd
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.1400953a0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test rdi, rdi
jne case.0x140009348.0
lea rcx, [rsp + 0x900]
mov rdx, rsi
call fcn.14009f310
lea rax, [0x1401bafa7]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x11c6b9301cbd89a9
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140094db0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
cmp dword [rsp + 0x900], 4
jne case.0x140009348.0
mov rax, qword [rsp + 0x908]
mov rcx, qword [rsp + 0x910]
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rcx
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x760], rax
test rax, rax
jne 0x140007255
lea rcx, [rsp + 0x208]
call fcn.140001d40
mov rcx, qword [rsp + 0x740]
call sub.KERNEL32.dll_CloseHandle
jmp 0x140005e4f
lea rax, [0x1401bc51a]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xea3d864041d9fd14
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095460
movabs rcx, 0x32dac03d248bfe3b
xor rcx, qword [rax]
movabs rdx, 0x1caef71b3177ff33
xor rdx, qword [rax + 8]
movabs r8, 0x55dc08dd8bf3319d
xor r8, qword [rax + 0x10]
movabs r9, 0x6c914cf64c3f957e
xor r9, qword [rax + 0x18]
movabs r10, 0xb6f29109e4fa6051
xor r10, qword [rax + 0x20]
movzx r11d, byte [rax + 0x2a]
movzx eax, word [rax + 0x28]
mov esi, eax
shr esi, 8
xor al, 0x60
xor sil, 0xaf
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0xab
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov qword [rsp + 0x268], r10
mov word [rsp + 0x270], si
mov byte [rsp + 0x272], r11b
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x2b
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33b0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbbf8]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x910], rax
mov qword [rsp + 0x918], 1
lea rcx, [rsp + 0x900]
call fcn.140081090
lea rcx, [rsp + 0x630]
call fcn.140001d70
mov rcx, qword [rsp + 0x5f0]
mov rdx, qword [rsp + 0x5e8]
call fcn.140092f40
mov rsi, rax
lea rax, [0x1401b6f55]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x9332cd6a72f6beb9
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095aa0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rsi, rsi
jne case.0x140009348.0
lea rax, [0x1401b9f0f]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x6a9d7887086e57ef
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094de0
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov edi, dword [rax + 0x20]
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rsi, rax
xor edi, 0xa9e43f3b
movabs rax, 0x4c2db823a0fe0c9
xor rbx, rax
movabs rax, 0x4b9108abcd194370
xor r14, rax
movabs rax, 0x2ff293b284784b79
xor r15, rax
movabs rax, 0x4adc05615d3f56b5
xor r12, rax
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], rbx
mov dword [rsi + 0x20], edi
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rdi, rax
mov eax, dword [rsi + 0x20]
mov dword [rdi + 0x20], eax
movdqu xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmmword [rdi + 0x10], xmm1
movdqu xmmword [rdi], xmm0
movzx eax, byte [0x140259141]
mov edx, 0x24
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov ecx, dword [rdi + 0x20]
mov dword [rax + 0x20], ecx
movups xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rsp + 0x900], 0x24
mov qword [rsp + 0x908], rax
mov qword [rsp + 0x910], 0x24
mov byte [rsp + 0x918], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
mov dword [rsp + 0x919], eax
mov dword [rsp + 0x91c], ecx
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x928], 8
mov qword [rsp + 0x930], 0
movabs rax, 0x8000000000000001
lea rax, [rax - 1]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x938], rax
movdqu xmm0, xmmword [rsp + 0x248]
movdqu xmmword [rsp + 0x940], xmm0
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x950], rax
mov dword [rsp + 0x958], 6
mov eax, dword [rsp + 0x638]
mov dword [rsp + 0x964], eax
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0x95c], rax
mov dword [rsp + 0x968], 6
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x96c], rax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x974], eax
mov dword [rsp + 0x978], 6
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x97c], rax
mov eax, dword [rsp + 0x868]
mov dword [rsp + 0x984], eax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x988], xmm0
movdqu xmmword [rsp + 0x992], xmm0
movzx eax, word [rsp + 0x20c]
mov word [rsp + 0x9a6], ax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x9a2], eax
movdqu xmmword [rsp + 0x9b6], xmm0
movdqu xmmword [rsp + 0x9a8], xmm0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
lea rdx, [rsp + 0x900]
call fcn.14008fc50
lea rax, [0x1401b703c]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0xbaf0f93d27154e13
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.1400956e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov rbp, qword [rsp + 0x248]
cmp rbp, 2
je case.0x140009348.0
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
jne 0x14000a047
test r12, r12
jne 0x14000a058
test r14, r14
je 0x14000625a
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0x78
xor edx, edx
call fcn.140089e40
mov edx, 0x24
mov rcx, rsi
call fcn.140092f40
mov rdi, rax
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
je 0x1400062f4
mov eax, edi
and eax, 3
lea rcx, [rax - 2]
cmp rcx, 2
jb 0x1400062f4
test rax, rax
je 0x1400062f4
mov rsi, rdi
dec rsi
mov rbx, qword [rdi - 1]
mov rdi, qword [rdi + 7]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400062e3
cmp qword [rdi + 0x10], 0x11
jb 0x1400062d2
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401bbb2c]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xeffef00385e49e8c
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095af0
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rsi, qword [rax + 0x20]
movzx ebp, word [rax + 0x28]
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rdi, rax
mov eax, ebp
xor al, 0x6c
shr ebp, 8
not bpl
movzx ecx, bpl
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0x237f2147cbd588c1
xor rsi, rcx
movabs rcx, 0x6178627af111e38a
xor rbx, rcx
movabs rcx, 0xb603fe2956810409
xor r14, rcx
movabs rcx, 0x5b22483bc9f370a8
xor r15, rcx
movabs rcx, 0x19b609ede008bbf6
xor r12, rcx
mov qword [rdi], r12
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x20], rsi
mov word [rdi + 0x28], ax
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rsi, rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x1a]
movdqu xmmword [rax + 0x1a], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
movzx eax, byte [0x140259141]
mov edx, 0x2a
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
movups xmm0, xmmword [rsi]
movdqu xmm1, xmmword [rsi + 0x10]
movdqu xmm2, xmmword [rsi + 0x1a]
movdqu xmmword [rax + 0x1a], xmm2
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [rsp + 0x900], 0x2a
mov qword [rsp + 0x908], rax
mov qword [rsp + 0x910], 0x2a
mov byte [rsp + 0x918], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
mov dword [rsp + 0x919], eax
mov dword [rsp + 0x91c], ecx
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x928], 8
mov qword [rsp + 0x930], 0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x938], rax
movdqu xmm0, xmmword [rsp + 0x248]
movdqu xmmword [rsp + 0x940], xmm0
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x950], rax
mov dword [rsp + 0x958], 6
mov eax, dword [rsp + 0x638]
mov dword [rsp + 0x964], eax
mov rax, qword [rsp + 0x630]
mov qword [rsp + 0x95c], rax
mov dword [rsp + 0x968], 6
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x96c], rax
mov eax, dword [rsp + 0x528]
mov dword [rsp + 0x974], eax
mov dword [rsp + 0x978], 6
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x97c], rax
mov eax, dword [rsp + 0x868]
mov dword [rsp + 0x984], eax
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x988], xmm0
movdqu xmmword [rsp + 0x992], xmm0
movzx eax, word [rsp + 0x20c]
mov word [rsp + 0x9a6], ax
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x9a2], eax
movdqu xmmword [rsp + 0x9b6], xmm0
movdqu xmmword [rsp + 0x9a8], xmm0
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
lea rdx, [rsp + 0x900]
call fcn.14008fc50
lea rax, [0x1401b0365]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x5034e85d97b04d0c
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.1400955a0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov r13, qword [rsp + 0x248]
cmp r13, 2
je case.0x140009348.0
mov rbx, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14000a06e
test r12, r12
jne 0x14000a07f
test r14, r14
je 0x1400066a7
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089e40
lea rax, [0x1401b5620]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xe4ac6a3f0848ee44
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094910
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov esi, dword [rax + 0x28]
movzx eax, byte [0x140259141]
mov edx, 0x2c
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
xor esi, 0x2894898f
movabs rcx, 0x78389165f42ded03
xor rdi, rcx
movabs rcx, 0x38d0f229586b8748
xor rbx, rcx
movabs rcx, 0xfc290059b1f0da23
xor r14, rcx
movabs rcx, 0x1fb0d0929823bd12
xor r15, rcx
movabs rcx, 0xc073cbd6abd6f3c1
xor r12, rcx
mov qword [rax], r12
mov qword [rax + 8], r15
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov dword [rax + 0x28], esi
lea rsi, [rsp + 0x248]
mov r8d, 0x2c
mov rcx, rsi
mov rdx, rax
call fcn.14000b530
lea rdi, [rsp + 0x900]
mov rcx, rdi
mov rdx, rsi
call fcn.14009bc70
mov dword [rsp + 0x9c0], 0x8000000
lea rcx, [rsp + 0x248]
mov rdx, rdi
call fcn.14008fc50
lea rax, [0x1401bc029]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x39b889986cb915ef
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.1400951c0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r13, qword [rsp + 0x248]
cmp r13, 2
je case.0x140009348.0
mov rbx, qword [rsp + 0x250]
mov r12, qword [rsp + 0x258]
mov rdi, qword [rsp + 0x260]
mov r14, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x278]
mov r15, qword [rsp + 0x280]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14000a095
test r12, r12
jne 0x14000a0a6
test r14, r14
je 0x1400068a7
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov ecx, 0xf
xor edx, edx
call fcn.140089e40
lea rax, [0x1401bae5b]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0x1acd7d2be71661ae
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140094d00
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x140259141]
mov edx, 7
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
shl ebx, 0x10
or edi, ebx
mov ecx, edi
shr ecx, 0x10
xor cl, 0xd
mov edx, edi
xor dl, 0x6e
shr edi, 8
xor dil, 0xb7
movzx edx, dl
movzx r8d, dil
shl r8d, 8
or r8d, edx
xor esi, 0xdef73e36
mov dword [rax], esi
mov word [rax + 4], r8w
mov byte [rax + 6], cl
lea rsi, [rsp + 0x248]
mov r8d, 7
mov rcx, rsi
mov rdx, rax
call fcn.14000b530
lea rbx, [rsp + 0x900]
mov rcx, rbx
mov rdx, rsi
call fcn.14009bc70
mov dword [rsp + 0x9c0], 0x8000000
lea rax, [0x1401b09a1]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0xeb37dc4888bbd10c
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140094d60
movzx eax, word [rax]
mov ecx, eax
xor cl, 0x5f
shr eax, 8
xor al, 0x7c
movzx ecx, cl
movzx eax, al
shl eax, 8
or eax, ecx
mov word [rsp + 0x860], ax
lea rdx, [rsp + 0x860]
mov r8d, 2
mov rcx, rbx
call fcn.14009bbd0
lea rax, [0x1401b3e21]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x188e190828714402
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.140095290
movabs rcx, 0x38610b5806e1313
xor rcx, qword [rax]
movabs rdx, 0xa6545745f38adfdd
xor rdx, qword [rax + 8]
movabs r8, 0xce918a4cbb20c27b
xor r8, qword [rax + 0x10]
movabs r9, 0x40b755f104d6c1a0
xor r9, qword [rax + 0x18]
movabs r10, 0xd010bce6eb2d3e55
xor r10, qword [rax + 0x20]
movabs r11, 0xe4186d35360ffb20
xor r11, qword [rax + 0x28]
movabs rsi, 0x316ac954de6984aa
xor rsi, qword [rax + 0x30]
movabs rdi, 0xdc12c36c604fd3f4
xor rdi, qword [rax + 0x38]
mov ebp, 0xb9f2b33
xor ebp, dword [rax + 0x40]
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov qword [rsp + 0x260], r9
mov qword [rsp + 0x268], r10
mov qword [rsp + 0x270], r11
mov qword [rsp + 0x278], rsi
mov qword [rsp + 0x280], rdi
mov dword [rsp + 0x288], ebp
lea rdx, [rsp + 0x248]
mov r8d, 0x44
mov rcx, rbx
call fcn.14009bbd0
lea rdi, [rsp + 0x630]
mov rcx, rdi
mov rdx, rbx
call fcn.14008fc50
lea rax, [0x1401bb419]
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0x520]
mov rcx, qword [rsp + 0x520]
movabs rax, 0x717a1ab826811ad
mov qword [rsp + 0x520], rax
lea rax, [rsp + 0x520]
mov rdx, qword [rsp + 0x520]
call fcn.140094970
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r12, qword [rsp + 0x630]
cmp r12, 2
je case.0x140009348.0
mov r15, qword [rsp + 0x638]
mov r14, qword [rsp + 0x640]
mov rbp, qword [rsp + 0x648]
mov rsi, qword [rsp + 0x650]
mov rbx, qword [rsp + 0x658]
mov rcx, qword [rsp + 0x660]
mov r13, qword [rsp + 0x668]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test r12, r12
jne 0x14000a0bc
test r14, r14
jne 0x14000a0cd
test rsi, rsi
je 0x140006c0e
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x900]
call fcn.140001450
mov r14d, 0xa
xor r12d, r12d
mov ecx, 0xa
xor edx, edx
call fcn.140089e40
lea r15, [rsp + 0x248]
mov esi, 0xffffffff
jmp 0x140006c53
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
inc r12d
add r14, r14
lea rax, [0x1401b1947]
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x248]
movabs rax, 0xb47fef364b4f5c6d
mov qword [rsp + 0x248], rax
mov rdx, qword [rsp + 0x248]
call fcn.1400958f0
mov rcx, qword [rax]
movabs rdx, 0x64e10a75c9d1ea94
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x5b9b6d63f05e9ce2
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x34a56c25f0d5d978
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x75bd4e7cbd119615
xor r9, r10
mov r10d, dword [rax + 0x20]
mov r11d, 0x5226a8e5
xor r10d, r11d
movzx r11d, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
mov ebx, eax
shr ebx, 8
xor al, 0x78
xor bl, 0x24
movzx eax, al
movzx ebx, bl
shl ebx, 8
or ebx, eax
xor r11b, 0x73
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov qword [rsp + 0x640], r8
mov qword [rsp + 0x648], r9
mov dword [rsp + 0x650], r10d
mov word [rsp + 0x654], bx
mov byte [rsp + 0x656], r11b
mov r8d, 0x27
mov rcx, r15
mov rdx, rdi
call fcn.1400d5660
lea rcx, [rsp + 0x900]
mov rdx, r15
call fcn.1400beca0
mov rbx, qword [rsp + 0x900]
movabs rax, 0x8000000000000001
cmp rbx, rax
je 0x14000a0e3
cmp r12d, 4
je 0x14000a2fd
lea rax, [0x1401ba67f]
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x248]
movabs rax, 0x92daf1ba56938d18
mov qword [rsp + 0x248], rax
mov rdx, qword [rsp + 0x248]
call fcn.140094f50
mov rcx, qword [rax]
movabs rdx, 0x4a67259518511ef2
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x3c49d0d9746f8d1f
xor rdx, r8
mov eax, dword [rax + 0x10]
mov r8d, 0xcc0c8df0
xor eax, r8d
mov qword [rsp + 0x630], rcx
mov qword [rsp + 0x638], rdx
mov dword [rsp + 0x640], eax
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x14
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33b0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbbf8]
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], 2
mov qword [rsp + 0x268], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 1
mov rcx, r15
call fcn.140081090
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x140006eee
mov r13, rax
test r14, r14
js 0x140006ee6
imul rax, r14, 0xffffffffff676980
mov qword [rsp + 0x248], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, r13
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x140006ee6
mov rcx, r13
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov ebp, eax
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
cmp ebp, 0xffffffff
jne 0x140006f01
jmp 0x140006eee
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
imul rcx, r14, 0x3e8
cmp rcx, rsi
cmovae rcx, rsi
call sub.KERNEL32.dll_Sleep
movabs rax, 0x8000000000000000
cmp rbx, rax
je 0x140006fb0
movabs rax, 0x8000000000000001
cmp rbx, rax
jne 0x140007049
cmp qword [rsp + 0x908], 0
je 0x140006f48
mov r8, qword [rsp + 0x910]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x960], 0
je 0x140006f69
mov r8, qword [rsp + 0x968]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x988]
test rbx, rbx
je 0x1400070cc
mov r13, qword [rsp + 0x980]
add r13, 8
jmp 0x140006f95
add r13, 0x20
dec rbx
je 0x1400070cc
cmp qword [r13 - 8], 0
je 0x140006f88
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140006f88
mov rax, qword [rsp + 0x908]
cmp rax, qword [rsp + 0x58]
je 0x140006fda
test rax, rax
je 0x140006fda
mov r8, qword [rsp + 0x910]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x920]
cmp rax, qword [rsp + 0x58]
je 0x140007004
test rax, rax
je 0x140007004
mov r8, qword [rsp + 0x928]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x978]
test r13, r13
je 0x140006c4d
mov rbx, qword [rsp + 0x980]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140006c4d
cmp qword [rbx + 0x10], 0x11
jb 0x140007038
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
jmp 0x140006c48
test rbx, rbx
je 0x140007064
mov r8, qword [rsp + 0x908]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x958], 0
je 0x140007085
mov r8, qword [rsp + 0x960]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x980]
test rbx, rbx
je 0x14000716c
mov r13, qword [rsp + 0x978]
add r13, 8
jmp 0x1400070b1
add r13, 0x20
dec rbx
je 0x14000716c
cmp qword [r13 - 8], 0
je 0x1400070a4
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400070a4
cmp qword [rsp + 0x978], 0
je 0x1400070ed
mov r8, qword [rsp + 0x980]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x9e8]
mov rbx, qword [rsp + 0x9f0]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140007125
cmp qword [rbx + 0x10], 0x11
jb 0x140007114
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x9a0]
test rbx, rbx
je 0x140007204
mov r13, qword [rsp + 0x998]
add r13, 8
jmp 0x140007151
add r13, 0x58
dec rbx
je 0x140007204
cmp qword [r13 - 8], 0
je 0x140007144
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140007144
cmp qword [rsp + 0x970], 0
je 0x14000718d
mov r8, qword [rsp + 0x978]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0x9e0]
mov rbx, qword [rsp + 0x9e8]
mov rcx, r13
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400071c5
cmp qword [rbx + 0x10], 0x11
jb 0x1400071b4
mov r13, qword [r13 - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x998]
test rbx, rbx
je 0x140007220
mov r13, qword [rsp + 0x990]
add r13, 8
jmp 0x1400071e9
add r13, 0x58
dec rbx
je 0x140007220
cmp qword [r13 - 8], 0
je 0x1400071e0
mov r8, qword [r13]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400071e0
cmp qword [rsp + 0x990], 0
je 0x140006c4d
mov r8, qword [rsp + 0x998]
jmp 0x140006c3f
cmp qword [rsp + 0x988], 0
je 0x140006c4d
mov r8, qword [rsp + 0x990]
jmp 0x140006c3f
mov rcx, r13
call sub.ADVAPI32.dll_RegCloseKey
cmp qword [rsp + 0x58], 0
je 0x140005186
jmp 0x140005123
lea rax, [rsp + 0x210]
mov qword [rsp + 0x218], rax
xorps xmm6, xmm6
push rdi
test byte [rax - 0x77], 0x84
and al, 0xf0
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rbp], ah
add al, byte [rax]
add byte [rcx], dh
ror byte [rax - 0x77], 0x84
and al, 0x20
and byte [rdx], al
add byte [rax], al
push rdi
test byte [rax - 0x77], 0x84
and al, 0xf0
add dword [rax], eax
add byte [rax - 0x77], cl
test byte [rax + rbp], ah
add al, byte [rax]
add byte [rcx], dh
ror byte [rax - 0x77], 0x84
and al, 0x20
and byte [rdx], al
add byte [rax], al
jmp 0x1400072c6
mov rcx, qword [0x1402590e0]
and byte [rdx], al
add byte [rax], al
jmp 0x1400072c6
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.140181c70
mov rcx, qword [rsp + 0x220]
inc rcx
mov rax, rcx
mov qword [rsp + 0x220], rcx
cmp rcx, qword [rsp + 0x760]
je 0x140005cb9
mov rax, qword [rsp + 0x208]
mov esi, 3
mov rcx, qword [rsp + 0x220]
cmp qword [rax + 0x20], rcx
jbe 0x140007319
mov rdi, qword [rax + 0x18]
imul rbx, qword [rsp + 0x220], 0xb0
mov esi, 2
mov ecx, 0x21
cmp byte [rdi + rbx + 0xa6], 0
je 0x14000731e
lea rax, [0x1401dc32e]
mov qword [rsp + 0x140], rax
jmp 0x1400074dd
jmp 0x1400074dd
mov rdx, qword [rdi + rbx + 0x80]
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
lea r8, [rsp + 0x520]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074be
mov dword [rsp + 0x520], 0
mov r8d, 4
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b860
test rax, rax
je 0x140007392
mov rcx, qword [rsp + 0x170]
mov qword [rsp + 0x140], rax
jmp 0x1400074db
cmp dword [rsp + 0x520], 0x4034b50
jne 0x140009f9a
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
mov edx, 0x16
lea r8, [rsp + 0x520]
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074be
mov word [rsp + 0x520], 0
mov r8d, 2
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b860
test rax, rax
jne 0x14000737d
movzx r14d, word [rsp + 0x520]
mov word [rsp + 0x520], 0
mov r8d, 2
mov rcx, qword [rsp + 0x218]
lea rdx, [rsp + 0x520]
call fcn.14009b860
test rax, rax
jne 0x14000737d
lea rax, [rdi + rbx]
add rax, 0x80
movzx ecx, word [rsp + 0x520]
mov rax, qword [rax]
add rcx, r14
lea rdx, [rax + rcx]
add rdx, 0x1e
mov qword [rdi + rbx + 0x90], rdx
mov qword [rsp + 0x520], 0
mov rcx, qword [rsp + 0x210]
lea r8, [rsp + 0x520]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x1400074be
mov rax, qword [rdi + rbx + 0x70]
mov qword [rsp + 0x170], rax
mov ecx, 0x20
cmp word [rdi + rbx + 0x98], 5
jne 0x140009fc5
lea rax, [0x140216431]
mov qword [rsp + 0x140], rax
jmp 0x1400074dd
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x170]
xor esi, esi
mov edi, 6
mov bl, 1
mov qword [rsp + 0x850], rcx
mov qword [rsp + 0x848], rsi
lea rax, [0x1401bae44]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rdx, 0xf1a667763a8a05e1
mov qword [rsp + 0x900], rdx
mov rdx, qword [rsp + 0x900]
call fcn.140095760
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test bl, bl
jne case.0x140009348.0
mov qword [rsp + 0x248], rdi
mov rax, qword [rsp + 0x848]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x850]
mov qword [rsp + 0x260], rax
mov r8d, 0x120
lea rcx, [rsp + 0x268]
lea rdi, [rsp + 0x900]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
movabs rax, 0x8000000000000001
dec rax
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x388], rax
mov r14, qword [rsp + 0x768]
mov qword [rsp + 0x390], r14
mov r8d, 0xa0
lea rcx, [rsp + 0x398]
lea rbx, [rsp + 0x860]
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x438], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [rsp + 0x163]
lea rdx, [rsp + 0x388]
mov dword [rdx + 0xb1], eax
mov dword [rdx + 0xb4], ecx
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x440], rax
lea rax, [0x1401dbe90]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x450], rax
mov r8d, 0xc8
lea rcx, [rsp + 0x458]
lea rsi, [rsp + 0x520]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [r14 + 8]
movdqu xmmword [rsp + 0x160], xmm0
lea rax, [rsp + 0x748]
mov qword [rsp + 0x520], rax
lea rax, [0x140001e40]
mov qword [rsp + 0x528], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x530], rax
lea rax, [0x1400c33b0]
mov qword [rsp + 0x538], rax
lea rax, [0x1401be1e0]
mov qword [rsp + 0x900], rax
mov qword [rsp + 0x908], 2
mov qword [rsp + 0x920], 0
mov qword [rsp + 0x910], rsi
mov qword [rsp + 0x918], 2
mov qword [rsp + 0x860], 0
mov qword [rsp + 0x868], 1
mov qword [rsp + 0x870], 0
mov rcx, rbx
lea rdx, [0x1401bea00]
mov r8, rdi
call fcn.14000c7a0
test al, al
jne case.0x140009348.0
lea rax, [rsp + 0x388]
mov rcx, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rcx
jne 0x14000774c
mov rax, qword [rsp + 0x390]
mov rcx, qword [rsp + 0x860]
mov qword [rsp + 0x858], rcx
mov rcx, qword [rsp + 0x868]
mov qword [rsp + 0x5f8], rcx
mov r8, qword [rsp + 0x870]
mov r9, qword [rax + 0x10]
test r9, r9
je 0x140007862
mov r10, qword [rax + 8]
movzx eax, byte [r10 + r9 - 1]
test al, al
jns 0x1400077d3
movzx ecx, byte [r10 + r9 - 2]
cmp cl, 0xc0
jge 0x1400077bb
movzx edx, byte [r10 + r9 - 3]
cmp dl, 0xc0
jge 0x1400077c0
movzx r9d, byte [r10 + r9 - 4]
and r9d, 7
shl r9d, 6
and edx, 0x3f
or edx, r9d
jmp 0x1400077c3
and ecx, 0x1f
jmp 0x1400077cb
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp eax, 0x2f
je 0x1400077e1
cmp eax, 0x5c
jne 0x140007862
mov byte [rsp + 0x900], 1
lea rdi, [rsp + 0x900]
mov rcx, rdi
mov rdx, qword [rsp + 0x5f8]
call fcn.1400880f0
mov rsi, rax
lea rax, [0x1401afff2]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x781e4ef9e61011e3
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140094f80
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov ecx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
test rsi, rsi
je 0x14000993f
jmp case.0x140009348.0
mov dword [rsp + 0x900], 0
lea rax, [rsp + 0x908]
movups xmmword [rax], xmm6
mov dword [rsp + 0x918], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x921], 1
mov word [rsp + 0x923], 0x101
mov rcx, qword [rsp + 0x5f8]
mov rdx, r8
lea rbx, [rsp + 0x900]
mov r8, rbx
call fcn.140092af0
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401af15f]
mov qword [rsp + 0x900], rax
mov rcx, qword [rsp + 0x900]
movabs rax, 0x3679859fbaed44b8
mov qword [rsp + 0x900], rax
mov rdx, qword [rsp + 0x900]
call fcn.140094cb0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov bh, 0x40
sbb al, 0x48
test edi, edi
mov bh, 0x40
sbb al, 0x48
test edi, edi
jne case.0x140009348.0
mov qword [rsp + 0x860], rsi
xor ecx, ecx
jmp 0x140007934
mov ecx, 0x2000
cmp byte [rdi + 0x10], 0x23
jne case.0x140009795.2
mov r8d, 0x2000
sub r8, rcx
add rcx, rsp
add rcx, 0x900
xor edx, edx
call sub.msvcrt.dll_memset
mov rdi, qword [rsp + 0x248]
test rdi, rdi
jne 0x14000933a
movzx eax, byte [rsp + 0x438]
mov byte [rsp + 0x438], 3
mov byte [rsp + 0x58], al
cmp al, 3
je case.0x140009348.0
movzx r8d, byte [rsp + 0x439]
mov rax, qword [rsp + 0x390]
lea rcx, [rax + 0x98]
mov rdx, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rdx
lea rdx, [rsp + 0x420]
cmovne rcx, rdx
lea rdx, [rsp + 0x388]
cmovne rax, rdx
movzx ecx, word [rcx]
cmp byte [rsp + 0x58], 2
mov edx, 0
mov dword [rsp + 0x1b0], r8d
cmove edx, r8d
mov dword [rsp + 0x78], edx
cmp rcx, 4
ja case.0x140009348.0
mov edx, dword [rsp + 0x43a]
movzx r14d, word [rsp + 0x43e]
shl r14, 0x20
or r14, rdx
mov rdx, qword [rsp + 0x440]
mov qword [rsp + 0x90], rdx
mov rdx, qword [rsp + 0x448]
mov qword [rsp + 0x80], rdx
mov rdx, qword [rsp + 0x450]
mov qword [rsp + 0x198], rdx
movzx edx, byte [rsp + 0x45f]
shl edx, 0x10
movzx r8d, word [rsp + 0x45d]
or r8d, edx
mov qword [rsp + 0x150], r8
movzx r10d, byte [rsp + 0x460]
movzx r9d, byte [rsp + 0x461]
mov edx, dword [rsp + 0x462]
movzx ebx, word [rsp + 0x466]
shl rbx, 0x20
or rbx, rdx
movzx edx, byte [rsp + 0x484]
mov byte [rsp + 0x128], dl
movzx edx, byte [rsp + 0x487]
shl edx, 0x10
movzx r13d, word [rsp + 0x485]
or r13d, edx
movzx edx, byte [rsp + 0x4ac]
mov byte [rsp + 0x130], dl
movzx edx, byte [rsp + 0x4af]
shl edx, 0x10
movzx r8d, word [rsp + 0x4ad]
or r8d, edx
mov dword [rsp + 0x138], r8d
movzx edx, byte [rsp + 0x4d7]
shl edx, 0x10
movzx r15d, word [rsp + 0x4d5]
or r15d, edx
movzx edx, byte [rsp + 0x4ff]
shl edx, 0x10
movzx r12d, word [rsp + 0x4fd]
or r12d, edx
movzx edx, byte [rsp + 0x4d4]
mov byte [rsp + 0x1a8], dl
movzx edx, byte [rsp + 0x4fc]
mov byte [rsp + 0x56], dl
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0xe0], eax
lea rdx, [0x1401b6060]
movsxd rax, dword [rdx + rcx*4]
add rax, rdx
mov ecx, dword [rsp + 0x458]
mov qword [rsp + 0x158], rcx
movzx ecx, byte [rsp + 0x45c]
mov qword [rsp + 0x148], rcx
mov byte [rsp + 0x178], r10b
movzx ebp, r10b
mov byte [rsp + 0x180], r9b
movzx esi, r9b
mov rcx, qword [rsp + 0x468]
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x470]
mov qword [rsp + 0xa0], rcx
mov rcx, qword [rsp + 0x478]
mov qword [rsp + 0x108], rcx
mov ecx, dword [rsp + 0x480]
mov dword [rsp + 0x100], ecx
mov rcx, qword [rsp + 0x488]
mov qword [rsp + 0xf8], rcx
mov rcx, qword [rsp + 0x490]
mov qword [rsp + 0xb0], rcx
mov rcx, qword [rsp + 0x498]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0x4a0]
mov qword [rsp + 0x110], rcx
mov ecx, dword [rsp + 0x4a8]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x4b0]
mov qword [rsp + 0x120], rcx
mov rcx, qword [rsp + 0x4b8]
mov qword [rsp + 0xd0], rcx
mov rcx, qword [rsp + 0x4c0]
mov qword [rsp + 0xd8], rcx
mov rcx, qword [rsp + 0x4c8]
mov qword [rsp + 0x118], rcx
mov ecx, dword [rsp + 0x4d0]
mov dword [rsp + 0x1a0], ecx
mov rcx, qword [rsp + 0x4d8]
mov qword [rsp + 0x190], rcx
mov rcx, qword [rsp + 0x4e0]
mov qword [rsp + 0xa8], rcx
mov rcx, qword [rsp + 0x4e8]
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x4f0]
mov qword [rsp + 0x188], rcx
mov ecx, dword [rsp + 0x4f8]
mov dword [rsp + 0xec], ecx
mov rcx, qword [rsp + 0x500]
mov qword [rsp + 0x1d8], rcx
mov rcx, qword [rsp + 0x508]
mov qword [rsp + 0x1e0], rcx
mov rcx, qword [rsp + 0x510]
mov qword [rsp + 0x1e8], rcx
mov rcx, qword [rsp + 0x518]
mov qword [rsp + 0x1d0], rcx
jmp rax
mov rax, qword [0x140259138]
test rax, rax
je 0x140009874
mov edi, 2
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140007d0a
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098ae
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov rbp, r14
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x6c], eax
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x55], al
mov dword [rsp + 0x68], r12d
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0xc0], rax
jmp 0x140008d91
mov edx, 0x8000
mov ecx, 8
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rdi, rax
movzx eax, byte [0x140259141]
mov edx, 0xab08
xor ecx, ecx
call fcn.14008b700
mov qword [rsp + 0x240], rax
test rax, rax
je case.0x140009348.0
mov rsi, qword [rsp + 0x240]
movups xmmword [rsi + 0xaaf0], xmm6
mov r8d, 0xaaea
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsi + 0xab00], 0x10201
mov dword [rsp + 0x520], 0
mov byte [rsp + 0x524], 0
mov rax, qword [0x140259138]
test rax, rax
je 0x14000987e
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140007ec5
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098b8
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov rax, rdi
shr rax, 0x20
mov rcx, rdi
shr rcx, 0x28
mov qword [rsp + 0x228], rcx
mov rbp, r14
mov ecx, dword [rsp + 0xec]
mov dword [rsp + 0x6c], ecx
movzx ecx, byte [rsp + 0x56]
mov byte [rsp + 0x55], cl
mov dword [rsp + 0x68], r12d
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x1c0], rcx
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x1b8], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0xb8], rcx
mov ecx, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], ecx
mov dword [rsp + 0x78], eax
mov eax, edi
mov dword [rsp + 0xe0], edi
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0xc0], rax
mov edi, 3
mov eax, 0x8000
mov qword [rsp + 0x600], rax
xor eax, eax
mov qword [rsp + 0x1f0], rax
xor eax, eax
mov qword [rsp + 0x238], rax
xor eax, eax
mov qword [rsp + 0x200], rax
xor eax, eax
mov qword [rsp + 0x1f8], rax
jmp 0x140008d91
movzx eax, byte [0x140259141]
mov edx, 0x2000
xor ecx, ecx
call fcn.14008b700
test rax, rax
je case.0x140009348.0
mov rdi, rax
movzx eax, byte [0x140259141]
mov edx, 0x50
xor ecx, ecx
call fcn.14008b700
mov rcx, rax
mov qword [rsp + 0x238], rax
test rax, rax
je case.0x140009348.0
mov rcx, qword [rsp + 0x238]
movups xmmword [rcx + 0x40], xmm6
movups xmmword [rcx + 0x30], xmm6
movups xmmword [rcx + 0x20], xmm6
movups xmmword [rcx + 0x10], xmm6
movups xmmword [rcx], xmm6
xor edx, edx
xor r8d, r8d
call fcn.1401189a0
test eax, eax
jne case.0x140009348.0
mov rax, qword [0x140259138]
test rax, rax
je 0x14000989a
xor ecx, ecx
mov qword [rsp + 0xf0], rcx
mov ecx, 0
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140008115
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098c2
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
shl esi, 8
or rsi, rbp
shl rbx, 0x10
or rbx, rsi
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x180], al
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x55], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x1a8], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x120], rax
mov eax, edi
shr eax, 8
movzx ecx, byte [rsp + 0x58]
mov byte [rsp + 0x178], cl
mov ecx, edi
mov byte [rsp + 0x58], dil
mov rbp, rdi
shr rbp, 0x10
mov ecx, dword [rsp + 0x1a0]
mov dword [rsp + 0x6c], ecx
mov dword [rsp + 0x68], r15d
mov rcx, qword [rsp + 0x188]
mov qword [rsp + 0x1b8], rcx
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x240], rcx
mov qword [rsp + 0xf8], rbx
mov rbx, r14
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x1a0], ecx
mov r15d, dword [rsp + 0x138]
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 0x188], rcx
mov ecx, dword [rsp + 0x100]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x600], rcx
mov ecx, r12d
mov qword [rsp + 0x228], rcx
mov dword [rsp + 0x138], r13d
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x118], rcx
mov dword [rsp + 0x1b0], eax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], eax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0xe0], eax
mov rax, qword [rsp + 0x150]
mov r13d, eax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f8], rax
movzx eax, byte [rsp + 0x56]
mov dword [rsp + 0x78], eax
mov edi, 4
mov eax, 0x2000
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x1f0], rax
mov eax, 0
mov qword [rsp + 0x158], rax
xor eax, eax
mov qword [rsp + 0x148], rax
xor eax, eax
mov qword [rsp + 0x150], rax
xor eax, eax
mov qword [rsp + 0x198], rax
jmp 0x140008d91
call fcn.1401694a0
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x140008389
js case.0x140009348.0
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, qword [rsp + 0xb8]
call fcn.14008b700
mov qword [rsp + 0xf0], rax
test rax, rax
jne 0x140008396
jmp case.0x140009348.0
mov eax, 1
mov qword [rsp + 0xf0], rax
call fcn.14016a0c0
mov qword [rsp + 0x88], rax
test rax, rax
je case.0x140009348.0
shl esi, 8
or rsi, rbp
shl rbx, 0x10
or rbx, rsi
mov rsi, qword [rsp + 0x88]
mov rcx, rsi
call fcn.140182fb0
xor eax, eax
mov qword [rsp + 0x1f0], rax
mov rcx, rsi
lea rdx, [0x140216a68]
xor r8d, r8d
call fcn.140168880
mov rsi, rax
mov rcx, rax
call fcn.1401835d0
test eax, eax
je 0x14000889d
mov ebp, eax
mov rcx, rsi
call fcn.140182450
mov r13, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdi, rax
mov rcx, rax
sub rcx, 0xf
mov eax, 0
cmovae rax, rcx
test rdi, rdi
je 0x1400085fd
lea rcx, [r13 + 7]
and rcx, 0xfffffffffffffff8
sub rcx, r13
xor edx, edx
jmp 0x140008444
inc rdx
cmp rdx, rdi
jae 0x1400085d4
movzx r8d, byte [r13 + rdx]
test r8b, r8b
js 0x140008499
mov r8d, ecx
sub r8d, edx
test r8b, 7
jne 0x140008438
jmp 0x140008461
add rdx, 0x10
cmp rdx, rax
jae 0x14000847f
mov r8, qword [r13 + rdx + 8]
or r8, qword [r13 + rdx]
movabs r9, 0x8080808080808080
test r8, r9
je 0x14000845d
cmp rdx, rdi
jae 0x14000843b
cmp byte [r13 + rdx], 0
js 0x14000843b
inc rdx
cmp rdi, rdx
jne 0x140008484
jmp 0x1400085d4
lea r9, [0x1401dae70]
movzx r9d, byte [r8 + r9]
cmp r9d, 4
je 0x1400084c3
cmp r9d, 3
je 0x1400084f3
cmp r9d, 2
jne case.0x140009348.0
inc rdx
jmp 0x1400085ba
lea r9, [rdx + 1]
cmp r9, rdi
jae case.0x140009348.0
movzx r9d, byte [r13 + r9]
cmp r8, 0xf0
je 0x140008527
cmp r8d, 0xf4
jne 0x140008536
cmp r9b, 0x8f
jle 0x14000854e
jmp case.0x140009348.0
lea r9, [rdx + 1]
cmp r9, rdi
jae case.0x140009348.0
movzx r9d, byte [r13 + r9]
cmp r8, 0xe0
je 0x140008585
cmp r8d, 0xed
jne 0x140008594
cmp r9b, 0x9f
jle 0x1400085b6
jmp case.0x140009348.0
add r9b, 0x70
cmp r9b, 0x30
jb 0x14000854e
jmp case.0x140009348.0
add r8b, 0xf
cmp r8b, 2
ja case.0x140009348.0
cmp r9b, 0xc0
jge case.0x140009348.0
lea r8, [rdx + 2]
cmp r8, rdi
jae case.0x140009348.0
cmp byte [r13 + r8], 0xbf
jg case.0x140009348.0
add rdx, 3
cmp rdx, rdi
jae case.0x140009348.0
cmp byte [r13 + rdx], 0xc0
jl 0x140008438
jmp case.0x140009348.0
and r9b, 0xe0
cmp r9b, 0xa0
je 0x1400085b6
jmp case.0x140009348.0
lea r10d, [r8 + 0x1f]
cmp r10b, 0xc
jb 0x1400085ac
and r8b, 0xfe
cmp r8b, 0xee
jne case.0x140009348.0
cmp r9b, 0xc0
jge case.0x140009348.0
add rdx, 2
cmp rdx, rdi
jae case.0x140009348.0
cmp byte [r13 + rdx], 0xbf
jle 0x140008438
jmp case.0x140009348.0
test rdi, rdi
je 0x1400085fd
js case.0x140009348.0
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, rdi
call fcn.14008b700
mov rsi, rax
test rax, rax
jne 0x140008602
jmp case.0x140009348.0
mov esi, 1
mov rcx, rsi
mov rdx, r13
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], rsi
mov qword [rsp + 0x530], rdi
lea rcx, [rsp + 0x520]
call fcn.1400ee910
mov rdi, rax
mov rcx, qword [rsp + 0x88]
call fcn.140181c70
cmp qword [rsp + 0xb8], 0
je 0x140008666
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0xf0]
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x58], 2
jb 0x1400086b8
movzx eax, byte [rsp + 0x148]
shl rax, 0x20
mov rcx, qword [rsp + 0x150]
shl rcx, 0x28
add rcx, qword [rsp + 0x158]
or rcx, rax
mov rsi, rcx
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400086b8
cmp qword [rbx + 0x10], 0x11
jb 0x1400086a7
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test ebp, ebp
jne case.0x140009348.0
mov rax, qword [rsp + 0x7a0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x7a8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x7b0]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x7b8]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x7c0]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0x120], rax
mov eax, dword [rsp + 0x618]
mov dword [rsp + 0x138], eax
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x130], al
mov eax, dword [rsp + 0x61c]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x7d8]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x7e0]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0xf8], rax
mov r13d, dword [rsp + 0x620]
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x624]
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x90], rax
mov rbx, qword [rsp + 0x808]
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x180], al
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x830]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x838]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0x628]
mov dword [rsp + 0x68], eax
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x55], al
mov qword [rsp + 0xf0], rdi
mov eax, dword [rsp + 0x62c]
mov dword [rsp + 0x6c], eax
mov al, 2
mov qword [rsp + 0x1f0], rax
jmp 0x140008a3d
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x130], al
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x128], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x180], al
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x778], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x780], rax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x608], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x60c], eax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x138], r13d
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0xf8], rbx
mov rax, qword [rsp + 0x150]
mov r13d, eax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x108], rax
mov rbx, r14
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x178], al
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x1c0], rax
mov dword [rsp + 0x68], r15d
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x55], al
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x788], rax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x6c], eax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x790], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x798], rax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x614], eax
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x71], al
mov dword [rsp + 0x610], r12d
movzx eax, byte [rsp + 0x164]
mov byte [rsp + 0x524], al
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x520], eax
mov rax, qword [0x140259138]
test rax, rax
je 0x1400098a4
xor ecx, ecx
mov qword [rsp + 0x158], rcx
mov ecx, 0
mov qword [rsp + 0x88], rcx
test al, 2
je 0x140008aa6
mov rcx, qword [0x140259138]
mov rax, rcx
test rcx, rcx
je 0x1400098cc
shr eax, 0xa
and eax, 1
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0xf0]
mov eax, ecx
shr eax, 8
mov dword [rsp + 0x1b0], eax
mov rbp, rcx
shr rbp, 0x10
movzx eax, byte [rsp + 0x524]
mov byte [rsp + 0x164], al
mov eax, dword [rsp + 0x520]
mov dword [rsp + 0x160], eax
mov edi, 5
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x62c], eax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x77], al
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x628], eax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x838], rax
mov rax, qword [rsp + 0x788]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x790]
mov qword [rsp + 0x240], rax
mov eax, dword [rsp + 0x60c]
mov dword [rsp + 0x1a0], eax
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x1a8], al
mov eax, ecx
mov byte [rsp + 0x58], cl
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x1cc], eax
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x73], al
mov r15d, dword [rsp + 0x608]
mov rax, qword [rsp + 0x780]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x778]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x798]
mov qword [rsp + 0x600], rax
mov eax, dword [rsp + 0x610]
mov qword [rsp + 0x228], rax
movzx eax, byte [rsp + 0x71]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x614]
mov dword [rsp + 0xe0], eax
mov eax, 0
mov qword [rsp + 0x148], rax
mov eax, 0
mov qword [rsp + 0x150], rax
mov eax, 0
mov qword [rsp + 0xf0], rax
mov eax, 0
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x820], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x818], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x810], rax
mov qword [rsp + 0x808], rbx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x7f8], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x7f0], rax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x624], eax
mov dword [rsp + 0x620], r13d
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x7e8], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x7e0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x7d0], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x61c], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x618], eax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x7c8], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x7b8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x7b0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x7a8], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x7a0], rax
mov rax, qword [rsp + 0x248]
cmp rax, 4
ja case.default.0x140008dad
lea rcx, [0x1401b6074]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x260], 2
jb case.0x140008dad.0
mov rsi, qword [rsp + 0x280]
mov r14, qword [rsp + 0x288]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je case.0x140008dad.0
cmp qword [r14 + 0x10], 0x11
jb 0x140008f56
mov rsi, qword [rsi - 8]
jmp 0x140008f56
cmp qword [rsp + 0x268], 0
je 0x140008e13
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140008e56
mov rsi, qword [rsp + 0x2a8]
mov r14, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008e56
cmp qword [r14 + 0x10], 0x11
jb 0x140008e45
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.140181c70
jmp case.0x140008dad.0
cmp byte [rsp + 0x260], 2
jb 0x140008eab
mov rsi, qword [rsp + 0x280]
mov r14, qword [rsp + 0x288]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008eab
cmp qword [r14 + 0x10], 0x11
jb 0x140008e9a
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x350], 0
je 0x140008ecc
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x368]
mov rcx, qword [0x1402590e0]
xor edx, edx
jmp 0x140008f62
cmp qword [rsp + 0x268], 0
je 0x140008f03
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140008f46
mov rsi, qword [rsp + 0x2a8]
mov r14, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140008f46
cmp qword [r14 + 0x10], 0x11
jb case.default.0x140009348
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x370]
mov rcx, rsi
call fcn.140118920
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x248], rdi
mov rax, qword [rsp + 0x88]
mov dword [rsp + 0x250], eax
mov dword [rsp + 0x254], 0
mov qword [rsp + 0x258], 0
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x260], al
mov eax, dword [rsp + 0x1b0]
mov byte [rsp + 0x261], al
mov dword [rsp + 0x262], ebp
shr rbp, 0x20
mov word [rsp + 0x266], bp
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x158]
mov dword [rsp + 0x280], eax
mov rax, qword [rsp + 0x148]
mov byte [rsp + 0x284], al
mov rax, qword [rsp + 0x150]
mov word [rsp + 0x285], ax
shr eax, 0x10
mov byte [rsp + 0x287], al
movzx eax, byte [rsp + 0x178]
mov byte [rsp + 0x288], al
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x289], al
mov dword [rsp + 0x28a], ebx
shr rbx, 0x20
mov word [rsp + 0x28e], bx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x2a0], rax
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x2a8], eax
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x2ac], al
mov word [rsp + 0x2ad], r13w
shr r13d, 0x10
mov byte [rsp + 0x2af], r13b
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x2c8], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x2d0], eax
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x2d4], al
mov eax, dword [rsp + 0x138]
mov word [rsp + 0x2d5], ax
shr eax, 0x10
mov byte [rsp + 0x2d7], al
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x2e8], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x2f0], rax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x2f8], eax
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x2fc], al
mov word [rsp + 0x2fd], r15w
shr r15d, 0x10
mov byte [rsp + 0x2ff], r15b
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x318], rax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x320], eax
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x324], al
mov ebp, dword [rsp + 0x68]
mov word [rsp + 0x325], bp
shr ebp, 0x10
mov byte [rsp + 0x327], bpl
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x340], rax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x348], eax
mov eax, dword [rsp + 0x78]
mov byte [rsp + 0x34c], al
mov rax, qword [rsp + 0x228]
mov word [rsp + 0x34d], ax
shr eax, 0x10
mov byte [rsp + 0x34f], al
mov rax, qword [rsp + 0x600]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x358], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x370], rax
mov word [rsp + 0x378], 0
mov rax, qword [rsp + 0x1f0]
mov byte [rsp + 0x37a], al
movzx eax, byte [rsp + 0x164]
lea rcx, [rsp + 0x388]
mov byte [rcx - 9], al
mov eax, dword [rsp + 0x160]
mov dword [rcx - 0xd], eax
mov eax, dword [rsp + 0x1cc]
mov dword [rsp + 0x380], eax
movzx eax, byte [rsp + 0x57]
mov byte [rsp + 0x384], al
movzx eax, word [rsp + 0x520]
mov word [rcx - 3], ax
movzx eax, byte [rsp + 0x522]
mov byte [rcx - 1], al
lea rcx, [0x1401b6088]
movsxd rax, dword [rcx + rdi*4]
add rax, rcx
jmp rax
mov rsi, qword [rsp + 0x260]
test rsi, rsi
je 0x1400098da
cmp rsi, 0x2000
mov r9d, 0x2000
cmovb r9, rsi
mov rdx, qword [rsp + 0x250]
mov rax, qword [rsp + 0x258]
lea rcx, [rsp + 0x520]
lea r8, [rsp + 0x900]
call qword [rax + 0x18]
cmp qword [rsp + 0x520], 0
je case.default.0x1400093b9
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x348]
cmp eax, dword [rsp + 0x254]
jne 0x140009526
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ecde0
cmp qword [rsp + 0x520], 0
jne 0x140009560
jmp 0x1400094df
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x14000957d
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400edae0
cmp qword [rsp + 0x520], 0
jne 0x1400095b7
jmp 0x1400094df
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x1400095d4
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ee570
cmp qword [rsp + 0x520], 0
jne 0x14000960e
jmp 0x1400094df
mov eax, dword [rsp + 0x380]
cmp eax, dword [rsp + 0x254]
jne 0x14000962b
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ed6f0
cmp qword [rsp + 0x520], 0
jne 0x140009665
mov rdi, qword [rsp + 0x528]
cmp rdi, 0x2001
jae case.0x140009348.0
add qword [rsp + 0x258], rdi
cmp dword [rsp + 0x250], 0
je 0x1400096da
mov ecx, dword [rsp + 0x254]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.140018c00
jmp 0x1400096f1
movzx ebx, byte [rsp + 0x34c]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ecde0
cmp qword [rsp + 0x520], 0
je case.default.0x14000957b
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400edae0
cmp qword [rsp + 0x520], 0
je case.default.0x1400095d2
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ee570
cmp qword [rsp + 0x520], 0
je case.default.0x140009629
mov rdi, qword [rsp + 0x528]
mov eax, edi
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movzx ebx, byte [rsp + 0x384]
mov r9d, 0x2000
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x260]
lea r8, [rsp + 0x900]
call fcn.1400ed6f0
cmp qword [rsp + 0x520], 0
je case.default.0x140009680
mov rdi, qword [rsp + 0x528]
mov eax, edi
add eax, 0xf8890000
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x140009795.2
mov rsi, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400096bc
cmp qword [rbx + 0x10], 0x11
jb 0x1400096ab
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
dec rdi
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov ecx, 0x2000
jmp 0x140007934
mov ecx, dword [rsp + 0x254]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.1400187b0
mov dword [rsp + 0x254], eax
jmp 0x140009720
mov rdi, qword [rsp + 0x528]
sub rsi, rdi
jb case.0x140009348.0
mov qword [rsp + 0x260], rsi
cmp rdi, 0x2001
jae case.0x140009348.0
test rdi, rdi
je 0x1400098da
lea rcx, [rsp + 0x860]
lea rdx, [rsp + 0x900]
mov r8, rdi
call fcn.14009baa0
mov ecx, 0x2000
test rax, rax
je 0x140007934
jmp case.0x140009795.2
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094e7
test rdi, rdi
jne 0x1400094e7
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400eddf0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094e7
test rdi, rdi
jne 0x1400094e7
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400eddf0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094e7
test rdi, rdi
jne 0x1400094e7
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400eddf0
mov rdi, rax
and eax, 3
lea rcx, [0x1401b60a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rdi, qword [rsp + 0x528]
test bl, bl
jne 0x1400094e7
test rdi, rdi
jne 0x1400094e7
mov r8d, 0x10
mov cl, 0x27
lea rdx, str.Invalid_checksumdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_framefailed_to_fill_whole_buffer
call fcn.1400eddf0
invalid
add byte [rax - 0x77], cl
mov dword [rbx - 0x72b7fc20], 0x1ac8490d
add byte [rax + 0x63], cl
add al, 0x81
add rax, rcx
jmp rax
invalid
shr rdi, 0x20
mov ecx, 0x2000
cmp edi, 0x23
je 0x140007934
jmp case.0x140009795.2
call fcn.140094430
jmp 0x140007cd6
call fcn.140094430
xor ecx, ecx
mov qword [rsp + 0x88], rcx
test al, 2
jne 0x140007ea4
jmp 0x140007ec5
call fcn.140094430
jmp 0x1400080d9
call fcn.140094430
jmp 0x140008a6a
call fcn.140094430
jmp 0x140007cfc
call fcn.140094430
jmp 0x140007eb7
cmc
in eax, 0xff
invalid
cmc
in eax, 0xff
invalid
call fcn.140094430
jmp 0x140008107
call fcn.140094430
jmp 0x140008a98
xor esi, esi
jmp 0x1400098dd
mov sil, 1
lea rax, [0x1401aefb9]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rdx, 0x22220698ec6cb87c
mov qword [rsp + 0x900], rdx
mov rdx, qword [rsp + 0x900]
call fcn.1400953f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
test sil, sil
je case.0x140009348.0
mov rcx, qword [rsp + 0x860]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x858], 0
je 0x140009960
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, qword [rsp + 0x5f8]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x230]
cmp qword [rsp + 0x388], rax
je 0x140009d8f
mov r8d, 0x10000
lea rcx, [rsp + 0x900]
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x248]
test rax, rax
je 0x140009a09
movzx r12d, byte [rsp + 0x260]
mov rdi, qword [rsp + 0x280]
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x88
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
invalid
add byte [rbx + rcx*4 - 0x44], cl
and al, 0x88
add al, byte [rax]
add byte [rax - 0x39], cl
test byte [rax + rcx*2], ah
add al, byte [rax]
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
enter 0xffffffffffff8d48, 0xd
lea rcx, [0x1401b60b0]
invalid
lea rcx, [0x1401b60b0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movdqu xmm7, xmmword [rsp + 0x250]
movzx eax, byte [rsp + 0x267]
shl eax, 0x10
movzx ecx, word [rsp + 0x265]
or ecx, eax
mov r14d, dword [rsp + 0x261]
shl rcx, 0x28
shl r14, 8
or r14, rcx
or r14, r12
jmp 0x140009c9f
movzx eax, byte [rsp + 0x438]
mov rsi, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x460]
mov byte [rsp + 0x438], 3
cmp al, 3
je case.0x140009348.0
movdqu xmm7, xmmword [rsp + 0x440]
mov r14, qword [rsp + 0x450]
cmp al, 2
jb 0x140009c9f
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
add byte [rdi], cl
test byte [rbp + 2], al
add byte [rax], al
add byte [rdi], cl
test byte [rbp + 2], al
add byte [rax], al
cmp qword [rdi + 0x10], 0x11
jb 0x140009a65
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
mov ecx, dword [0x1402590e0]
add byte [rcx], dh
ror byte [rcx - 0x77], cl
invalid
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
jmp 0x140009c9f
movdqu xmm7, xmmword [rsp + 0x268]
mov r14, qword [rsp + 0x278]
jmp 0x140009adb
mov esp, 0x26824
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x78
add al, byte [rax]
add bl, ch
movdqu xmm7, xmmword [rsp + 0x268]
mov r14, qword [rsp + 0x278]
mov rsi, qword [rsp + 0x348]
mov r8, qword [rsp + 0x368]
mov rbx, qword [rsp + 0x350]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test rbx, rbx
je 0x140009adb
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp r12b, 2
jb 0x140009c9f
mov rcx, rdi
call qword [r15]
cmp qword [r15 + 8], 0
add byte [rdi], cl
invalid
invalid
add dword [rax], eax
invalid
add byte [rdi], cl
test byte [rcx + 0x49000001], ch
cmp dword [rdi + 0x10], 0x11
cmp qword [r15 + 0x10], 0x11
jb 0x140009b01
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rdi
add byte [rcx], dh
ror byte [rcx - 0x77], cl
clc
call sub.KERNEL32.dll_HeapFree
jmp 0x140009c9f
jb 0x140009be6
mov rax, qword [rsp + 0x58]
mov rax, qword [rax - 8]
mov qword [rsp + 0x58], rax
mov rcx, qword [0x1402590e0]
xor edx, edx
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x58
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x58
call sub.KERNEL32.dll_HeapFree
jmp 0x140009c9f
movq rsi, xmm7
pshufd xmm0, xmm7, 0xee
movq rdi, xmm0
test r14, r14
je 0x140009cff
cmp r14, 0x10000
mov r9d, 0x10000
cmovb r9, r14
lea rcx, [rsp + 0x520]
mov rdx, rsi
lea r8, [rsp + 0x900]
call qword [rdi + 0x18]
cmp qword [rsp + 0x520], 0
jne case.0x140009348.0
mov rax, qword [rsp + 0x528]
sub r14, rax
jb case.0x140009348.0
test rax, rax
jne 0x140009cae
mov rax, qword [rsp + 0x388]
cmp rax, qword [rsp + 0x230]
je 0x140009d8f
test rax, rax
je 0x140009d2c
mov r8, qword [rsp + 0x390]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3a0], 0
je 0x140009d4d
mov r8, qword [rsp + 0x3a8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3b8], 0
je 0x140009d6e
mov r8, qword [rsp + 0x3c0]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x3d0], 0
je 0x140009d8f
mov r8, qword [rsp + 0x3d8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [rsp + 0x438]
cmp al, 3
je 0x140009dd7
cmp al, 2
jb 0x140009dd7
mov rsi, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x460]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009dd7
cmp qword [rdi + 0x10], 0x11
jb 0x140009dc6
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
invalid
call sub.KERNEL32.dll_HeapFree
invalid
mov rax, qword [rsp + 0x248]
cmp rax, 4
ja case.default.0x140009df3
lea rcx, [0x1401b60c4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x260], 2
jb case.0x140009df3.0
mov rsi, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x288]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je case.0x140009df3.0
cmp qword [rdi + 0x10], 0x11
jb 0x140009e2e
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
jmp 0x140009f90
cmp qword [rsp + 0x268], 0
je 0x140009e60
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
add byte [rdx], al
jb 0x140007295
mov rsi, qword [rsp + 0x2a8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140007295
cmp qword [rdi + 0x10], 0x11
jb 0x140007284
mov rsi, qword [rsi - 8]
jmp 0x140007284
cmp byte [rsp + 0x260], 2
jb 0x140009ee4
mov rsi, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x288]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009ee4
cmp qword [rdi + 0x10], 0x11
jb case.0x140009348.19
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x350], 0
add byte [rax], al
je 0x140009f05
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x368]
jmp 0x140009f87
cmp qword [rsp + 0x268], 0
je 0x140009f30
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x288], 2
jb 0x140009f72
mov rsi, qword [rsp + 0x2a8]
mov rdi, qword [rsp + 0x2b0]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140009f72
cmp qword [rdi + 0x10], 0x11
jb 0x140009f61
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x370]
call fcn.140118920
mov r8, qword [rsp + 0x370]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x140009df3.0
mov esi, 1
mov eax, 0x19
mov qword [rsp + 0x170], rax
mov ecx, 0x19
lea rax, str.Invalid_local_file_headerInvalid_Central_Directory_headerAES_encryption_without_AES_extra_data_fieldArchive_header_is_too_largeCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_endWQLIWbemClassWrapper
mov qword [rsp + 0x140], rax
jmp 0x1400074dd
cmp byte [rdi + rbx + 0xa5], 2
jne case.0x140009348.0
add rdi, rbx
mov eax, dword [rsp + 0x860]
mov ecx, dword [rsp + 0x863]
mov dword [rsp + 0x163], ecx
mov dword [rsp + 0x160], eax
mov r8d, 0xc8
lea rcx, [rsp + 0x520]
lea rsi, [rsp + 0x900]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov r8d, 0xa0
lea rcx, [rsp + 0x860]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
xor ebx, ebx
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x770], rax
mov qword [rsp + 0x768], rdi
xor edi, edi
jmp 0x1400074f4
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x14000624d
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x140006252
jmp 0x14000625a
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x14000669a
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x14000669f
jmp 0x1400066a7
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x14000689a
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x14000689f
jmp 0x1400068a7
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x140006c01
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
test rsi, rsi
jne 0x140006c06
jmp 0x140006c0e
lea rax, [0x1401afe54]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0xd9b68d893a7a06cf
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.1400948b0
movabs rcx, 0x9a24521eeb9463e
xor rcx, qword [rax]
movabs rdx, 0x41af2d7b61cef1e2
xor rdx, qword [rax + 8]
movabs r8, 0x1a171e7b2403f01b
xor r8, qword [rax + 0x10]
mov r9d, 0xc2d85077
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x9c
xor r11b, 0x57
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0xc
mov qword [rsp + 0x248], rcx
mov qword [rsp + 0x250], rdx
mov qword [rsp + 0x258], r8
mov dword [rsp + 0x260], r9d
mov word [rsp + 0x264], r11w
mov byte [rsp + 0x266], r10b
lea rcx, [rsp + 0x248]
call fcn.14009b810
mov rdi, rax
mov rsi, rdx
lea rax, [0x1401bd3ef]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x3a2ebeaaeb52f3b7
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095220
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
test rdi, rdi
jne case.0x140009348.0
mov qword [rsp + 0x520], rsi
lea rcx, [rsp + 0x908]
call fcn.1400b6a90
mov rsi, rax
mov rdi, rdx
lea rcx, [rsp + 0x248]
lea r9, [rsp + 0x520]
mov rdx, rax
mov r8, rdi
call fcn.14009dca0
lea rax, [0x1401af430]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rcx, qword [rsp + 0x630]
movabs rax, 0x493a29a424326462
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x630]
mov rdx, qword [rsp + 0x630]
call fcn.140095130
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
cmp qword [rsp + 0x248], 0
jne case.0x140009348.0
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14000a2eb
cmp qword [rdi + 0x10], 0x11
jb 0x14000a2da
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x520]
call sub.KERNEL32.dll_CloseHandle
jmp 0x14000a410
lea rax, [0x1401bc3f3]
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rcx, qword [rsp + 0x248]
movabs rax, 0x46651257dcdeb890
mov qword [rsp + 0x248], rax
lea rax, [rsp + 0x248]
mov rdx, qword [rsp + 0x248]
call fcn.1400952d0
movq xmm0, qword [rax]
movq xmm1, qword [rax + 8]
punpcklqdq xmm0, xmm1
pxor xmm0, xmmword [0x1401b6040]
movq xmm1, qword [rax + 0x10]
movq xmm2, qword [rax + 0x18]
punpcklqdq xmm1, xmm2
pxor xmm1, xmmword [0x1401b6050]
movdqu xmmword [rsp + 0x630], xmm0
movdqu xmmword [rsp + 0x640], xmm1
mov qword [rsp + 0x520], rdi
mov qword [rsp + 0x528], 0x20
lea rax, [rsp + 0x520]
mov qword [rsp + 0x860], rax
lea rax, [0x1400c33b0]
mov qword [rsp + 0x868], rax
lea rax, [0x1401dbbf8]
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], 2
mov qword [rsp + 0x268], 0
lea rax, [rsp + 0x860]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], 1
lea rcx, [rsp + 0x248]
call fcn.140081090
lea rcx, [rsp + 0x900]
call fcn.140001d70
lea rax, [0x1401b7634]
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rcx, qword [rsp + 0x900]
movabs rax, 0xf7381ebd226acc16
mov qword [rsp + 0x900], rax
lea rax, [rsp + 0x900]
mov rdx, qword [rsp + 0x900]
call fcn.140095670
mov ecx, 0x238827e2
xor ecx, dword [rax]
mov dword [rsp + 0x900], ecx
lea rcx, [rsp + 0x900]
call fcn.14000a480
call fcn.14000abf0
int3