Function at 0x1400409e0
Capabilities:
Encrypt data using speck

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2b8
movdqa xmmword [rsp + 0x2a0], xmm15
movdqa xmmword [rsp + 0x290], xmm14
movdqa xmmword [rsp + 0x280], xmm13
movdqa xmmword [rsp + 0x270], xmm12
movdqa xmmword [rsp + 0x260], xmm11
movdqa xmmword [rsp + 0x250], xmm10
movdqa xmmword [rsp + 0x240], xmm9
movaps xmmword [rsp + 0x230], xmm8
movdqa xmmword [rsp + 0x220], xmm7
movdqa xmmword [rsp + 0x210], xmm6
mov qword [rsp + 0x1f0], rcx
mov rax, qword [rsp + 0x328]
mov rcx, qword [rsp + 0x320]
mov qword [rsp + 0x110], r9
mov qword [rcx + 0x10], 0
mov dword [rsp + 0xf0], 0
mov qword [rsp + 0xe8], 0
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x1e8], rax
add r8, rdx
pxor xmm6, xmm6
movdqu xmmword [rsp + 0x132], xmm6
movzx eax, word [rsp + 0x140]
mov word [rsp + 0xce], ax
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0xbe], xmm0
movdqu xmmword [rsp + 0x11b], xmm6
mov byte [rsp + 0x12b], 0
mov qword [rsp + 0x38], 0
lea r12, [rsp + 0x48]
mov dword [rsp + 0x48], 0
mov word [rsp + 0x4c], 0
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x54], 0
mov byte [rsp + 0x58], 0
mov dword [rsp + 0x5c], 0
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x64], 0
mov byte [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], r8
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 0
mov rax, r9
shr rax, 0x20
mov byte [rsp + 0x9c], al
mov qword [rsp + 0x190], r9
mov dword [rsp + 0x98], r9d
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0xad], eax
movdqu xmm0, xmmword [rsp + 0x118]
movdqu xmmword [rsp + 0x9d], xmm0
mov dword [rsp + 0xb8], 0
mov word [rsp + 0xbc], 0
mov dword [rsp + 0xd8], 0x110000
mov byte [rsp + 0xdc], 0
lea r15, [0x1401b9e80]
lea rdi, [0x1401bd950]
xor eax, eax
test rax, rax
je 0x140040cae
cmp rax, 1
jne 0x1400416ae
mov rax, qword [rsp + 0x40]
cmp dword [rsp + 0xb8], 0
je 0x140040c0b
cmp rax, qword [rsp + 0xd0]
jb 0x1400416d2
mov qword [rsp + 0xd0], 0
jmp 0x140040c3b
movzx ecx, word [rsp + 0xbc]
cmp rcx, 4
ja case.0x140040f65.1
cmp rax, rcx
jb 0x140041712
cmp word [rsp + 0xbc], 0
je 0x140040c3b
mov word [rsp + 0xbc], 0
mov qword [rsp + 0x38], 0
jmp 0x140040cae
movzx ebx, bp
imul esi, ebx, 0x6f75
shr esi, 0x18
lea edx, [rsi + 0x1100]
mov rcx, r12
call fcn.140044340
imul eax, esi, 0x24c
sub ebp, eax
movzx eax, bp
imul edx, eax, 0x925
shr edx, 0x10
add edx, 0x1161
mov rcx, r12
call fcn.140044340
mov eax, ebx
shr eax, 2
imul eax, eax, 0x4925
shr eax, 0x11
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
add ecx, eax
sub bx, cx
je 0x140040cae
add ebx, 0x11a7
movzx edx, bx
mov rcx, r12
call fcn.140044340
mov rdx, qword [rsp + 0xa8]
test rdx, rdx
jne 0x140041010
movzx ecx, byte [rsp + 0x98]
cmp cl, 2
je 0x140041462
mov rbx, qword [rsp + 0x88]
mov r10, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rax, qword [rsp + 0x80]
movzx r9d, byte [rsp + 0x99]
mov r11, qword [rsp + 0x90]
test rbx, rbx
je 0x140040da6
cmp rbx, r11
je 0x140040d9a
lea rdx, [rbx + 1]
mov qword [rsp + 0x88], rdx
movzx edx, byte [rbx]
test dl, dl
jns 0x1400412c6
mov ebp, edx
and ebp, 0x1f
lea r14, [rbx + 2]
mov qword [rsp + 0x88], r14
movzx r13d, byte [rbx + 1]
and r13d, 0x3f
cmp dl, 0xdf
jbe 0x1400415aa
lea r14, [rbx + 3]
mov qword [rsp + 0x88], r14
movzx r14d, byte [rbx + 2]
shl r13d, 6
and r14d, 0x3f
or r14d, r13d
cmp dl, 0xf0
jb 0x1400415b7
lea rdx, [rbx + 4]
mov qword [rsp + 0x88], rdx
movzx edx, byte [rbx + 3]
and ebp, 7
shl ebp, 0x12
shl r14d, 6
and edx, 0x3f
or edx, r14d
or edx, ebp
cmp edx, 0x110000
jne case.0x140040f65.0
mov qword [rsp + 0x88], 0
cmp r10, r8
je 0x14004145a
lea rdx, [r10 + 1]
mov qword [rsp + 0x70], rdx
movzx ebx, byte [r10]
test bl, bl
js 0x140040de0
mov r10, rdx
mov edx, ebx
lea ebx, [rdx - 0x2d]
cmp ebx, 2
jae 0x140040e80
jmp 0x1400412c6
mov edx, ebx
and edx, 0x1f
lea r13, [r10 + 2]
mov qword [rsp + 0x70], r13
movzx r14d, byte [r10 + 1]
and r14d, 0x3f
cmp bl, 0xdf
jbe 0x140040e4d
lea r13, [r10 + 3]
mov qword [rsp + 0x70], r13
movzx ebp, byte [r10 + 2]
shl r14d, 6
and ebp, 0x3f
or ebp, r14d
cmp bl, 0xf0
jb 0x140040e63
lea rbx, [r10 + 4]
mov qword [rsp + 0x70], rbx
movzx r14d, byte [r10 + 3]
and edx, 7
shl edx, 0x12
shl ebp, 6
and r14d, 0x3f
or r14d, ebp
or r14d, edx
mov r10, rbx
mov edx, r14d
lea ebx, [rdx - 0x2d]
cmp ebx, 2
jae 0x140040e80
jmp 0x1400412c6
shl edx, 6
or edx, r14d
mov r10, r13
lea ebx, [rdx - 0x2d]
cmp ebx, 2
jae 0x140040e80
jmp 0x1400412c6
shl edx, 0xc
or ebp, edx
mov r10, r13
mov edx, ebp
lea ebx, [rdx - 0x2d]
cmp ebx, 2
jb 0x1400412c6
nop dword [rax]
cmp edx, 0x110000
je 0x14004145a
lea ebx, [rdx - 0x61]
cmp ebx, 0x1a
jb 0x1400412c6
lea ebx, [rdx - 0x30]
cmp ebx, 0xa
jb 0x1400412c6
mov ebx, 0x75a
xor r14d, r14d
mov ebp, 0x75a
nop word cs:[rax + rax]
shr rbx, 1
add rbx, r14
mov r13d, dword [r15 + rbx*8]
cmp r13d, edx
je 0x140040ef9
lea rsi, [rbx + 1]
cmp r13d, edx
cmova rbp, rbx
cmovb r14, rsi
mov rbx, rbp
sub rbx, r14
ja 0x140040ec0
dec r14
mov rbx, r14
cmp r14, 0x759
ja case.0x140040f65.1
movzx esi, word [r15 + rbx*8 + 4]
mov ebp, esi
and ebp, 0x7fff
movzx r14d, bp
test si, si
js 0x140040f30
movzx esi, word [r15 + rbx*8]
mov ebp, edx
sub bp, si
add ebp, r14d
movzx esi, bp
cmp esi, 0x1f73
jb 0x140040f3d
jmp case.0x140040f65.1
cmp r14d, 0x1f73
jae case.0x140040f65.1
movzx r14d, bp
movzx ebp, byte [rdi + r14*4]
mov ebx, 0
cmp ebp, 1
je case.default.0x140040f65
mov r11d, ebp
lea rsi, [0x140198a80]
movsxd r11, dword [rsi + r11*4]
add r11, rsi
jmp r11
mov ecx, dword [rsp + 0x48]
lea rsi, [rsp + 0x50]
mov rax, qword [rsp + 0xa0]
test ecx, ecx
je 0x140041031
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
jmp 0x140041044
movzx r9d, word [rsp + 0x4c]
mov r8, rsi
cmp r9, 5
jae case.0x140040f65.1
cmp rax, r9
jae case.0x140040f65.1
mov r14d, dword [r8 + rax*8 + 4]
inc rax
cmp rax, rdx
jne 0x140041110
test ecx, ecx
je 0x14004111a
mov rax, qword [rsp + 0x60]
sub rax, rdx
je 0x140041128
xor ecx, ecx
nop word cs:[rax + rax]
mov rdx, qword [rsp + 0xa8]
add rdx, rcx
cmp dword [rsp + 0x48], 0
je 0x1400410b0
mov r8, qword [rsp + 0x60]
cmp rdx, r8
jae case.0x140040f65.1
mov r9, qword [rsp + 0x58]
jmp 0x1400410cc
movzx r8d, word [rsp + 0x4c]
cmp r8, 5
jae case.0x140040f65.1
mov r9, rsi
cmp rdx, r8
jae case.0x140040f65.1
cmp rcx, r8
jae case.0x140040f65.1
movzx r8d, byte [r9 + rdx*8]
mov edx, dword [r9 + rdx*8 + 4]
mov byte [r9 + rcx*8], r8b
mov dword [r9 + rcx*8 + 4], edx
lea rdx, [rcx + 1]
mov rcx, rdx
cmp rax, rdx
jne 0x140041080
mov ecx, dword [rsp + 0x48]
test ecx, ecx
jne 0x14004112c
movzx ecx, word [rsp + 0x4c]
cmp rax, rcx
jae 0x140041138
mov word [rsp + 0x4c], ax
jmp 0x140041138
mov qword [rsp + 0xa0], rax
jmp 0x14004113f
movzx eax, word [rsp + 0x4c]
sub rax, rdx
jne 0x140041074
test ecx, ecx
je 0x1400410fc
cmp qword [rsp + 0x60], rax
jb 0x140041138
mov qword [rsp + 0x60], rax
movdqu xmmword [r12 + 0x58], xmm6
imul eax, r14d, 0x9e3779b9
imul ecx, r14d, 0x31415926
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1f
and eax, 0xfffffffe
lea rdx, [0x1401d334c]
movzx eax, word [rax + rdx]
add eax, r14d
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x39a
shr rax, 0x1e
and eax, 0xfffffffc
lea rcx, [0x1401d3a80]
mov ebp, dword [rax + rcx]
mov eax, ebp
shr eax, 8
cmp eax, r14d
mov eax, 0
cmovne ebp, eax
mov ebx, dword [rsp + 0xd8]
cmp ebx, 0x110000
jne 0x1400411c0
test bpl, bpl
jne 0x140041630
mov dword [rsp + 0xd8], r14d
jmp 0x140040cae
cmp byte [rsp + 0xdc], 0
je 0x1400411f1
cmp byte [rsp + 0xdd], bpl
jae 0x140041210
mov ecx, ebx
mov edx, r14d
call fcn.140104b70
cmp eax, 0x110000
je 0x140041219
mov dword [rsp + 0xd8], eax
jmp 0x140040cae
mov ecx, ebx
mov edx, r14d
call fcn.140104b70
cmp eax, 0x110000
jne 0x1400414f0
test bpl, bpl
jne 0x140041219
jmp 0x1400416a1
test bpl, bpl
je 0x14004167a
cmp dword [rsp + 0xb8], 0
je 0x140041260
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc0]
jne 0x14004124a
lea rcx, [rsp + 0xc0]
call fcn.14010ffa0
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov dword [rax + rdx*4], r14d
inc qword [rsp + 0xd0]
jmp 0x140041284
movzx eax, word [rsp + 0xbc]
cmp rax, 3
ja 0x1400415c5
mov dword [rsp + rax*4 + 0xc0], r14d
inc eax
mov word [rsp + 0xbc], ax
mov byte [rsp + 0xdc], 1
mov byte [rsp + 0xdd], bpl
jmp 0x140040cae
cmp edx, 0x110000
je 0x14004145a
cmp byte [rsp + 0xb0], 0
je 0x14004138e
cmp edx, 0x80
jb 0x140040ca6
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x140040c46
imul ecx, edx, 0x9e3779b9
imul eax, edx, 0x31415926
xor ecx, eax
imul r8, rcx, 0xee4
shr r8, 0x1f
and r8d, 0xfffffffe
lea r9, [0x1401df2e4]
movzx r8d, word [r8 + r9]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, eax
imul r8, r8, 0xee4
shr r8, 0x1d
and r8d, 0xfffffff8
lea r9, [0x1401e10ac]
mov rbx, qword [r8 + r9]
cmp edx, ebx
jne 0x1400414fc
mov rax, rbx
shr rax, 0x20
movzx eax, ax
cmp rax, 0x1668
jae case.0x140040f65.1
shr rbx, 0x30
mov ecx, 0x1667
sub rcx, rax
cmp rbx, rcx
ja case.0x140040f65.1
lea rcx, [0x1401e87cc]
lea r14, [rcx + rax*4]
test rbx, rbx
jne 0x14004157a
jmp 0x140040cae
cmp edx, 0x80
jb 0x140040ca6
lea ebp, [rdx - 0xac00]
cmp ebp, 0x2ba4
jb 0x140040c46
imul eax, edx, 0x9e3779b9
imul ecx, edx, 0x31415926
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea r8, [0x1401d6d28]
movzx eax, word [r8 + rax*2]
add eax, edx
imul eax, eax, 0x9e3779b9
xor eax, ecx
imul rax, rax, 0x80d
shr rax, 0x20
lea rcx, [0x1401d7d44]
mov rbx, qword [rcx + rax*8]
cmp edx, ebx
jne 0x140040ca6
mov rax, rbx
shr rax, 0x20
movzx eax, ax
cmp rax, 0xd4f
jae case.0x140040f65.1
shr rbx, 0x30
mov ecx, 0xd4e
sub rcx, rax
cmp rbx, rcx
ja case.0x140040f65.1
test rbx, rbx
je 0x140040cae
lea rcx, [0x1401dbdac]
lea r14, [rcx + rax*4]
shl rbx, 2
xor r13d, r13d
nop
mov edx, dword [r14 + r13]
mov rcx, r12
call fcn.140044340
add r13, 4
cmp rbx, r13
jne 0x140041440
jmp 0x140040cae
mov byte [rsp + 0x98], 2
mov r8d, dword [rsp + 0x48]
test r8d, r8d
mov rcx, qword [rsp + 0x60]
movzx edx, word [rsp + 0x4c]
mov rax, rcx
cmove rax, rdx
test rax, rax
je 0x140041640
mov rax, qword [rsp + 0xa8]
test r8d, r8d
je 0x1400414a0
mov r8, qword [rsp + 0x58]
mov rdx, rcx
lea rsi, [rsp + 0x50]
jmp 0x1400414b2
lea rsi, [rsp + 0x50]
mov r8, rsi
cmp dx, 5
jae case.0x140040f65.1
sub rdx, rax
jb case.0x140040f65.1
lea rcx, [r8 + rax*8]
call fcn.1400401b0
mov ecx, dword [rsp + 0x48]
test ecx, ecx
je 0x1400414de
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0xa8], rdx
jmp 0x140041019
movzx edx, word [rsp + 0x4c]
mov qword [rsp + 0xa8], rdx
jmp 0x140041019
mov dword [rsp + 0xd8], eax
jmp 0x140040cae
imul rcx, rcx, 0x80d
shr rcx, 0x20
lea r8, [0x1401d6d28]
movzx ecx, word [r8 + rcx*2]
add ecx, edx
imul ecx, ecx, 0x9e3779b9
xor ecx, eax
imul rax, rcx, 0x80d
shr rax, 0x20
lea rcx, [0x1401d7d44]
mov rbx, qword [rcx + rax*8]
cmp edx, ebx
jne 0x140040ca6
mov rax, rbx
shr rax, 0x20
movzx eax, ax
cmp rax, 0xd4f
jae case.0x140040f65.1
shr rbx, 0x30
mov ecx, 0xd4e
sub rcx, rax
cmp rbx, rcx
ja case.0x140040f65.1
lea rcx, [0x1401dbdac]
lea r14, [rcx + rax*4]
test rbx, rbx
je 0x140040cae
shl rbx, 2
xor r13d, r13d
nop word cs:[rax + rax]
mov edx, dword [r14 + r13]
mov rcx, r12
call fcn.140044340
add r13, 4
cmp rbx, r13
jne 0x140041590
jmp 0x140040cae
shl ebp, 6
or ebp, r13d
mov edx, ebp
jmp 0x1400412c6
shl ebp, 0xc
or r14d, ebp
mov edx, r14d
jmp 0x1400412c6
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0xbc]
mov r8d, r14d
call fcn.140045030
cmp dword [rsp + 0xb8], 0
je 0x140041608
cmp qword [rsp + 0xc0], 0
je 0x140041608
mov r8, qword [rsp + 0xc8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
movdqu xmm0, xmmword [rsp + 0x130]
movdqu xmm1, xmmword [rsp + 0x140]
movdqu xmmword [r12 + 0x80], xmm1
movdqu xmmword [r12 + 0x70], xmm0
jmp 0x140041284
mov ebx, r14d
jmp 0x140041780
mov qword [rsp + 0x38], 2
mov qword [rsp + 0x40], 0
mov ebx, dword [rsp + 0xd8]
mov eax, 2
cmp ebx, 0x110000
je 0x140040bcd
mov dword [rsp + 0xd8], 0x110000
jmp 0x140041780
mov dword [rsp + 0xd8], r14d
mov byte [rsp + 0xdc], 0
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], 0
jmp 0x140041780
mov dword [rsp + 0xd8], r14d
jmp 0x140041780
mov rcx, qword [rsp + 0x40]
mov eax, dword [rsp + 0xb8]
test eax, eax
je 0x1400416dc
cmp rcx, qword [rsp + 0xd0]
jae 0x140041730
mov rdx, qword [rsp + 0xc8]
jmp 0x1400416fc
mov rcx, qword [rsp + 0xc8]
jmp 0x14004171a
movzx r8d, word [rsp + 0xbc]
cmp r8, 5
jae case.0x140040f65.1
lea rdx, [rsp + 0xc0]
cmp rcx, r8
jae 0x14004173e
mov ebx, dword [rdx + rcx*4]
inc rcx
mov qword [rsp + 0x38], 2
mov qword [rsp + 0x40], rcx
jmp 0x140041780
lea rcx, [rsp + 0xc0]
mov ebx, dword [rcx + rax*4]
inc rax
mov qword [rsp + 0x38], 1
mov qword [rsp + 0x40], rax
jmp 0x140041780
mov qword [rsp + 0xd0], 0
jmp 0x140041753
cmp word [rsp + 0xbc], 0
je 0x140041753
mov word [rsp + 0xbc], 0
mov ebx, dword [rsp + 0xd8]
mov dword [rsp + 0xd8], 0x110000
cmp ebx, 0x110000
je 0x1400418ce
nop word cs:[rax + rax]
cmp ebx, 0x80
jae 0x1400417c0
mov rsi, qword [rsp + 0x320]
mov rdx, qword [rsi + 0x10]
cmp rdx, qword [rsi]
jne 0x1400417a5
mov rcx, rsi
call fcn.14002d1d0
mov rdx, qword [rsi + 0x10]
mov rax, qword [rsi + 8]
mov byte [rax + rdx], bl
inc rdx
mov qword [rsi + 0x10], rdx
mov rax, qword [rsp + 0x38]
jmp 0x140040bcd
mov dword [rsp + 0x130], 0
mov eax, ebx
cmp ebx, 0x800
jae 0x1400417f5
shr eax, 6
or al, 0xc0
mov byte [rsp + 0x130], al
and bl, 0x3f
or bl, 0x80
mov byte [rsp + 0x131], bl
mov ebx, 2
jmp 0x14004186b
cmp ebx, 0x10000
jae 0x14004182d
shr eax, 0xc
or al, 0xe0
mov byte [rsp + 0x130], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x131], al
and bl, 0x3f
or bl, 0x80
mov byte [rsp + 0x132], bl
mov ebx, 3
jmp 0x14004186b
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x130], al
mov eax, ebx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x131], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x132], al
and bl, 0x3f
or bl, 0x80
mov byte [rsp + 0x133], bl
mov ebx, 4
mov rcx, qword [rsp + 0x320]
mov rax, qword [rcx]
mov r14, qword [rcx + 0x10]
sub rax, r14
cmp rax, rbx
jb 0x1400418b2
mov rsi, qword [rsp + 0x320]
mov rcx, qword [rsi + 8]
add rcx, r14
lea rdx, [rsp + 0x130]
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r14, rbx
mov qword [rsi + 0x10], r14
mov rax, qword [rsp + 0x38]
jmp 0x140040bcd
mov rsi, qword [rsp + 0x320]
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call fcn.140110050
mov r14, qword [rsi + 0x10]
jmp 0x140041882
cmp dword [rsp + 0x48], 0
je 0x140041911
cmp qword [rsp + 0x50], 0
mov r14, qword [rsp + 0x328]
mov r15, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x320]
je 0x140041929
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov eax, dword [rsp + 0xb8]
jmp 0x140041929
mov r14, qword [rsp + 0x328]
mov r15, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x320]
test eax, eax
je 0x14004194e
cmp qword [rsp + 0xc0], 0
je 0x14004194e
mov r8, qword [rsp + 0xc8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], 8
mov qword [rsp + 0x128], 0
mov rax, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x130], 0
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rcx
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x160], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x168], rax
mov word [rsp + 0x170], 1
and qword [rsp + 0x190], 0xffffffffffff00ff
mov dil, 1
lea r12, [rsp + 0x130]
lea r13, [0x1401cef84]
movdqa xmm6, xmmword [0x140198580]
movdqa xmm7, xmmword [0x140198590]
xorps xmm8, xmm8
movdqa xmm14, xmmword [0x1401985f0]
movdqa xmm15, xmmword [0x140198600]
movdqa xmm9, xmmword [0x140198610]
movdqa xmm10, xmmword [0x140198620]
movdqa xmm12, xmmword [0x140198640]
movdqa xmm13, xmmword [0x140198650]
movdqa xmm11, xmmword [0x140198660]
mov dword [rsp + 0x24], 0
jmp 0x140041aa1
mov dword [rsp + 0x24], 0
mov rcx, rsi
mov rdx, rbp
mov r8, r15
lea r9, [rsp + 0xe8]
call fcn.1400440c0
mov rax, qword [r14]
mov rbx, qword [r14 + 0x10]
sub rax, rbx
cmp rax, rbp
jb 0x1400420c6
mov rcx, qword [r14 + 8]
add rcx, rbx
mov rdx, rsi
mov r8, rbp
call sub.msvcrt.dll_memcpy
add rbp, rbx
mov qword [r14 + 0x10], rbp
xor edi, edi
mov rcx, r12
call fcn.140043e70
test rax, rax
je 0x140043506
mov rsi, rax
mov rbp, rdx
test dil, 1
jne 0x140041ae2
mov rdx, qword [r14 + 0x10]
cmp rdx, qword [r14]
jne 0x140041ad3
mov rcx, r14
call fcn.14002d1d0
mov rdx, qword [r14 + 0x10]
mov rax, qword [r14 + 8]
mov byte [rax + rdx], 0x2e
inc rdx
mov qword [r14 + 0x10], rdx
cmp rbp, 4
jb 0x140041af4
cmp dword [rsi], 0x2d2d6e78
je 0x140041c2a
test byte [rsp + 0x24], 1
jne 0x140041a5d
test rbp, rbp
je 0x140041a55
mov rax, rsi
add rax, rbp
mov rcx, rsi
jmp 0x140041b1c
cmp rcx, rax
je 0x140041a55
movzx edx, byte [rcx]
test dl, dl
js 0x140041b28
inc rcx
jmp 0x140041b9b
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140041b7d
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x140041b8d
movzx edx, byte [rcx + 3]
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0x110000
je 0x140041a55
add rcx, 4
jmp 0x140041b9b
add rcx, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x140041b9b
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x140041b13
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x140041bd3
cmp r11d, edx
cmova r9, r8
mov r8, r9
sub r8, r10
jbe 0x140041b13
shr r8, 1
add r8, r10
lea rdi, [r8 + r8*2]
mov r11d, dword [r13 + rdi*4]
mov ebx, dword [r13 + rdi*4 + 4]
cmp ebx, edx
jb 0x140041bf0
cmp r11d, edx
jbe 0x140041bff
cmp ebx, edx
jae 0x140041bc0
mov r10, r8
inc r10
mov r8, r9
jmp 0x140041bc0
movzx edx, byte [r13 + rdi*4 + 8]
cmp rdx, 0x11
ja 0x140041b13
mov r8d, 0x20003
bt r8, rdx
jae 0x140041b13
mov al, 1
mov dword [rsp + 0x24], eax
jmp 0x140041a5d
lea r15, [rsi + 4]
add rbp, 0xfffffffffffffffc
mov qword [rsp + 0x128], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], 1
movabs rax, 0x2d0000002d
mov qword [rsp + 0x60], rax
lea rax, [rsi + 0xb]
and rax, 0xfffffffffffffff8
sub rax, r15
mov rcx, rsi
add rcx, 3
mov rdi, rbp
movabs r11, 0x8080808080808080
mov r14d, 0x1a
jmp 0x140041ca3
mov qword [rsp + 0x50], rdi
cmp rdi, rbp
ja 0x140041d9d
mov rdx, rdi
mov r8, rdi
cmp rdi, rax
jb 0x140041cc7
mov r9d, edi
sub r9d, eax
and r9d, 0xf
mov rdx, rdi
mov r8, rax
sub rdx, r9
jb case.0x140040f65.1
lea r9, [r15 + rdi]
sub r9, r15
sub r9, rdx
lea r10, [rcx + rdi]
nop word cs:[rax + rax]
test r9, r9
je 0x140041cfa
dec r9
cmp byte [r10], 0x2d
lea r10, [r10 - 1]
jne 0x140041ce0
add r9, rdx
mov rdi, r9
jmp 0x140041d4c
mov r9, rdx
cmp rdx, r8
jbe 0x140041d30
lea rdx, [r9 - 0x10]
movdqu xmm0, xmmword [rsi + r9 - 0xc]
movdqa xmm1, xmm0
pxor xmm1, xmm6
paddq xmm1, xmm7
pandn xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
movq r10, xmm1
test r10, r11
je 0x140041cfa
cmp r9, rdi
ja case.0x140040f65.1
mov rdi, r9
sub rdi, 1
jb 0x140041d9d
cmp byte [rcx + r9], 0x2d
mov r9, rdi
jne 0x140041d3c
cmp rdi, rbp
jae 0x140041c95
mov dl, 0x2d
cmp byte [r15 + rdi], dl
jne 0x140041c95
test rdi, rdi
je 0x1400420dd
cmp rdi, rbp
jae 0x140041d7a
cmp byte [r15 + rdi], 0xbf
jle case.0x140040f65.1
lea rcx, [rdi + 1]
mov rax, rbp
sub rax, rcx
jbe 0x1400420f6
cmp byte [r15 + rcx], 0xbf
mov rbp, rcx
jg 0x1400420fc
jmp case.0x140040f65.1
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0xe0], rax
xor edi, edi
mov rcx, rdi
cmp rdi, 8
jb 0x14004211a
mov rcx, qword [rsp + 0xe0]
lea rdx, [rcx + 7]
and rdx, 0xfffffffffffffff8
mov rax, rdx
sub rax, rcx
mov rcx, rdi
cmp rax, rdi
ja 0x14004211a
mov rcx, qword [rsp + 0xe0]
test qword [rcx], r11
jne 0x140042139
cmp rdx, qword [rsp + 0xe0]
mov ecx, 8
cmove rax, rcx
lea rcx, [rdi - 8]
cmp rax, rcx
jae 0x140041e23
mov rdx, qword [rsp + 0xe0]
test qword [rdx + rax], r11
jne 0x140042139
add rax, 8
cmp rax, rcx
jb 0x140041e08
mov rax, qword [rsp + 0xe0]
test qword [rax + rcx], r11
jne 0x140042139
add rbp, r15
mov r12d, pe_nt_image_headers64
mov r13d, 0x48
xor edx, edx
xor ebx, ebx
mov eax, edi
mov dword [rsp + 0x30], edi
cmp r15, rbp
mov rax, rdx
mov qword [rsp + 0x28], rdx
je 0x140042083
lea r9d, [r13 + 0x1a]
inc r15
mov r10d, r13d
neg r10d
mov r11d, 1
mov esi, 0x24
mov ecx, ebx
movzx eax, byte [r15 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jb 0x140041e9b
lea edx, [rax - 0x41]
cmp dl, 0x1a
jb 0x140041e9f
add al, 0x9f
mov edx, eax
cmp al, 0x19
jbe 0x140041e9f
jmp 0x140042139
add al, 0xea
mov edx, eax
test r11d, r11d
je case.0x140040f65.1
movzx r8d, dl
mov eax, ecx
not eax
xor edx, edx
div r11d
cmp eax, r8d
jb 0x140042139
mov eax, r11d
imul eax, r8d
add ecx, eax
lea eax, [r10 + rsi]
cmp esi, r9d
cmovae eax, r14d
cmp esi, r13d
mov edx, 1
cmovbe eax, edx
cmp eax, r8d
ja 0x140041f20
mov r8d, 0x24
sub r8d, eax
mov eax, r8d
mul r11d
jo 0x140042139
cmp r15, rbp
je 0x140042139
add esi, 0x24
imul r11d, r8d
inc r15
movzx eax, byte [r15 - 1]
lea edx, [rax - 0x30]
cmp dl, 0xa
jae 0x140041e86
jmp 0x140041e9b
mov r10d, dword [rsp + 0x30]
inc r10d
je case.0x140040f65.1
mov eax, ecx
sub eax, ebx
test ebx, ebx
mov r8d, 2
mov edx, 0x2bc
cmove r8d, edx
xor r13d, r13d
xor edx, edx
div r8d
mov r8d, eax
xor edx, edx
div r10d
add eax, r8d
cmp eax, 0x1c8
mov r9d, 0xd41d41d5
jb 0x140041f90
xor r13d, r13d
mov edx, eax
imul rdx, r9
shr rdx, 0x20
mov r8d, eax
sub r8d, edx
shr r8d, 1
add r8d, edx
shr r8d, 5
add r13d, 0x24
cmp eax, 0x3e57
mov eax, r8d
ja 0x140041f66
jmp 0x140041f93
mov r8d, eax
lea eax, [r8*4]
lea eax, [rax + rax*8]
add r8d, 0x26
xor edx, edx
div r8w
mov esi, eax
mov eax, ecx
xor edx, edx
mov dword [rsp + 0x30], r10d
div r10d
add r12d, eax
jb 0x140042139
cmp r12d, 0x110000
je 0x140042139
mov eax, r12d
xor eax, 0xd800
add eax, 0xffef0000
cmp eax, 0xffef0800
jb 0x140042139
mov ebx, edx
mov rax, qword [rsp + 0x120]
mov r14d, edx
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x140042022
mov rcx, rdx
shl rcx, 4
xor r9d, r9d
jmp 0x140042010
add r9, 0x10
cmp rcx, r9
je 0x140042022
mov r8, qword [rax + r9]
cmp r8, r14
jb 0x140042007
inc r8
mov qword [rax + r9], r8
jmp 0x140042007
cmp rdx, qword [rsp + 0x118]
jne 0x140042049
lea rcx, [rsp + 0x118]
call fcn.140049ea0
mov rax, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
movzx ecx, si
add r13d, ecx
mov rcx, rdx
shl rcx, 4
mov qword [rax + rcx], r14
mov dword [rax + rcx + 8], r12d
inc rdx
mov qword [rsp + 0x128], rdx
inc ebx
mov r14d, 0x1a
cmp r15, rbp
mov rax, rdx
mov qword [rsp + 0x28], rdx
jne 0x140041e5f
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xf8], rax
cmp rdx, 0x15
jae 0x14004216d
cmp qword [rsp + 0x28], 1
jbe 0x140042810
mov r8d, 1
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0x28]
call fcn.140040930
jmp 0x140042810
mov rcx, r14
mov rdx, rbx
mov r8, rbp
call fcn.140110050
mov rbx, qword [r14 + 0x10]
jmp 0x140041a86
mov qword [rsp + 0xe0], r15
xor edi, edi
mov rcx, rdi
cmp rdi, 8
jae 0x140041dbb
jmp 0x14004211a
jne case.0x140040f65.1
add rbp, r15
mov qword [rsp + 0xe0], r15
mov r15, rbp
mov rbp, rax
mov rcx, rdi
cmp rdi, 8
jae 0x140041dbb
mov rax, rcx
sub rax, 1
jb 0x140041e35
mov rdx, qword [rsp + 0xe0]
cmp byte [rdx + rcx - 1], 0
mov rcx, rax
jns 0x14004211a
mov byte [rsp + 0xe8], 1
mov al, 1
mov dword [rsp + 0x24], eax
xor edi, edi
mov r14, qword [rsp + 0x328]
mov r15, qword [rsp + 0x110]
lea r13, [0x1401cef84]
lea r12, [rsp + 0x130]
jmp 0x140041aa1
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140042195
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140040f65.1
mov qword [0x140206128], rax
mov rcx, qword [rsp + 0x28]
lea r8, [rcx*8]
movabs rcx, 0x7ffffffffffffff0
and r8, rcx
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
mov qword [rsp + 0x108], rax
test rax, rax
je case.0x140040f65.1
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x1400421f2
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140040f65.1
mov qword [0x140206128], rax
mov r8d, 0x100
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140040f65.1
mov rbp, rax
mov r14, qword [rsp + 0xf8]
lea rax, [r14 + 0x20]
mov qword [rsp + 0x178], rax
lea rax, [r14 + 8]
mov qword [rsp + 0x1a0], rax
lea rax, [r14 - 8]
mov qword [rsp + 0x198], rax
lea rax, [r14 - 0x10]
mov qword [rsp + 0x1a8], rax
mov eax, 0x10
mov qword [rsp + 0x180], rax
xor r13d, r13d
xor r15d, r15d
mov r11, qword [rsp + 0x28]
jmp 0x140042277
mov r15d, 1
mov r13, qword [rsp + 0x188]
cmp r13, r11
jae 0x1400427e9
mov r8, r11
sub r8, r13
mov rax, r13
shl rax, 4
lea rcx, [r14 + rax]
cmp r8, 2
jae 0x140042296
mov rdx, r11
jmp 0x1400423a6
mov rdx, qword [rcx]
mov r9, qword [rcx + 0x10]
cmp r9, rdx
jae 0x1400422b7
cmp r8, 2
jne 0x1400422cc
lea rdx, [r13 + 2]
mov r8d, 2
jmp 0x14004233d
cmp r8, 2
jne 0x1400422fa
lea rdx, [r13 + 2]
mov r8d, 2
jmp 0x1400423a6
mov r10, qword [rsp + 0x178]
lea r11, [r10 + rax]
mov r10d, 2
mov rsi, r9
mov rbx, rsi
mov rsi, qword [r11]
cmp rsi, rbx
jae 0x140042329
inc r10
add r11, 0x10
cmp r8, r10
jne 0x1400422e1
jmp 0x140042326
mov r10, qword [rsp + 0x178]
lea r11, [r10 + rax]
mov r10d, 2
mov rsi, r9
mov rbx, rsi
mov rsi, qword [r11]
cmp rsi, rbx
jb 0x140042329
inc r10
add r11, 0x10
cmp r8, r10
jne 0x14004230f
mov r10, r8
mov r11, qword [rsp + 0x28]
lea rsi, [r10 + r13]
mov r8, r10
cmp r9, rdx
mov rdx, rsi
jae 0x1400423a6
cmp r13, rdx
ja case.0x140040f65.1
cmp rdx, r11
ja case.0x140040f65.1
cmp r8, 2
jb 0x1400423a6
mov r12, rdx
mov rdx, r8
shr rdx, 1
add rax, qword [rsp + 0x1a0]
lea r9, [r8 + r13]
shl r9, 4
add r9, qword [rsp + 0x198]
mov r10, qword [rax - 8]
mov r11d, dword [rax]
mov rsi, qword [r9 - 8]
mov ebx, dword [r9]
mov qword [rax - 8], rsi
mov dword [rax], ebx
mov qword [r9 - 8], r10
mov dword [r9], r11d
add rax, 0x10
add r9, 0xfffffffffffffff0
dec rdx
jne 0x140042376
mov r11, qword [rsp + 0x28]
mov rdx, r12
mov rsi, rdx
sub rsi, r13
jb case.0x140040f65.1
cmp rdx, r11
ja case.0x140040f65.1
jae 0x1400423f6
cmp r8, 0xa
jae 0x1400423f6
lea rsi, [r13 + 0xa]
cmp rsi, r11
cmovae rsi, r11
mov qword [rsp + 0x188], rsi
sub rsi, r13
jb case.0x140040f65.1
cmp r8, 1
adc r8, 0
mov rdx, rsi
call fcn.140040930
mov r11, qword [rsp + 0x28]
jmp 0x1400423fe
mov qword [rsp + 0x188], rdx
cmp r15, qword [rsp + 0x180]
jne 0x140042484
movzx eax, byte [0x140206138]
mov rax, qword [0x140206128]
test rax, rax
jne 0x140042430
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x140040f65.1
mov qword [0x140206128], rax
mov r8, r15
shl r8, 5
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x140040f65.1
mov rbx, rax
lea rax, [r15 + r15]
mov qword [rsp + 0x180], rax
mov r8, r15
shl r8, 4
mov rcx, rbx
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
mov rbp, rbx
mov r11, qword [rsp + 0x28]
mov rax, r15
shl rax, 4
mov qword [rbp + rax], rsi
mov qword [rbp + rax + 8], r13
inc r15
mov rax, r15
cmp r15, 2
mov qword [rsp + 0x1b0], rbp
jae 0x14004253b
jmp 0x140042266
mov rdx, qword [rsp + 0x108]
mov r13, qword [rsp + 0x100]
sub rbx, rdx
mov rcx, rsi
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x1c8]
add rax, r15
mov rcx, qword [rsp + 0x1c0]
mov qword [rcx], rax
mov rax, qword [rsp + 0x1d0]
mov rcx, qword [rsp + 0x1b8]
mov qword [rcx], rax
lea rdx, [r13 + 0x10]
mov rax, qword [rsp + 0x1e0]
not rax
mov r8, qword [rsp + 0x30]
add r8, rax
shl r8, 4
mov rcx, r13
call sub.msvcrt.dll_memmove
mov rax, qword [rsp + 0x1d8]
cmp rax, 1
mov r11, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x1b0]
jbe 0x140042260
mov r15, rax
lea r10, [rax - 1]
mov rcx, r10
shl rcx, 4
mov rax, qword [rbp + rcx]
mov rcx, qword [rbp + rcx + 8]
add rcx, rax
cmp rcx, r11
je 0x1400425a8
mov rdx, r15
shl rdx, 4
mov r8, qword [rdx + rbp - 0x20]
cmp r8, rax
jbe 0x1400425a8
cmp r15, 2
jbe 0x1400427d3
lea rsi, [r15 - 3]
mov rcx, rsi
shl rcx, 4
mov rcx, qword [rbp + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x1400425be
cmp r15, 3
jbe 0x1400427de
add r8, rcx
cmp qword [rdx + rbp - 0x40], r8
jbe 0x1400425be
jmp 0x140042266
cmp r15, 3
jb 0x1400425c3
lea rsi, [r15 - 3]
mov rcx, rsi
shl rcx, 4
mov rcx, qword [rbp + rcx]
cmp rcx, rax
jb 0x1400425c7
lea rsi, [r15 - 2]
cmp r15, rsi
jbe case.0x140040f65.1
lea rax, [rsi + 1]
mov qword [rsp + 0x30], r15
cmp r15, rax
jbe case.0x140040f65.1
mov rcx, rsi
shl rcx, 4
mov rdx, qword [rbp + rcx + 8]
shl rax, 4
mov r8, qword [rbp + rax]
mov r12, qword [rbp + rax + 8]
add r12, r8
mov r13, r12
sub r13, rdx
jb case.0x140040f65.1
mov qword [rsp + 0x1e0], rsi
cmp r12, r11
ja case.0x140040f65.1
mov qword [rsp + 0x1c8], r8
mov qword [rsp + 0x1d8], r10
lea r8, [rcx + rbp]
mov qword [rsp + 0x100], r8
mov r15, qword [rbp + rcx]
lea rcx, [rbp + rax]
mov qword [rsp + 0x1c0], rcx
lea rax, [rbp + rax + 8]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1d0], rdx
mov rsi, rdx
shl rsi, 4
add rsi, r14
mov rbx, r15
shl rbx, 4
lea rbp, [rsi + rbx]
shl r12, 4
mov r14, r13
sub r14, r15
cmp r14, r15
jae 0x140042729
mov rbx, r14
shl rbx, 4
mov r13, qword [rsp + 0x108]
mov rcx, r13
mov rdx, rbp
mov r8, rbx
call sub.msvcrt.dll_memcpy
add rbx, r13
test r15, r15
jle 0x1400427b6
test r14, r14
jle 0x1400427b6
add r12, qword [rsp + 0x1a8]
mov r14, qword [rsp + 0xf8]
mov rax, rbp
mov rcx, rbx
mov rdx, qword [rbx - 0x10]
mov r8, qword [rbp - 0x10]
cmp rdx, r8
mov ebp, 0
sbb rbp, rbp
cmp rdx, r8
mov ebx, 0
adc rbx, 0xffffffffffffffff
shl rbp, 4
add rbp, rax
shl rbx, 4
add rbx, rcx
cmp rdx, r8
mov rax, rbx
cmovb rax, rbp
movdqu xmm0, xmmword [rax]
movdqu xmmword [r12], xmm0
cmp rbp, rsi
jbe 0x14004271e
add r12, 0xfffffffffffffff0
cmp rbx, r13
ja 0x1400426c9
mov rsi, rbp
mov rdx, r13
jmp 0x1400424ba
mov r14, qword [rsp + 0x108]
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call sub.msvcrt.dll_memcpy
add rbx, r14
test r15, r15
jle 0x1400427be
cmp r13, r15
mov r14, qword [rsp + 0xf8]
jle 0x1400424b2
add r12, r14
mov rdx, qword [rsp + 0x108]
mov r13, qword [rsp + 0x100]
mov r8, rdx
mov rcx, qword [rbp]
xor edx, edx
xor eax, eax
cmp rcx, qword [r8]
setae dl
setb cl
mov r9, r8
cmovb r9, rbp
movdqu xmm0, xmmword [r9]
movdqu xmmword [rsi], xmm0
add rsi, 0x10
shl rdx, 4
add rdx, r8
cmp rdx, rbx
jae 0x1400424c2
mov al, cl
shl rax, 4
add rbp, rax
cmp rbp, r12
jb 0x14004276b
jmp 0x1400424c2
mov rsi, rbp
mov rdx, r13
jmp 0x1400427c6
mov rdx, qword [rsp + 0x108]
mov r14, qword [rsp + 0xf8]
jmp 0x1400424ba
mov r15d, 2
jmp 0x140042266
mov r15d, 3
jmp 0x140042266
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140206128]
xor edx, edx
mov r8, qword [rsp + 0x108]
call sub.kernel32.dll_HeapFree
mov r10, qword [rsp + 0x28]
lea r8, [r10 + rdi]
mov rcx, qword [rsp + 0x328]
mov rax, qword [rcx]
mov rdx, qword [rcx + 0x10]
mov rcx, rdx
mov qword [rsp + 0x30], rdx
sub rax, rdx
cmp rax, r8
jb 0x140043455
mov r15, qword [rsp + 0xe0]
add rdi, r15
xor r12d, r12d
xor ebp, ebp
lea r13, [rsp + 0x38]
cmp r12, r10
jb 0x1400428fd
cmp r15, rdi
je 0x140042aec
movzx r8d, byte [r15]
test r8b, r8b
js 0x14004287b
inc r15
movzx esi, r8b
inc rbp
jmp 0x1400429c4
movzx eax, r8b
and eax, 0x1f
movzx r9d, byte [r15 + 1]
and r9d, 0x3f
cmp r8b, 0xdf
jbe 0x1400428d3
movzx edx, byte [r15 + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x1400428dc
movzx esi, byte [r15 + 3]
and eax, 7
shl eax, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, eax
cmp esi, 0x110000
je 0x140042aec
add r15, 4
mov rcx, r15
jmp 0x14004297f
add r15, 2
jmp 0x1400429a1
add r15, 3
jmp 0x1400429b2
mov rax, qword [rbx + 8]
mov byte [rax + rdx], sil
inc rdx
mov qword [rbx + 0x10], rdx
cmp r12, r10
jae 0x14004285a
mov rax, r12
shl rax, 4
mov rcx, qword [rsp + 0xf8]
cmp qword [rcx + rax], rbp
jne 0x14004291e
inc r12
mov esi, dword [rcx + rax + 8]
jmp 0x1400429b9
mov rcx, r15
mov r15, rdi
cmp rcx, rdi
je 0x14004291e
movzx r8d, byte [rcx]
test r8b, r8b
jns 0x14004298f
movzx eax, r8b
and eax, 0x1f
movzx r9d, byte [rcx + 1]
and r9d, 0x3f
cmp r8b, 0xe0
jb 0x14004299a
movzx edx, byte [rcx + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x1400429ab
movzx esi, byte [rcx + 3]
add rcx, 4
and eax, 7
shl eax, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, eax
mov r15, rcx
cmp esi, 0x110000
je 0x14004291e
mov r15, rcx
cmp esi, 0x110000
jne 0x1400429b9
jmp 0x140042aec
inc rcx
mov r15, rcx
jmp 0x14004286f
add rcx, 2
mov r15, rcx
shl eax, 6
or eax, r9d
mov esi, eax
jmp 0x1400429b9
add rcx, 3
mov r15, rcx
shl eax, 0xc
or eax, edx
mov esi, eax
inc rbp
cmp esi, 0x80
jae 0x1400429ef
mov rbx, qword [rsp + 0x328]
mov rdx, qword [rbx + 0x10]
cmp rdx, qword [rbx]
jne 0x1400428e5
mov rcx, rbx
call fcn.14002d1d0
mov r10, qword [rsp + 0x28]
mov rdx, qword [rbx + 0x10]
jmp 0x1400428e5
mov dword [rsp + 0x38], 0
mov eax, esi
cmp esi, 0x800
jae 0x140042a1e
shr eax, 6
or al, 0xc0
mov byte [rsp + 0x38], al
and sil, 0x3f
or sil, 0x80
mov byte [rsp + 0x39], sil
mov esi, 2
jmp 0x140042a85
cmp esi, 0x10000
jae 0x140042a50
shr eax, 0xc
or al, 0xe0
mov byte [rsp + 0x38], al
mov eax, esi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x39], al
and sil, 0x3f
or sil, 0x80
mov byte [rsp + 0x3a], sil
mov esi, 3
jmp 0x140042a85
shr eax, 0x12
or al, 0xf0
mov byte [rsp + 0x38], al
mov eax, esi
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x39], al
mov eax, esi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x3a], al
and sil, 0x3f
or sil, 0x80
mov byte [rsp + 0x3b], sil
mov esi, 4
mov rcx, qword [rsp + 0x328]
mov rax, qword [rcx]
mov rbx, qword [rcx + 0x10]
sub rax, rbx
cmp rax, rsi
jb 0x140042ad0
mov r14, qword [rsp + 0x328]
mov rcx, qword [r14 + 8]
add rcx, rbx
mov rdx, r13
mov r8, rsi
call sub.msvcrt.dll_memcpy
add rbx, rsi
mov qword [r14 + 0x10], rbx
mov r10, qword [rsp + 0x28]
cmp r12, r10
jae 0x14004285a
jmp 0x1400428fd
mov r14, qword [rsp + 0x328]
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.140110050
mov rbx, qword [r14 + 0x10]
jmp 0x140042a9c
mov rax, qword [rsp + 0x328]
mov rsi, qword [rax + 8]
mov rbp, qword [rax + 0x10]
cmp qword [rsp + 0x30], 0
je 0x140042b21
sub rbp, qword [rsp + 0x30]
jbe 0x140042b1b
mov rax, qword [rsp + 0x30]
cmp byte [rsi + rax], 0xbf
jg 0x140042b21
jmp case.0x140040f65.1
jne case.0x140040f65.1
add rsi, qword [rsp + 0x30]
test byte [rsp + 0x24], 1
jne 0x140042c66
test rbp, rbp
je 0x140042c5e
lea rax, [rsi + rbp]
mov rcx, rsi
lea r14, [0x1401cef84]
jmp 0x140042b53
cmp rcx, rax
je 0x140042c5e
movzx edx, byte [rcx]
test dl, dl
js 0x140042b5f
inc rcx
jmp 0x140042bd9
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140042bb4
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x140042bc4
movzx edx, byte [rcx + 3]
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0x110000
je 0x140042c5e
add rcx, 4
jmp 0x140042bd2
add rcx, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x140042bd9
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
lea r14, [0x1401cef84]
lea r8d, [rdx - 0x21]
cmp r8d, 0x5e
jb 0x140042b4a
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x140042c0b
cmp r11d, edx
cmova r9, r8
mov r8, r9
sub r8, r10
jbe 0x140042b4a
shr r8, 1
add r8, r10
lea rdi, [r8 + r8*2]
mov r11d, dword [r14 + rdi*4]
mov ebx, dword [r14 + rdi*4 + 4]
cmp ebx, edx
jb 0x140042c27
cmp r11d, edx
jbe 0x140042c36
cmp ebx, edx
jae 0x140042bf8
mov r10, r8
inc r10
mov r8, r9
jmp 0x140042bf8
movzx edx, byte [r14 + rdi*4 + 8]
cmp rdx, 0x11
ja 0x140042b4a
mov r8d, 0x20003
bt r8, rdx
jae 0x140042b4a
mov al, 1
mov dword [rsp + 0x24], eax
jmp 0x140042c66
mov dword [rsp + 0x24], 0
movq xmm0, qword [rsp + 0xe8]
movzx eax, byte [rsp + 0xf1]
pshufd xmm1, xmm0, 0x55
por xmm1, xmm0
movdqa xmm0, xmm1
psrld xmm0, 0x10
por xmm0, xmm1
movdqa xmm1, xmm0
psrlw xmm1, 8
por xmm1, xmm0
movd ecx, xmm1
or cl, byte [rsp + 0xf0]
or al, byte [rsp + 0xf2]
or al, cl
xor edi, edi
or al, byte [rsp + 0xf3]
mov r14, qword [rsp + 0x328]
mov r15, qword [rsp + 0x110]
lea r13, [0x1401cef84]
lea r12, [rsp + 0x130]
jne 0x140041aa1
test rbp, rbp
je 0x1400434e6
lea rdi, [rsi + rbp]
xor r8d, r8d
xor eax, eax
mov rcx, rsi
movzx edx, byte [rcx]
test dl, dl
js 0x140042d00
inc rcx
jmp 0x140042d8c
mov r9d, edx
and r9d, 0x1f
movzx r11d, byte [rcx + 1]
and r11d, 0x3f
cmp dl, 0xe0
jb 0x140042d55
movzx r10d, byte [rcx + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp dl, 0xf0
jb 0x140042d65
movzx edx, byte [rcx + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and edx, 0x3f
or edx, r10d
or edx, r9d
cmp edx, 0x110000
je 0x1400432ee
add rcx, 4
jmp 0x140042d73
add rcx, 2
shl r9d, 6
or r9d, r11d
mov edx, r9d
jmp 0x140042d73
add rcx, 3
shl r9d, 0xc
or r10d, r9d
mov edx, r10d
cmp edx, 0x7f
jbe 0x140042d8c
jmp 0x140042e1a
inc rcx
cmp edx, 0x80
jae 0x140042e17
cmp rcx, rdi
je 0x1400432ee
movzx edx, byte [rcx]
test dl, dl
jns 0x140042d7d
mov r8d, edx
and r8d, 0x1f
movzx r10d, byte [rcx + 1]
and r10d, 0x3f
cmp dl, 0xdf
jbe 0x140042df1
movzx r9d, byte [rcx + 2]
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp dl, 0xf0
jb 0x140042e04
movzx edx, byte [rcx + 3]
and r8d, 7
shl r8d, 0x12
shl r9d, 6
and edx, 0x3f
or edx, r9d
or edx, r8d
cmp edx, 0x110000
je 0x1400432ee
add rcx, 4
jmp 0x140042d80
add rcx, 2
shl r8d, 6
or r8d, r10d
mov edx, r8d
jmp 0x140042d80
add rcx, 3
shl r8d, 0xc
or r9d, r8d
mov edx, r9d
jmp 0x140042d80
xor r8d, r8d
mov r9d, r8d
imul r8d, edx, 0x9e3779b9
imul r10d, edx, 0x31415926
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1f
and r8d, 0xfffffffe
lea r11, [0x1401d334c]
movzx r8d, word [r8 + r11]
add r8d, edx
imul r8d, r8d, 0x9e3779b9
xor r8d, r10d
imul r8, r8, 0x39a
shr r8, 0x1e
and r8d, 0xfffffffc
lea r10, [0x1401d3a80]
mov r8d, dword [r8 + r10]
mov r10d, r8d
shr r10d, 8
cmp r10d, edx
mov r10d, 0
cmovne r8d, r10d
cmp r9b, r8b
jbe 0x140042e92
test r8b, r8b
jne case.0x140043046.3907
lea r9d, [rdx - 0x340]
cmp r9d, 4
ja 0x140042ea9
cmp r9d, 2
jne case.0x140043046.3907
cmp edx, 0xd56
jg 0x140042f10
cmp edx, 0x9de
jg 0x140042f51
cmp edx, 0x93b
jg 0x140043072
lea r9d, [rdx - 0x30f]
cmp r9d, 0x36
ja 0x140042eea
movabs r10, 0x48020000001005
bt r10, r9
jb 0x14004315f
lea r9d, [rdx - 0x374]
cmp r9d, 0x13
ja case.0x140043046.3908
mov r10d, 0x80401
bt r10d, r9d
jb case.0x140043046.3907
jmp case.0x140043046.3908
cmp edx, 0x11126
jg 0x140042fb8
cmp edx, 0x102d
jle 0x140042ffe
cmp edx, 0x1f70
jg 0x1400430c4
cmp edx, 0x102e
je 0x14004315f
cmp edx, 0x1b35
je 0x14004315f
jmp case.0x140043046.3908
cmp edx, 0xbd6
jg 0x140043049
cmp edx, 0xbbd
jg 0x140043157
lea r9d, [rdx - 0xb3e]
cmp r9d, 0x19
ja 0x140042f86
mov r10d, 0x3000001
bt r10d, r9d
jb 0x14004315f
lea r9d, [rdx - 0xa33]
cmp r9d, 0x2b
ja 0x140042fa7
movabs r10, 0x80000000009
bt r10, r9
jb case.0x140043046.3907
cmp edx, 0x9df
jne case.0x140043046.3908
jmp case.0x140043046.3907
cmp edx, 0x114af
jle 0x14004309b
lea r9d, [rdx - 0x114b0]
cmp r9d, 0xd
ja 0x140042fe1
mov r10d, 0x2401
bt r10d, r9d
jb 0x14004315f
cmp edx, 0x115af
je 0x14004315f
cmp edx, 0x11930
je 0x14004315f
jmp case.0x140043046.3908
lea r9d, [rdx - 0xdca]
cmp r9d, 0x15
ja 0x14004301b
mov r10d, 0x200021
bt r10d, r9d
jb 0x14004315f
cmp edx, 0xd57
je 0x14004315f
lea r9d, [rdx - 0xf43]
cmp r9d, 0x76
ja case.0x140043046.3908
lea r10, [0x140198670]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xcc1
jg 0x14004311c
cmp edx, 0xbd7
je 0x14004315f
cmp edx, 0xc56
je 0x14004315f
jmp case.0x140043046.3908
cmp edx, 0x93c
je 0x14004315f
cmp edx, 0x9be
je 0x14004315f
cmp edx, 0x9d7
je 0x14004315f
jmp case.0x140043046.3908
cmp edx, 0x11127
je 0x14004315f
cmp edx, 0x1133e
je 0x14004315f
cmp edx, 0x11357
je 0x14004315f
jmp case.0x140043046.3908
cmp edx, 0xfa0f
jle 0x14004312e
cmp edx, 0x110ba
je 0x14004315f
lea r9d, [rdx - 0xfa10]
cmp r9d, 0x12
ja 0x1400430f5
mov r10d, 0x50005
bt r10d, r9d
jb case.0x140043046.3907
lea r9d, [rdx - 0xfb1d]
cmp r9d, 0x21
ja case.0x140043046.3908
movabs r10, 0x200000005
bt r10, r9
jb case.0x140043046.3907
jmp case.0x140043046.3908
cmp edx, 0xcc2
je 0x14004315f
cmp edx, 0xd3e
je 0x14004315f
jmp case.0x140043046.3908
cmp edx, 0x2125
jg 0x14004316f
lea r9d, [rdx - 0x1f71]
cmp r9d, 0x8c
ja case.0x140043046.3908
lea r10, [0x14019884c]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp edx, 0xbbe
jne case.0x140043046.3908
mov al, 2
cmp rcx, rdi
jne 0x140042cf1
jmp 0x1400432ee
lea r9d, [rdx - 0x2329]
cmp r9d, 2
jb case.0x140043046.3907
cmp edx, 0x2126
je case.0x140043046.3907
cmp edx, 0x2adc
je case.0x140043046.3907
movd xmm1, edx
pshufd xmm0, xmm1, 0
movdqa xmm2, xmm0
paddd xmm2, xmmword [0x1401985b0]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x1401985c0]
pxor xmm3, xmm14
movdqa xmm4, xmm9
pcmpgtd xmm4, xmm3
pxor xmm2, xmm14
movdqa xmm3, xmm10
pcmpgtd xmm3, xmm2
packssdw xmm3, xmm4
pmovmskb r9d, xmm3
test r9d, r9d
jne case.0x140043046.3907
pshufd xmm1, xmm1, 0x50
pand xmm1, xmmword [0x1401985a0]
pshufd xmm2, xmm1, 4
pcmpeqd xmm2, xmmword [0x1401985d0]
movdqa xmm3, xmm0
paddd xmm3, xmmword [0x1401985e0]
pxor xmm3, xmm14
movdqa xmm4, xmm15
pcmpgtd xmm4, xmm3
por xmm4, xmm2
movmskps r9d, xmm4
test r9b, r9b
jne case.0x140043046.3907
lea r9d, [rdx - 0x1d1bb]
cmp r9d, 6
jb case.0x140043046.3907
lea r9d, [rdx - 0x2f800]
cmp r9d, 0x21e
jb case.0x140043046.3907
movd r9d, xmm1
cmp r9d, 0x2000
je case.0x140043046.3907
cmp r9d, 0x212a
je case.0x140043046.3907
cmp r9d, 0xfb40
je case.0x140043046.3907
movdqa xmm1, xmm0
paddd xmm1, xmmword [0x140198630]
paddd xmm0, xmm12
pxor xmm0, xmm14
movdqa xmm2, xmm13
pcmpgtd xmm2, xmm0
pxor xmm1, xmm14
movdqa xmm0, xmm11
pcmpgtd xmm0, xmm1
packssdw xmm2, xmm0
pmovmskb r10d, xmm2
test r10d, r10d
jne 0x14004315f
lea r10d, [rdx - 0x11a8]
cmp r10d, 0x1b
jb 0x14004315f
add edx, 0xffffcf67
cmp edx, 2
jb 0x14004315f
cmp r9d, 0x330
jne 0x140043161
jmp 0x14004315f
test al, al
je 0x1400434e6
movzx eax, al
cmp eax, 1
je case.0x140043046.3907
lea rax, [rsp + 0x200]
movups xmmword [rax], xmm8
movzx eax, word [rsp + 0x20e]
lea rcx, [rsp + 0x80]
mov word [rcx + 0x2e], ax
movdqu xmm0, xmmword [rsp + 0x1fe]
movdqu xmmword [rcx + 0x1e], xmm0
movups xmmword [rcx], xmm8
mov byte [rcx + 0x10], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x48], 0
mov word [rsp + 0x4c], 0
mov byte [rsp + 0x50], 0
mov dword [rsp + 0x54], 0
mov byte [rsp + 0x58], 0
mov dword [rsp + 0x5c], 0
mov byte [rsp + 0x60], 0
mov dword [rsp + 0x64], 0
mov byte [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
mov dword [rsp + 0x98], 0
mov word [rsp + 0x9c], 0
mov dword [rsp + 0xb8], 0x110000
mov byte [rsp + 0xbc], 0
mov rbx, rsi
cmp rbx, rdi
je 0x140043471
movzx r14d, byte [rbx]
test r14b, r14b
js 0x1400433d0
inc rbx
jmp 0x140043436
mov eax, r14d
and eax, 0x1f
movzx edx, byte [rbx + 1]
and edx, 0x3f
cmp r14b, 0xdf
jbe 0x14004341c
movzx ecx, byte [rbx + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r14b, 0xf0
jb 0x14004342a
movzx r14d, byte [rbx + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and r14d, 0x3f
or r14d, ecx
or r14d, eax
cmp r14d, 0x110000
je 0x140043471
add rbx, 4
jmp 0x140043436
add rbx, 2
shl eax, 6
or eax, edx
mov r14d, eax
jmp 0x140043436
add rbx, 3
shl eax, 0xc
or ecx, eax
mov r14d, ecx
lea rcx, [rsp + 0x38]
call fcn.140044550
mov r15b, 1
cmp eax, 0x110000
je 0x140043487
cmp eax, r14d
je 0x1400433b9
jmp 0x140043487
mov rcx, qword [rsp + 0x328]
mov rdx, qword [rsp + 0x30]
call fcn.140110050
mov r10, qword [rsp + 0x28]
jmp 0x14004283c
lea rcx, [rsp + 0x38]
call fcn.140044550
cmp eax, 0x110000
setne r15b
neg r15b
cmp dword [rsp + 0x48], 0
je 0x1400434a9
cmp qword [rsp + 0x50], 0
je 0x1400434a9
mov r8, qword [rsp + 0x58]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp dword [rsp + 0x98], 0
je 0x1400434d4
cmp qword [rsp + 0xa0], 0
je 0x1400434d4
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
test r15b, r15b
je 0x1400434e6
mov byte [rsp + 0xed], 1
jmp 0x140042147
mov rcx, rsi
mov rdx, rbp
mov r8, qword [rsp + 0x190]
lea r9, [rsp + 0xe8]
call fcn.1400440c0
jmp 0x140042147
mov rcx, qword [r14 + 8]
mov rax, qword [r14 + 0x10]
mov rdx, qword [rsp + 0x1e8]
test rdx, rdx
je 0x14004352a
sub rax, rdx
jbe 0x140043528
cmp byte [rcx + rdx], 0xbf
jg 0x14004352a
ud2
jne case.0x140040f65.1
add rcx, rdx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
movabs rax, 0x2e0000002e
mov qword [rsp + 0x70], rax
mov word [rsp + 0x78], 1
test byte [rsp + 0x24], 1
jne 0x140043590
lea rsi, [rsp + 0x38]
mov rcx, rsi
call fcn.140043e70
test rax, rax
jne 0x14004357e
jmp 0x140043dbd
lea rsi, [rsp + 0x38]
mov ebx, 0x260fb
mov r15d, 0x62f8
mov rcx, rsi
call fcn.140043e70
test rax, rax
je 0x140043dbd
test rdx, rdx
je 0x1400435a0
movzx ecx, byte [rax]
test cl, cl
js 0x1400435c3
lea r9, [rax + 1]
jmp 0x140043632
mov r8d, ecx
and r8d, 0x1f
movzx r11d, byte [rax + 1]
and r11d, 0x3f
cmp cl, 0xdf
jbe 0x140043614
movzx r10d, byte [rax + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp cl, 0xf0
jb 0x140043624
movzx ecx, byte [rax + 3]
and r8d, 7
shl r8d, 0x12
shl r10d, 6
and ecx, 0x3f
or ecx, r10d
or ecx, r8d
cmp ecx, 0x110000
je 0x1400435a0
lea r9, [rax + 4]
jmp 0x140043632
lea r9, [rax + 2]
shl r8d, 6
or r8d, r11d
mov ecx, r8d
jmp 0x140043632
lea r9, [rax + 3]
shl r8d, 0xc
or r10d, r8d
mov ecx, r10d
add rdx, rax
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x140043654
cmp ebp, ecx
cmova r10, r8
mov r8, r10
sub r8, r11
jbe 0x1400436a2
shr r8, 1
add r8, r11
lea r14, [r8 + r8*2]
mov ebp, dword [r13 + r14*4]
mov r12d, dword [r13 + r14*4 + 4]
cmp r12d, ecx
jb 0x140043671
cmp ebp, ecx
jbe 0x140043681
cmp r12d, ecx
jae 0x140043646
mov r11, r8
inc r11
mov r8, r10
jmp 0x140043646
movzx ecx, byte [r13 + r14*4 + 8]
test rcx, rcx
je 0x140043816
cmp ecx, 0x11
je 0x140043816
cmp ecx, 9
jne 0x140043db5
cmp r9, rdx
je 0x14004379e
movzx ecx, byte [r9]
test cl, cl
js 0x1400436b8
inc r9
jmp 0x14004372c
mov r8d, ecx
and r8d, 0x1f
movzx r11d, byte [r9 + 1]
and r11d, 0x3f
cmp cl, 0xdf
jbe 0x14004370e
movzx r10d, byte [r9 + 2]
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
cmp cl, 0xf0
jb 0x14004371e
movzx ecx, byte [r9 + 3]
and r8d, 7
shl r8d, 0x12
shl r10d, 6
and ecx, 0x3f
or ecx, r10d
or ecx, r8d
cmp ecx, 0x110000
je 0x14004379e
add r9, 4
jmp 0x14004372c
add r9, 2
shl r8d, 6
or r8d, r11d
mov ecx, r8d
jmp 0x14004372c
add r9, 3
shl r8d, 0xc
or r10d, r8d
mov ecx, r10d
mov r8d, 0x5a6
xor r11d, r11d
mov r10d, 0x5a6
jmp 0x140043752
cmp ebp, ecx
cmova r10, r8
mov r8, r10
sub r8, r11
jbe 0x1400436a2
shr r8, 1
add r8, r11
lea r14, [r8 + r8*2]
mov ebp, dword [r13 + r14*4]
mov r12d, dword [r13 + r14*4 + 4]
cmp r12d, ecx
jb 0x14004376f
cmp ebp, ecx
jbe 0x14004377f
cmp r12d, ecx
jae 0x140043740
mov r11, r8
inc r11
mov r8, r10
jmp 0x140043740
movzx ecx, byte [r13 + r14*4 + 8]
cmp rcx, 0xe
ja 0x140043db5
bt r15, rcx
jb 0x1400436a2
jmp 0x140043db5
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x14004394e
dec rdx
cmp rdx, rax
jne 0x140043ce5
cmp ecx, 0x110000
je 0x1400435a0
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x1400437e4
cmp r9d, ecx
cmova rdx, rax
mov rax, rdx
sub rax, r8
jbe 0x1400439b0
shr rax, 1
add rax, r8
lea r10, [rax + rax*2]
mov r9d, dword [r13 + r10*4]
mov r11d, dword [r13 + r10*4 + 4]
cmp r11d, ecx
jb 0x140043806
cmp r9d, ecx
jbe 0x1400439a4
cmp r11d, ecx
jae 0x1400437d1
mov r8, rax
inc r8
mov rax, rdx
jmp 0x1400437d1
cmp r9, rdx
je 0x140043989
xor r8d, r8d
xor ecx, ecx
movzx r10d, byte [r9]
test r10b, r10b
js 0x140043832
inc r9
jmp 0x1400438af
mov r11d, r10d
and r11d, 0x1f
movzx r14d, byte [r9 + 1]
and r14d, 0x3f
cmp r10b, 0xdf
jbe 0x140043891
movzx ebp, byte [r9 + 2]
shl r14d, 6
and ebp, 0x3f
or ebp, r14d
cmp r10b, 0xf0
jb 0x1400438a1
movzx r10d, byte [r9 + 3]
and r11d, 7
shl r11d, 0x12
shl ebp, 6
and r10d, 0x3f
or r10d, ebp
or r10d, r11d
cmp r10d, 0x110000
je 0x140043a85
add r9, 4
lea r13, [0x1401cef84]
jmp 0x1400438af
add r9, 2
shl r11d, 6
or r11d, r14d
mov r10d, r11d
jmp 0x1400438af
add r9, 3
shl r11d, 0xc
or ebp, r11d
mov r10d, ebp
mov r11d, 0x5a6
xor r12d, r12d
mov r14d, 0x5a6
jmp 0x1400438da
lea r13, [0x1401cef84]
cmp ebp, r10d
cmova r14, r11
mov r11, r14
sub r11, r12
jbe 0x140043db5
shr r11, 1
add r11, r12
mov rdi, r13
lea r13, [r11 + r11*2]
mov ebp, dword [rdi + r13*4]
mov edi, dword [rdi + r13*4 + 4]
cmp edi, r10d
jb 0x1400438fa
cmp ebp, r10d
jbe 0x14004390a
cmp edi, r10d
jae 0x1400438c0
mov r12, r11
inc r12
mov r11, r14
jmp 0x1400438c0
lea r11, [0x1401cef84]
movzx r10d, byte [r11 + r13*4 + 8]
mov r13, r11
cmp r10d, 1
je 0x14004392a
cmp r10d, 5
jne 0x14004392f
mov cl, 1
jmp 0x140043943
mov r8b, 1
jmp 0x140043943
cmp r10, 0x11
ja 0x140043db5
bt rbx, r10
jae 0x140043db5
cmp r9, rdx
jne 0x140043824
jmp 0x14004398e
movzx r8d, byte [rdx - 2]
cmp r8b, 0xc0
jge 0x140043cca
movzx r9d, byte [rdx - 3]
cmp r9b, 0xc0
jge 0x140043a5c
movzx r10d, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x140043a64
xor ecx, ecx
xor r8d, r8d
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x140043a9a
dec rdx
jmp 0x140043af6
cmp byte [r13 + r10*4 + 8], 0xd
je 0x1400435a0
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x1400439d2
cmp r9d, ecx
cmova rdx, rax
mov rax, rdx
sub rax, r8
jbe 0x1400435a0
shr rax, 1
add rax, r8
lea r10, [rax + rax*2]
mov r9d, dword [r13 + r10*4]
mov r11d, dword [r13 + r10*4 + 4]
cmp r11d, ecx
jb 0x1400439f0
cmp r9d, ecx
jbe 0x140043a00
cmp r11d, ecx
jae 0x1400439bf
mov r8, rax
inc r8
mov rax, rdx
jmp 0x1400439bf
cmp byte [r13 + r10*4 + 8], 9
je 0x1400435a0
mov eax, 0x5a6
xor r8d, r8d
mov edx, 0x5a6
jmp 0x140043a2e
cmp r9d, ecx
cmova rdx, rax
mov rax, rdx
sub rax, r8
jbe 0x140043db5
shr rax, 1
add rax, r8
lea r10, [rax + rax*2]
mov r9d, dword [r13 + r10*4]
mov r11d, dword [r13 + r10*4 + 4]
cmp r11d, ecx
jb 0x140043a4c
cmp r9d, ecx
jbe 0x140043a74
cmp r11d, ecx
jae 0x140043a1b
mov r8, rax
inc r8
mov rax, rdx
jmp 0x140043a1b
add rdx, 0xfffffffffffffffd
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
jmp 0x140043cd2
cmp byte [r13 + r10*4 + 8], 5
je 0x1400435a0
jmp 0x140043db5
lea r13, [0x1401cef84]
movzx r9d, byte [rdx - 1]
test r9b, r9b
jns 0x14004399c
movzx r10d, byte [rdx - 2]
cmp r10b, 0xc0
jge 0x140043ac7
movzx r11d, byte [rdx - 3]
cmp r11b, 0xc0
jge 0x140043ad1
movzx edi, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and edi, 7
shl edi, 6
and r11d, 0x3f
or r11d, edi
jmp 0x140043ad9
add rdx, 0xfffffffffffffffe
and r10d, 0x1f
jmp 0x140043ae4
add rdx, 0xfffffffffffffffd
and r11d, 0xf
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
lea r13, [0x1401cef84]
cmp rdx, rax
je 0x140043bde
cmp r9d, 0x110000
je 0x140043db5
mov r10d, 0x5a6
xor r14d, r14d
mov r11d, 0x5a6
jmp 0x140043b30
cmp ebp, r9d
cmova r11, r10
mov r10, r11
sub r10, r14
jbe 0x140043c43
shr r10, 1
add r10, r14
lea r12, [r10 + r10*2]
mov ebp, dword [r13 + r12*4]
mov edi, dword [r13 + r12*4 + 4]
cmp edi, r9d
jb 0x140043b4e
cmp ebp, r9d
jbe 0x140043b5e
cmp edi, r9d
jae 0x140043b1d
mov r14, r10
inc r14
mov r10, r11
jmp 0x140043b1d
cmp byte [r13 + r12*4 + 8], 0xd
jne 0x140043c43
movzx r9d, byte [rdx - 1]
test r9b, r9b
js 0x140043b79
dec rdx
jmp 0x140043bce
movzx r10d, byte [rdx - 2]
cmp r10b, 0xc0
jge 0x140043ba6
movzx r11d, byte [rdx - 3]
cmp r11b, 0xc0
jge 0x140043bb0
movzx edi, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and edi, 7
shl edi, 6
and r11d, 0x3f
or r11d, edi
jmp 0x140043bb8
add rdx, 0xfffffffffffffffe
and r10d, 0x1f
jmp 0x140043bc3
add rdx, 0xfffffffffffffffd
and r11d, 0xf
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
cmp rdx, rax
lea r13, [0x1401cef84]
jne 0x140043aff
cmp r9d, 0x110000
je 0x140043db5
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x140043c09
cmp r11d, r9d
cmova rdx, rax
mov rax, rdx
sub rax, r10
jbe 0x140043c43
shr rax, 1
add rax, r10
lea r14, [rax + rax*2]
mov r11d, dword [r13 + r14*4]
mov ebp, dword [r13 + r14*4 + 4]
cmp ebp, r9d
jb 0x140043c27
cmp r11d, r9d
jbe 0x140043c37
cmp ebp, r9d
jae 0x140043bfa
mov r10, rax
inc r10
mov rax, rdx
jmp 0x140043bfa
cmp byte [r13 + r14*4 + 8], 0xd
je 0x140043db5
mov eax, 0x5a6
xor r10d, r10d
mov edx, 0x5a6
jmp 0x140043c65
cmp r11d, r9d
cmova rdx, rax
mov rax, rdx
sub rax, r10
jbe 0x140043db5
shr rax, 1
add rax, r10
lea r14, [rax + rax*2]
mov r11d, dword [r13 + r14*4]
mov edi, dword [r13 + r14*4 + 4]
cmp edi, r9d
jb 0x140043c83
cmp r11d, r9d
jbe 0x140043c93
cmp edi, r9d
jae 0x140043c52
mov r10, rax
inc r10
mov rax, rdx
jmp 0x140043c52
movzx eax, byte [r13 + r14*4 + 8]
cmp rax, 0x11
ja 0x140043db5
mov edx, 0x20023
bt rdx, rax
jae 0x140043db5
test r8b, 1
je 0x1400435a0
and cl, 1
je 0x1400435a0
jmp 0x140043db5
add rdx, 0xfffffffffffffffe
and r8d, 0x1f
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
cmp rdx, rax
je 0x1400437b6
cmp ecx, 0x110000
je 0x1400435a0
mov r8d, 0x5a6
xor r10d, r10d
mov r9d, 0x5a6
jmp 0x140043d15
cmp r11d, ecx
cmova r9, r8
mov r8, r9
sub r8, r10
jbe 0x1400439b0
shr r8, 1
add r8, r10
lea r14, [r8 + r8*2]
mov r11d, dword [r13 + r14*4]
mov ebp, dword [r13 + r14*4 + 4]
cmp ebp, ecx
jb 0x140043d32
cmp r11d, ecx
jbe 0x140043d41
cmp ebp, ecx
jae 0x140043d02
mov r10, r8
inc r10
mov r8, r9
jmp 0x140043d02
cmp byte [r13 + r14*4 + 8], 0xd
jne 0x1400439b0
movzx ecx, byte [rdx - 1]
test cl, cl
js 0x140043d62
dec rdx
cmp rdx, rax
jne 0x140043ce5
jmp 0x1400437b6
movzx r8d, byte [rdx - 2]
cmp r8b, 0xc0
jge 0x140043cca
movzx r9d, byte [rdx - 3]
cmp r9b, 0xc0
jge 0x140043d96
movzx r10d, byte [rdx - 4]
add rdx, 0xfffffffffffffffc
and r10d, 7
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
jmp 0x140043d9e
add rdx, 0xfffffffffffffffd
and r9d, 0xf
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
lea r13, [0x1401cef84]
jmp 0x140043cd2
mov byte [rsp + 0xea], 1
mov eax, dword [rsp + 0xf0]
mov rcx, qword [rsp + 0x1f0]
mov dword [rcx + 8], eax
mov rax, qword [rsp + 0xe8]
mov qword [rcx], rax
cmp qword [rsp + 0x118], 0
je 0x140043dfb
mov r8, qword [rsp + 0x120]
mov rcx, qword [0x140206128]
xor edx, edx
call sub.kernel32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x210]
movaps xmm7, xmmword [rsp + 0x220]
movaps xmm8, xmmword [rsp + 0x230]
movaps xmm9, xmmword [rsp + 0x240]
movaps xmm10, xmmword [rsp + 0x250]
movaps xmm11, xmmword [rsp + 0x260]
movaps xmm12, xmmword [rsp + 0x270]
movaps xmm13, xmmword [rsp + 0x280]
movaps xmm14, xmmword [rsp + 0x290]
movaps xmm15, xmmword [rsp + 0x2a0]
add rsp, 0x2b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret