Function at 0x140020be0
Capabilities:
Encode data using base64

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x158
mov r15, qword [rcx]
mov r12, qword [rcx + 8]
mov rax, r12
sub rax, r15
cmp rax, 2
jae 0x140020c1f
xor edi, edi
mov rax, rdi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rsi, rcx
movzx ecx, word [r15]
xor edi, edi
cmp ecx, 0x7367
setne cl
je 0x140020c38
xor r14d, r14d
jmp 0x140020c4e
add r15, 2
mov qword [rsi], r15
mov rax, r12
sub rax, r15
mov r14b, 1
cmp rax, 2
jb case.0x140020d53.10
mov dil, cl
movzx ecx, byte [r15]
mov r8d, 0x3d
xor edx, edx
lea rbp, [0x14130e1d0]
jmp 0x140020c7b
inc r9
mov rdx, r9
cmp r8, rdx
je 0x140020cb4
lea r9, [rdx + r8]
shr r9, 1
mov r10, r9
shl r10, 4
movzx r11d, byte [r10 + rbp]
cmp cl, r11b
jg 0x140020c70
cmp cl, r11b
jne 0x140020cac
movzx r10d, byte [r10 + rbp + 1]
cmp byte [r15 + 1], r10b
setg r10b
test r10b, 1
jne 0x140020c70
mov r8, r9
cmp r8, rdx
jne 0x140020c7b
shl rdx, 4
cmp cl, byte [rdx + rbp]
jne 0x140020e08
add rbp, rdx
movzx edx, byte [r15 + 1]
cmp dl, byte [rbp + 1]
jne 0x140020e08
lea r13, [r15 + 2]
mov qword [rsi], r13
movzx ebx, byte [rbp + 2]
mov rdi, qword [rbp + 8]
mov qword [rsp + 0x48], rdi
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov qword [rsp + 0x50], rax
cmp ebx, 0xa
ja case.default.0x140020d53
cmp rax, 8
jb 0x140021fbc
movabs rcx, 0x726f74617265706f
cmp qword [rdi], rcx
jne 0x140021fbc
lea rcx, [rdi + 8]
mov qword [rsp + 0x48], rcx
mov rdx, rax
add rdx, 0xfffffffffffffff8
mov qword [rsp + 0x50], rdx
je case.default.0x140020d53
cmp byte [rcx], 0x20
jne case.default.0x140020d53
add rdi, 9
mov qword [rsp + 0x48], rdi
add rax, 0xfffffffffffffff7
mov qword [rsp + 0x50], rax
mov eax, ebx
lea rcx, [0x14131204c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebp, dword [rbp + 4]
mov rcx, rsi
call fcn.140020be0
test rax, rax
je case.0x140020d53.10
mov rbx, rax
mov r14, qword [rsi + 0x1330]
mov rcx, qword [r14 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140020db0
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov qword [rax], r14
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r14, rax
lea rax, [rcx + 0x30]
mov qword [r14 + 8], rax
lea rdi, [r14 + rcx]
add rdi, 0x10
mov byte [r14 + rcx + 0x18], 0x3e
mov eax, dword [r14 + rcx + 0x1c]
and ebp, 0x3f
and eax, 0xffffffc0
or eax, ebp
mov dword [r14 + rcx + 0x1c], eax
movzx eax, byte [r14 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r14 + rcx + 0x20], al
lea rax, [0x14130e6b8]
mov qword [r14 + rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [r14 + rcx + 0x28], xmm0
mov qword [r14 + rcx + 0x38], rbx
jmp 0x140020c08
cmp ecx, 0x66
je 0x140020e32
cmp ecx, 0x54
je 0x140020e5b
cmp ecx, 0x4c
jne 0x140020e76
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140022730
movzx ecx, byte [r15 + 1]
cmp cl, 0x70
jne 0x140020f05
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140023200
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.14001fb60
movzx eax, word [r15]
cmp eax, 0x6c69
je 0x140020f3c
sub r12, r15
cmp r12, 2
jb 0x140020e9d
movzx eax, word [r15]
cmp eax, 0x636d
je 0x1400210ea
lea rax, [0x14130df29]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], 2
lea rdx, [rsp + 0x110]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x14002101c
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
mov dword [rsp + 0x58], 2
lea rdx, [rsp + 0x48]
lea r8, [rsp + 0x58]
mov rcx, rsi
call fcn.140023d00
jmp 0x140021e08
cmp rax, 3
jb 0x140020f21
cmp cl, 0x4c
jne 0x140020f21
movsx eax, byte [r15 + 2]
add eax, 0xffffffd0
cmp eax, 9
jbe 0x140020e40
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140023580
add r15, 2
mov qword [rsi], r15
mov rbx, qword [rsi + 0x18]
sub rbx, qword [rsi + 0x10]
sar rbx, 3
lea r14, [rsi + 0x28]
xor edi, edi
jmp 0x140020fa8
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r13, rax
mov qword [rsi + 0x10], rax
test rax, rax
je 0x140021fb7
mov rax, r12
sar rax, 3
sar r12, 2
lea rbp, [rax*8]
add rbp, r13
mov qword [rsi + 0x18], rbp
lea rax, [r12*8]
add rax, r13
mov qword [rsi + 0x20], rax
lea rax, [rbp + 8]
mov qword [rsi + 0x18], rax
mov qword [rbp], r15
mov r15, qword [rsi]
mov r12, qword [rsi + 8]
cmp r15, r12
je 0x140020fb7
cmp byte [r15], 0x45
je 0x140021066
mov rcx, rsi
call fcn.140023810
test rax, rax
je 0x140020c08
mov r15, rax
mov rbp, qword [rsi + 0x18]
cmp rbp, qword [rsi + 0x20]
jne 0x140020f95
mov rcx, qword [rsi + 0x10]
mov r12, rbp
sub r12, rcx
lea rdx, [r12 + r12]
cmp rcx, r14
jne 0x140020f57
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r13, rax
cmp rbp, r14
je 0x140021013
mov rcx, r13
mov rdx, r14
mov r8, r12
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r13
jmp 0x140020f6c
lea rax, [0x14130df36]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 2
lea rdx, [rsp + 0x100]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x14002108f
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140023de0
inc r15
mov qword [rsi], r15
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14001db90
mov rcx, rsi
mov rdx, rdi
call fcn.140023ae0
jmp 0x140021e08
lea rax, [0x14130df39]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], 2
lea rdx, [rsp + 0xf0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x140021794
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.140024190
jmp 0x140021e08
add r15, 2
mov qword [rsi], r15
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.140023b90
cmp r13, r12
je 0x140021755
cmp byte [r13], 0x5f
jne 0x140021755
add r15, 3
mov qword [rsi], r15
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rsp + 0x130], xmm0
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x68], eax
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
lea rdx, [rsp + 0x130]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rcx, rsi
call fcn.1400251f0
jmp 0x140021e08
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rsp + 0x140], xmm0
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x140]
lea r9, [rsp + 0x68]
mov rcx, rsi
call fcn.140024d50
jmp 0x140021e08
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x40]
mov rcx, rsi
call fcn.1400220d0
jmp 0x140021e08
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x48]
lea r9, [rsp + 0x68]
mov rcx, rsi
call fcn.1400221a0
jmp 0x140021e08
mov rax, qword [rsi + 0x18]
sub rax, qword [rsi + 0x10]
sar rax, 3
mov qword [rsp + 0x88], rax
lea rax, [rsi + 0x28]
mov qword [rsp + 0x78], rax
xor edi, edi
jmp 0x14002130c
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r13, rax
mov qword [rsi + 0x10], rax
test rax, rax
je 0x140021fb7
mov rax, rbx
sar rax, 3
sar rbx, 2
lea r12, [rax*8]
add r12, r13
mov qword [rsi + 0x18], r12
lea rax, [rbx*8]
add rax, r13
mov qword [rsi + 0x20], rax
lea rax, [r12 + 8]
mov qword [rsi + 0x18], rax
mov qword [r12], r15
mov r13, qword [rsi]
mov r12, qword [rsi + 8]
cmp r13, r12
je 0x14002131c
cmp byte [r13], 0x5f
je 0x1400218c1
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140020c08
mov r15, rax
mov r12, qword [rsi + 0x18]
cmp r12, qword [rsi + 0x20]
jne 0x1400212f8
mov rcx, qword [rsi + 0x10]
mov rbx, r12
sub rbx, rcx
lea rdx, [rbx + rbx]
cmp rcx, qword [rsp + 0x78]
jne 0x1400212ba
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r13, rax
mov rdx, qword [rsp + 0x78]
cmp r12, rdx
je 0x14002137c
mov rcx, r13
mov r8, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r13
jmp 0x1400212cf
mov rcx, rsi
call fcn.140020be0
test rax, rax
je case.0x140020d53.10
mov rbx, rax
movzx r15d, byte [rbp + 3]
mov ebp, dword [rbp + 4]
mov r12, qword [rsi + 0x1330]
mov rcx, qword [r12 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x1400213e6
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r12, rax
and r15b, 1
lea rax, [rcx + 0x30]
mov qword [r12 + 8], rax
lea rdi, [r12 + rcx]
add rdi, 0x10
mov byte [r12 + rcx + 0x18], 0x3d
mov eax, dword [r12 + rcx + 0x1c]
and ebp, 0x3f
and eax, 0xffffffc0
or eax, ebp
mov dword [r12 + rcx + 0x1c], eax
movzx eax, byte [r12 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r12 + rcx + 0x20], al
lea rax, [0x14130e9e8]
mov qword [r12 + rcx + 0x10], rax
mov qword [r12 + rcx + 0x28], rbx
mov byte [r12 + rcx + 0x30], r14b
mov byte [r12 + rcx + 0x31], r15b
jmp 0x140020c08
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
mov rax, qword [rsi + 0x18]
sub rax, qword [rsi + 0x10]
sar rax, 3
mov qword [rsp + 0x78], rax
lea r14, [rsi + 0x28]
xor edi, edi
jmp 0x1400214bc
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r13, rax
mov qword [rsi + 0x10], rax
test rax, rax
je 0x140021fb7
mov rax, rbx
sar rax, 3
sar rbx, 2
lea r12, [rax*8]
add r12, r13
mov qword [rsi + 0x18], r12
lea rax, [rbx*8]
add rax, r13
mov qword [rsi + 0x20], rax
lea rax, [r12 + 8]
mov qword [rsi + 0x18], rax
mov qword [r12], r15
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x1400214ce
cmp byte [rax], 0x45
je 0x140021a83
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140020c08
mov r15, rax
mov r12, qword [rsi + 0x18]
cmp r12, qword [rsi + 0x20]
jne 0x1400214af
mov rcx, qword [rsi + 0x10]
mov rbx, r12
sub rbx, rcx
lea rdx, [rbx + rbx]
cmp rcx, r14
jne 0x140021471
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r13, rax
cmp r12, r14
je 0x14002152a
mov rcx, r13
mov rdx, r14
mov r8, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r13
jmp 0x140021486
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x40], rax
test rax, rax
je case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x84], eax
lea rax, [rsp + 0x84]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x68]
lea r9, [rsp + 0x40]
mov rcx, rsi
call fcn.140022560
jmp 0x140021e08
mov rcx, rsi
call fcn.14001bc50
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x48]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rcx, rsi
call fcn.140022640
jmp 0x140021e08
test byte [rbp + 3], 1
jne 0x140021805
mov rcx, rsi
call fcn.140020be0
jmp 0x14002180d
movzx ebx, byte [rsi + 0x308]
mov byte [rsi + 0x308], 0
mov rcx, rsi
call fcn.14001bc50
mov qword [rsp + 0x68], rax
mov byte [rsi + 0x308], bl
test rax, rax
je case.0x140020d53.10
mov rax, qword [rsi + 0x18]
sub rax, qword [rsi + 0x10]
sar rax, 3
mov qword [rsp + 0x78], rax
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
cmp rax, rcx
je 0x140021b1c
movzx edx, byte [rax]
cmp dl, 0x5f
mov byte [rsp + 0x88], dl
jne 0x140021ae0
inc rax
mov qword [rsi], rax
lea r14, [rsi + 0x28]
xor edi, edi
jmp 0x1400216e2
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r13, rax
mov qword [rsi + 0x10], rax
test rax, rax
je 0x140021fb7
mov rax, rbx
sar rax, 3
sar rbx, 2
lea r12, [rax*8]
add r12, r13
mov qword [rsi + 0x18], r12
lea rax, [rbx*8]
add rax, r13
mov qword [rsi + 0x20], rax
lea rax, [r12 + 8]
mov qword [rsi + 0x18], rax
mov qword [r12], r15
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
cmp rax, rcx
je 0x1400216f0
cmp byte [rax], 0x45
je 0x140021ae5
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140020c08
mov r15, rax
mov r12, qword [rsi + 0x18]
cmp r12, qword [rsi + 0x20]
jne 0x1400216ce
mov rcx, qword [rsi + 0x10]
mov rbx, r12
sub rbx, rcx
lea rdx, [rbx + rbx]
cmp rcx, r14
jne 0x140021690
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r13, rax
cmp r12, r14
je 0x14002174c
mov rcx, r13
mov rdx, r14
mov r8, rbx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r13
jmp 0x1400216a5
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x68], eax
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x48]
lea r9, [rsp + 0x68]
mov rcx, rsi
call fcn.140021ff0
jmp 0x140021e08
lea rax, [0x14130df3c]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], 2
lea rdx, [rsp + 0xe0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x1400219fd
mov rax, qword [rsi]
cmp qword [rsi + 8], rax
je 0x140021ac5
cmp byte [rax], 0x54
jne 0x140021ac5
mov rcx, rsi
call fcn.14001fb60
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.140024230
jmp 0x140021e08
mov rcx, rsi
call fcn.14001bc50
mov rbx, rax
test rax, rax
je case.0x140020d53.10
mov ebp, dword [rbp + 4]
mov r14, qword [rsi + 0x1330]
mov rcx, qword [r14 + 8]
lea rax, [rcx - 0xfb0]
cmp rax, 0xfffffffffffff00f
ja 0x140021860
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov qword [rax], r14
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r14, rax
lea rax, [rcx + 0x40]
mov qword [r14 + 8], rax
lea rdi, [r14 + rcx]
add rdi, 0x10
mov byte [r14 + rcx + 0x18], 0x38
mov eax, dword [r14 + rcx + 0x1c]
and ebp, 0x3f
and eax, 0xffffffc0
or eax, ebp
mov dword [r14 + rcx + 0x1c], eax
movzx eax, byte [r14 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r14 + rcx + 0x20], al
lea rax, [0x14130ed28]
mov qword [r14 + rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [r14 + rcx + 0x28], xmm0
mov qword [r14 + rcx + 0x38], rbx
xorps xmm0, xmm0
movups xmmword [r14 + rcx + 0x40], xmm0
jmp 0x140020c08
inc r13
mov qword [rsi], r13
lea rcx, [rsp + 0x58]
mov rdx, rsi
mov r8, qword [rsp + 0x88]
call fcn.14001db90
mov rcx, rsi
call fcn.14001bc50
mov qword [rsp + 0x40], rax
test rax, rax
je case.0x140020d53.10
lea rax, [0x14130df20]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 2
lea rdx, [rsp + 0x120]
mov rcx, rsi
call fcn.14001aeb0
mov rcx, qword [rsi + 0x18]
sub rcx, qword [rsi + 0x10]
mov qword [rsp + 0x88], rcx
test al, al
je 0x140021c0f
xor edi, edi
jmp 0x140021982
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r13, rax
mov qword [rsi + 0x10], rax
test rax, rax
je 0x140021fb7
mov rax, r12
sar rax, 3
sar r12, 2
lea rbx, [rax*8]
add rbx, r13
mov qword [rsi + 0x18], rbx
lea rax, [r12*8]
add rax, r13
mov qword [rsi + 0x20], rax
lea rax, [rbx + 8]
mov qword [rsi + 0x18], rax
mov qword [rbx], r15
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021994
cmp byte [rax], 0x45
je 0x140021c25
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140020c08
mov r15, rax
mov rbx, qword [rsi + 0x18]
cmp rbx, qword [rsi + 0x20]
jne 0x140021977
mov rcx, qword [rsi + 0x10]
mov r12, rbx
sub r12, rcx
lea rdx, [r12 + r12]
cmp rcx, qword [rsp + 0x78]
jne 0x140021939
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r13, rax
mov rdx, qword [rsp + 0x78]
cmp rbx, rdx
je 0x1400219f4
mov rcx, r13
mov r8, r12
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r13
jmp 0x14002194e
lea rax, [0x14130df4a]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], 2
lea rdx, [rsp + 0xd0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x140021b73
lea rbx, [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
sub rdi, qword [rsi + 0x10]
sar rdi, 3
lea r14, [rsp + 0x48]
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021a57
cmp byte [rax], 0x45
je 0x140021cde
mov rcx, rsi
call fcn.14001d7b0
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rbx
mov rdx, r14
call fcn.14001da30
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x140021a4e
jmp 0x140021a57
inc rax
mov qword [rsi], rax
lea rdi, [rsp + 0x58]
mov rcx, rdi
mov rdx, rsi
mov r8, qword [rsp + 0x78]
call fcn.14001db90
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x68]
lea r9, [rsp + 0x40]
mov rcx, rsi
mov r8, rdi
call fcn.1400223a0
jmp 0x140021e08
mov rcx, rsi
call 0x140023200
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x140021d07
jmp case.0x140020d53.10
cmp dl, 0x45
jne 0x140021b1c
inc rax
mov qword [rsi], rax
lea rcx, [rsp + 0x58]
mov rdx, rsi
mov r8, qword [rsp + 0x78]
call fcn.14001db90
cmp byte [rsp + 0x88], 0x5f
je 0x140021de4
cmp qword [rsp + 0x60], 1
jne case.0x140020d53.10
jmp 0x140021de4
mov rcx, rsi
call fcn.140020be0
test rax, rax
je case.0x140020d53.10
mov rdi, rax
mov r13, qword [rsi + 0x18]
cmp r13, qword [rsi + 0x20]
jne 0x140021dba
lea r12, [rsi + 0x28]
mov rcx, qword [rsi + 0x10]
mov r14, r13
sub r14, rcx
lea rdx, [r14 + r14]
cmp rcx, r12
je 0x140021d74
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov r15, rax
mov qword [rsi + 0x10], rax
test rax, rax
jne 0x140021d9f
jmp 0x140021fb7
lea rax, [0x14130df4d]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], 2
lea rdx, [rsp + 0xc0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x140021c8d
mov rcx, rsi
call fcn.14001bc50
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
lea rbx, [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
sub rdi, qword [rsi + 0x10]
sar rdi, 3
lea r14, [rsp + 0x48]
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021be3
cmp byte [rax], 0x45
je 0x140021ec5
mov rcx, rsi
call fcn.140023810
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rbx
mov rdx, r14
call fcn.14001da30
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x140021bda
jmp 0x140021be3
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je case.0x140020d53.10
cmp byte [rax], 0x45
jne case.0x140020d53.10
mov r8, qword [rsp + 0x88]
sar r8, 3
inc rax
mov qword [rsi], rax
lea rdi, [rsp + 0x68]
mov rcx, rdi
mov rdx, rsi
call fcn.14001db90
movzx eax, byte [rbp + 3]
and al, 1
mov ecx, dword [rbp + 4]
shl ecx, 0x19
sar ecx, 0x19
mov dword [rsp + 0x84], ecx
lea rcx, [rsp + 0x84]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], r14b
lea rdx, [rsp + 0x58]
lea r8, [rsp + 0x40]
mov rcx, rsi
mov r9, rdi
call fcn.140022290
jmp 0x140021e08
lea rax, [0x14130df50]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 2
lea rdx, [rsp + 0xb0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x140021d19
lea rdx, [0x14130df53]
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140024500
inc rax
mov qword [rsi], rax
lea rbx, [rsp + 0x48]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14001db90
mov rcx, rsi
mov rdx, rbx
call fcn.140024390
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1400242d0
jmp 0x140021e08
lea rax, [0x14130df59]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 2
lea rdx, [rsp + 0xa0]
mov rcx, rsi
call fcn.14001aeb0
test al, al
je 0x140021e10
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1400245b0
jmp 0x140021e08
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140021fb7
mov r15, rax
cmp r13, r12
je 0x140021d9b
mov rcx, r15
mov rdx, r12
mov r8, r14
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rsi + 0x10], r15
mov rax, r14
sar rax, 3
sar r14, 2
lea r13, [r15 + rax*8]
mov qword [rsi + 0x18], r13
lea rax, [r15 + r14*8]
mov qword [rsi + 0x20], rax
lea rax, [r13 + 8]
mov qword [rsi + 0x18], rax
mov qword [r13], rdi
lea rcx, [rsp + 0x58]
mov rdx, rsi
mov r8, qword [rsp + 0x78]
call fcn.14001db90
cmp qword [rsp + 0x60], 1
jne case.0x140020d53.10
mov eax, dword [rbp + 4]
shl eax, 0x19
sar eax, 0x19
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x68]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x40]
mov rcx, rsi
call fcn.140022480
mov rdi, rax
jmp 0x140020c08
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021ef3
cmp byte [rax], 0x75
jne 0x140021ef3
inc rax
mov qword [rsi], rax
mov rcx, rsi
call fcn.14001ee20
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x140020d53.10
mov r8, qword [rax]
lea rcx, [rsp + 0x90]
mov rdx, rax
call qword [r8 + 0x30]
cmp qword [rsp + 0x98], 8
jne 0x140021e7a
mov rax, qword [rsp + 0x90]
movabs rcx, 0x666f646975755f5f
cmp qword [rax], rcx
je 0x140021f52
lea rbx, [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
sub rdi, qword [rsi + 0x10]
lea r14, [rsp + 0x48]
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021e99
cmp byte [rax], 0x45
je 0x140021f13
mov rcx, rsi
call fcn.14001d7b0
mov qword [rsp + 0x48], rax
test rax, rax
je case.0x140020d53.10
mov rcx, rbx
mov rdx, r14
call fcn.14001da30
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x140021e94
jmp 0x140021e99
inc rax
mov qword [rsi], rax
lea rbx, [rsp + 0x48]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14001db90
lea rdx, [rsp + 0x58]
mov rcx, rsi
mov r8, rbx
call fcn.140024440
jmp 0x140021e08
test edi, edi
sete dl
mov rcx, rsi
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x140024650
inc rax
mov qword [rsi], rax
sar rdi, 3
lea rbx, [rsp + 0x48]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14001db90
mov dword [rsp + 0x40], 1
lea rdx, [rsp + 0x58]
lea r9, [rsp + 0x40]
mov rcx, rsi
mov r8, rbx
call fcn.1400223a0
jmp 0x140021e08
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140021e7a
movzx ecx, byte [rax]
cmp ecx, 0x7a
je 0x140021f80
cmp ecx, 0x74
jne 0x140021e7a
inc rax
mov qword [rsi], rax
mov rcx, rsi
call fcn.14001bc50
jmp 0x140021f8e
inc rax
mov qword [rsi], rax
mov rcx, rsi
call fcn.140020be0
mov qword [rsp + 0x68], rax
test rax, rax
je case.0x140020d53.10
lea rcx, [rsi + 0x10]
mov rdi, qword [rsi + 0x18]
sub rdi, qword [rsi + 0x10]
lea rdx, [rsp + 0x68]
call fcn.14001da30
jmp 0x140021f19
call fcn.140013130
lea rcx, [0x14130e5b0]
lea rdx, [0x14130d168]
mov r8d, 0xa52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__assert]
mov byte [rsi + 0x308], bl
mov rcx, rax
call fcn.14000d6a0
int3
jne case.0x140022780.84
adc dh, al
or r11d, dword [rax]
and byte [r11 + r9 + 0x1c], 0xc0
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rdx, qword [rcx]
mov rcx, qword [rcx + 8]
mov rax, rcx
sub rax, rdx
cmp rax, 3
jae 0x14002322a
cmp rax, 2
je 0x140023245
jmp 0x140023561
movzx eax, word [rdx]
xor eax, 0x7066
movzx r8d, byte [rdx + 2]
xor r8d, 0x54
or r8w, ax
je 0x1400233f7
movzx eax, word [rdx]
cmp eax, 0x7066
je 0x140023364
movzx eax, word [rdx]
cmp eax, 0x4c66
jne 0x140023561
add rdx, 2
mov qword [rsi], rdx
cmp rcx, rdx
je 0x140023561
movsx eax, byte [rdx]
add eax, 0xffffffd0
cmp eax, 9
ja 0x140023561
mov r8, rdx
nop word cs:[rax + rax]
movsx eax, byte [r8]
add eax, 0xffffffd0
cmp eax, 9
ja 0x1400232aa
inc r8
mov qword [rsi], r8
cmp r8, rcx
jne 0x140023290
mov r8, rcx
xor eax, eax
cmp r8, rdx
je 0x140023563
cmp r8, rcx
je 0x140023563
cmp byte [r8], 0x70
jne 0x140023561
lea rax, [r8 + 1]
mov qword [rsi], rax
cmp rax, rcx
je 0x140023537
cmp byte [rax], 0x72
jne 0x1400232e7
add r8, 2
mov qword [rsi], r8
mov rax, r8
cmp rax, rcx
je 0x140023537
cmp byte [rax], 0x56
jne 0x1400232fb
inc rax
mov qword [rsi], rax
cmp rax, rcx
je 0x140023537
cmp byte [rax], 0x4b
jne 0x14002330f
inc rax
mov qword [rsi], rax
cmp rcx, rax
je 0x14002353a
movsx edx, byte [rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x14002353a
mov rdx, rax
mov r8, rax
movsx r9d, byte [r8]
add r9d, 0xffffffd0
cmp r9d, 9
ja 0x14002334f
inc r8
mov qword [rsi], r8
inc rdx
cmp r8, rcx
jne 0x14002332d
mov rdx, rcx
mov r8, rcx
sub rdx, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
mov rax, r8
jmp 0x140023542
lea rdi, [rdx + 2]
mov qword [rsi], rdi
cmp rdi, rcx
je 0x140023561
cmp byte [rdi], 0x72
jne 0x140023383
add rdx, 3
mov qword [rsi], rdx
mov rdi, rdx
cmp rdi, rcx
je 0x140023561
cmp byte [rdi], 0x56
jne 0x140023397
inc rdi
mov qword [rsi], rdi
cmp rdi, rcx
je 0x140023561
cmp byte [rdi], 0x4b
jne 0x1400233ab
inc rdi
mov qword [rsi], rdi
cmp rcx, rdi
je 0x140023561
movsx eax, byte [rdi]
add eax, 0xffffffd0
xor ebx, ebx
cmp eax, 9
ja 0x140023491
mov rbx, rdi
mov rax, rdi
nop dword [rax + rax]
movsx edx, byte [rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x1400233ef
inc rax
mov qword [rsi], rax
inc rbx
cmp rax, rcx
jne 0x1400233d0
mov rbx, rcx
mov rax, rcx
sub rbx, rdi
jmp 0x140023496
add rdx, 3
mov qword [rsi], rdx
mov rdi, qword [rsi + 0x1330]
mov rcx, qword [rdi + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140023442
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14002356d
mov qword [rax], rdi
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov rdi, rax
lea rax, [rcx + 0x30]
mov qword [rdi + 8], rax
lea rax, [rdi + rcx]
add rax, 0x10
mov byte [rdi + rcx + 0x18], 7
and byte [rdi + rcx + 0x1c], 0xc0
movzx edx, byte [rdi + rcx + 0x20]
and dl, 0xc0
or dl, 0x15
mov byte [rdi + rcx + 0x20], dl
lea rdx, [0x14130dd00]
mov qword [rdi + rcx + 0x10], rdx
lea rdx, [0x14130f96c]
mov qword [rdi + rcx + 0x28], rdx
mov qword [rdi + rcx + 0x30], 4
jmp 0x140023563
mov rax, rdi
xor edi, edi
cmp rax, rcx
je 0x140023561
cmp byte [rax], 0x5f
jne 0x140023561
inc rax
mov qword [rsi], rax
mov r14, qword [rsi + 0x1330]
mov rcx, qword [r14 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x1400234f2
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14002356d
mov qword [rax], r14
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r14, rax
lea rax, [rcx + 0x30]
mov qword [r14 + 8], rax
lea rax, [r14 + rcx]
add rax, 0x10
mov byte [r14 + rcx + 0x18], 0x3f
and byte [r14 + rcx + 0x1c], 0xc0
movzx edx, byte [r14 + rcx + 0x20]
and dl, 0xc0
or dl, 0x15
mov byte [r14 + rcx + 0x20], dl
lea rdx, [0x14130f988]
mov qword [r14 + rcx + 0x10], rdx
mov qword [r14 + rcx + 0x28], rdi
mov qword [r14 + rcx + 0x30], rbx
jmp 0x140023563
mov rax, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
cmp rax, rcx
je 0x140023561
cmp byte [rax], 0x5f
jne 0x140023561
inc rax
mov qword [rsi], rax
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.140029030
jmp 0x140023563
xor eax, eax
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
call fcn.140013130
int3
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
cmp rax, rdx
je 0x140023743
cmp byte [rax], 0x66
jne 0x140023743
mov rsi, rcx
lea rcx, [rax + 1]
mov qword [rsi], rcx
cmp rdx, rcx
je 0x140023743
movsx ecx, byte [rcx]
add ecx, 0xffffffb4
cmp ecx, 0x26
ja 0x140023743
movabs r8, 0x4100000041
bt r8, rcx
jae 0x140023743
movabs r8, 0x3fffffffbf
xor r14d, r14d
bt r8, rcx
setb r8b
movabs r15, 0x3effffffff
shr r15, cl
lea rcx, [rax + 2]
mov qword [rsi], rcx
sub rdx, rcx
cmp rdx, 2
jb 0x140023743
mov r14b, r8b
movzx ecx, byte [rax + 2]
mov r8d, 0x3d
xor edx, edx
lea rbx, [0x14130e1d0]
jmp 0x14002363b
inc r9
mov rdx, r9
cmp r8, rdx
je 0x14002366d
lea r9, [rdx + r8]
shr r9, 1
mov r10, r9
shl r10, 4
cmp cl, byte [r10 + rbx]
jg 0x140023630
jne 0x140023665
movzx r10d, byte [r10 + rbx + 1]
cmp byte [rax + 3], r10b
setg r10b
test r10b, 1
jne 0x140023630
mov r8, r9
cmp r8, rdx
jne 0x14002363b
shl rdx, 4
cmp cl, byte [rdx + rbx]
jne 0x140023743
add rbx, rdx
movzx ecx, byte [rax + 3]
cmp cl, byte [rbx + 1]
jne 0x140023743
add rax, 4
mov qword [rsi], rax
movzx eax, byte [rbx + 2]
cmp eax, 2
je 0x1400236ba
cmp eax, 4
jne 0x140023743
mov rdi, qword [rbx + 8]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp byte [rax + rdi - 1], 0x2a
jne 0x140023743
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140023743
mov rdi, rax
test r15b, 1
jne 0x1400236d5
xor r15d, r15d
jmp 0x1400236f6
mov rcx, rsi
call fcn.140020be0
test rax, rax
je 0x140023743
test r14, r14
mov rcx, rax
cmove rcx, rdi
mov r15, rdi
cmove r15, rax
mov rdi, rcx
mov rbx, qword [rbx + 8]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp rax, 8
jb 0x1400237ef
movabs rcx, 0x726f74617265706f
cmp qword [rbx], rcx
jne 0x1400237ef
lea r12, [rbx + 8]
mov r13, rax
add r13, 0xfffffffffffffff8
je 0x140023755
cmp byte [r12], 0x20
jne 0x140023758
add rbx, 9
add rax, 0xfffffffffffffff7
mov r13, rax
mov r12, rbx
jmp 0x140023758
xor eax, eax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r13d, r13d
mov rbx, qword [rsi + 0x1330]
mov rcx, qword [rbx + 8]
lea rax, [rcx - 0xfb0]
cmp rax, 0xfffffffffffff00f
ja 0x14002379c
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140023809
mov qword [rax], rbx
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov rbx, rax
lea rax, [rcx + 0x40]
mov qword [rbx + 8], rax
mov byte [rbx + rcx + 0x18], 0x43
and byte [rbx + rcx + 0x1c], 0xc0
lea rax, [rbx + rcx]
add rax, 0x10
movzx edx, byte [rbx + rcx + 0x20]
and dl, 0xc0
or dl, 0x15
mov byte [rbx + rcx + 0x20], dl
lea rdx, [0x14130fa30]
mov qword [rbx + rcx + 0x10], rdx
mov qword [rbx + rcx + 0x28], rdi
mov qword [rbx + rcx + 0x30], r15
mov qword [rbx + rcx + 0x38], r12
mov qword [rbx + rcx + 0x40], r13
mov byte [rbx + rcx + 0x48], r14b
jmp 0x140023745
lea rcx, [0x14130e5b0]
lea rdx, [0x14130d168]
mov r8d, 0xa52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__assert]
call fcn.140013130
int3
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rbx, rcx
call fcn.14001bc50
test rax, rax
je 0x140024172
mov rsi, rax
mov rcx, rbx
call fcn.140020be0
test rax, rax
je 0x140024172
mov r9, qword [rbx]
mov rcx, qword [rbx + 8]
mov r8, r9
cmp r9, rcx
je 0x140023e34
cmp byte [r9], 0x6e
mov r8, r9
jne 0x140023e34
lea r8, [r9 + 1]
mov qword [rbx], r8
cmp rcx, r8
je 0x140024172
movsx edx, byte [r8]
add edx, 0xffffffd0
xor r10d, r10d
cmp edx, 9
ja 0x140023e7a
nop dword [rax]
movsx edx, byte [r8]
add edx, 0xffffffd0
cmp edx, 9
ja 0x140023e6a
inc r8
mov qword [rbx], r8
cmp r8, rcx
jne 0x140023e50
mov r8, rcx
mov r10, r8
sub r10, r9
cmp r8, rcx
jne 0x140023e86
jmp 0x140024172
xor r9d, r9d
cmp r8, rcx
je 0x140024172
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rsi
mov rax, qword [rbx + 0x18]
sub rax, qword [rbx + 0x10]
sar rax, 3
mov qword [rsp + 0x40], rax
lea r9, [rbx + 0x28]
lea r12, [0x14130dd00]
mov r14, r9
jmp 0x140023f24
lea rax, [r15 + 0x30]
mov qword [rsi + 8], rax
mov byte [rsi + r15 + 0x18], 7
and byte [rsi + r15 + 0x1c], 0xc0
movzx eax, byte [rsi + r15 + 0x20]
and al, 0xc0
or al, 0x15
mov byte [rsi + r15 + 0x20], al
mov qword [rsi + r15 + 0x10], r12
mov qword [rsi + r15 + 0x28], rbp
mov qword [rsi + r15 + 0x30], r13
mov r13, qword [rbx + 0x18]
cmp r13, qword [rbx + 0x20]
je 0x140023ff0
lea rax, [rsi + r15]
add rax, 0x10
lea rcx, [r13 + 8]
mov qword [rbx + 0x18], rcx
mov qword [r13], rax
mov r8, qword [rbx]
mov rcx, qword [rbx + 8]
cmp r8, rcx
je 0x140024172
cmp byte [r8], 0x5f
jne 0x140024077
inc r8
mov qword [rbx], r8
cmp rcx, r8
je 0x140023f90
movsx edx, byte [r8]
add edx, 0xffffffd0
mov ebp, 0
mov r13d, 0
cmp edx, 9
ja 0x140023f95
mov r13, r8
nop word cs:[rax + rax]
movsx edx, byte [r13]
add edx, 0xffffffd0
cmp edx, 9
ja 0x140023f7b
inc r13
mov qword [rbx], r13
cmp r13, rcx
jne 0x140023f60
mov r13, rcx
sub r13, r8
mov rbp, r8
jmp 0x140023f95
xor ebp, ebp
xor r13d, r13d
mov rsi, qword [rbx + 0x1330]
mov r15, qword [rsi + 8]
lea rax, [r15 - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140023ec0
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024188
mov qword [rax], rsi
mov qword [rax + 8], 0
mov qword [rbx + 0x1330], rax
xor r15d, r15d
mov rsi, rax
mov r9, r14
jmp 0x140023ec0
mov rcx, qword [rbx + 0x10]
mov rdi, r13
sub rdi, rcx
lea rdx, [rdi + rdi]
cmp rcx, r9
je 0x14002401c
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov rbp, rax
mov qword [rbx + 0x10], rax
test rax, rax
mov r9, r14
jne 0x14002404d
jmp 0x140024188
mov rcx, rdx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024188
mov rbp, rax
mov r9, r14
cmp r13, r14
je 0x140024049
mov rcx, rbp
mov rdx, r9
mov r8, rdi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov r9, r14
mov qword [rbx + 0x10], rbp
mov rax, rdi
sar rax, 3
sar rdi, 2
lea r13, [rax*8]
add r13, rbp
lea rax, [rdi*8]
add rax, rbp
mov qword [rbx + 0x20], rax
jmp 0x140023f00
cmp r8, rcx
je 0x140024095
cmp byte [r8], 0x70
jne 0x140024095
inc r8
mov qword [rbx], r8
mov sil, 1
cmp r8, rcx
jne 0x1400240a0
jmp 0x140024172
xor esi, esi
cmp r8, rcx
je 0x140024172
cmp byte [r8], 0x45
jne 0x140024172
inc r8
mov qword [rbx], r8
lea rcx, [rsp + 0x48]
mov rdx, rbx
mov r8, qword [rsp + 0x40]
call fcn.14001db90
mov rdi, qword [rbx + 0x1330]
mov rcx, qword [rdi + 8]
lea rax, [rcx - 0xfa0]
cmp rax, 0xfffffffffffff00f
ja 0x140024106
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024188
mov qword [rax], rdi
mov qword [rax + 8], 0
mov qword [rbx + 0x1330], rax
xor ecx, ecx
mov rdi, rax
lea rax, [rcx + 0x50]
mov qword [rdi + 8], rax
lea rdx, [rdi + rcx]
add rdx, 0x10
mov byte [rdi + rcx + 0x18], 0x37
and byte [rdi + rcx + 0x1c], 0xc0
movzx eax, byte [rdi + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [rdi + rcx + 0x20], al
lea rax, [0x14130fe38]
mov qword [rdi + rcx + 0x10], rax
mov rax, qword [rsp + 0x38]
mov qword [rdi + rcx + 0x28], rax
mov rax, qword [rsp + 0x30]
mov qword [rdi + rcx + 0x30], rax
mov rax, qword [rsp + 0x28]
mov qword [rdi + rcx + 0x38], rax
mov rax, qword [rsp + 0x20]
mov qword [rdi + rcx + 0x40], rax
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rdi + rcx + 0x48], xmm0
mov byte [rdi + rcx + 0x58], sil
jmp 0x140024174
xor edx, edx
mov rax, rdx
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140013130
int3
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rbx, qword [rcx + 0x1330]
mov r14, qword [rbx + 8]
lea rax, [r14 - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140024550
mov rdi, rcx
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x1400245a8
mov qword [rax], rbx
mov qword [rax + 8], 0
mov qword [rdi + 0x1330], rax
xor r14d, r14d
mov rbx, rax
lea rax, [r14 + 0x30]
mov qword [rbx + 8], rax
lea rdi, [rbx + r14]
add rdi, 0x10
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov byte [rbx + r14 + 0x18], 7
and byte [rbx + r14 + 0x1c], 0xc0
movzx ecx, byte [rbx + r14 + 0x20]
and cl, 0xc0
or cl, 0x15
mov byte [rbx + r14 + 0x20], cl
lea rcx, [0x14130dd00]
mov qword [rbx + r14 + 0x10], rcx
mov qword [rbx + r14 + 0x28], rsi
mov qword [rbx + r14 + 0x30], rax
mov rax, rdi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
call fcn.140013130
int3
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x20
mov ebx, edx
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, qword [rcx + 8]
mov rdx, rcx
sub rdx, rax
cmp rdx, 3
jae 0x14002467f
cmp rdx, 2
je 0x14002469b
jmp 0x1400246aa
movzx edx, word [rax]
xor edx, 0x7273
movzx r8d, byte [rax + 2]
xor r8d, 0x4e
or r8w, dx
je 0x1400248e2
movzx edx, word [rax]
cmp edx, 0x7273
je 0x140024747
mov rcx, rsi
call fcn.14002a6d0
mov rdi, rax
test rax, rax
je 0x140024d3d
test bl, bl
je 0x140024d3d
mov rbx, qword [rsi + 0x1330]
mov rcx, qword [rbx + 8]
lea rax, [rcx - 0xfd0]
cmp rax, 0xfffffffffffff00f
ja 0x14002470a
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], rbx
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov rbx, rax
lea rax, [rcx + 0x20]
mov qword [rbx + 8], rax
mov byte [rbx + rcx + 0x18], 0x2a
and byte [rbx + rcx + 0x1c], 0xc0
movzx eax, byte [rbx + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [rbx + rcx + 0x20], al
lea rax, [0x1413103d0]
mov qword [rbx + rcx + 0x10], rax
mov qword [rbx + rcx + 0x28], rdi
lea rdi, [rbx + rcx]
add rdi, 0x10
jmp 0x140024d3d
add rax, 2
mov qword [rsi], rax
cmp rcx, rax
je 0x140024a6b
movsx eax, byte [rax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x140024a6b
mov rcx, rsi
call fcn.14002a5e0
test rax, rax
je 0x140024d3b
mov r14, rax
xor edi, edi
test bl, bl
je 0x140024bce
lea r15, [0x1413103d0]
lea r12, [0x141310100]
xor ebx, ebx
jmp 0x1400247bd
cmp byte [rax], 0x45
je 0x140024c9a
mov rcx, rsi
call fcn.14002a5e0
mov r14, rax
test rax, rax
je 0x140024d3d
mov r13, qword [rsi + 0x1330]
mov rcx, qword [r13 + 8]
test rbx, rbx
je 0x14002485c
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x14002480a
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], r13
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r13, rax
lea rax, [rcx + 0x30]
mov qword [r13 + 8], rax
mov byte [r13 + rcx + 0x18], 0x16
and byte [r13 + rcx + 0x1c], 0xc0
movzx eax, byte [r13 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r13 + rcx + 0x20], al
mov qword [r13 + rcx + 0x10], r12
mov qword [r13 + rcx + 0x28], rbx
lea rbx, [rcx + r13]
add rbx, 0x10
lea rax, [rcx + r13]
add rax, 0x30
mov qword [rax], r14
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x1400247a0
jmp 0x1400247a9
lea rax, [rcx - 0xfd0]
cmp rax, 0xfffffffffffff00f
ja 0x140024895
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], r13
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r13, rax
lea rax, [rcx + 0x20]
mov qword [r13 + 8], rax
mov byte [r13 + rcx + 0x18], 0x2a
and byte [r13 + rcx + 0x1c], 0xc0
lea rbx, [rcx + r13]
add rbx, 0x10
movzx eax, byte [r13 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r13 + rcx + 0x20], al
mov qword [r13 + rcx + 0x10], r15
lea rax, [rcx + r13]
add rax, 0x28
mov qword [rax], r14
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x1400247a0
jmp 0x1400247a9
add rax, 3
mov qword [rsi], rax
mov rcx, rsi
call fcn.14002a450
test rax, rax
je 0x140024d3b
mov rbx, rax
mov rax, qword [rsi]
cmp qword [rsi + 8], rax
je 0x1400249ac
cmp byte [rax], 0x49
jne 0x1400249ac
xor edi, edi
mov rcx, rsi
xor edx, edx
call fcn.14001f340
test rax, rax
je 0x140024d3d
mov r14, rax
mov rdi, qword [rsi + 0x1330]
mov rcx, qword [rdi + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x14002496f
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], rdi
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov rdi, rax
lea rax, [rcx + 0x30]
mov qword [rdi + 8], rax
mov byte [rdi + rcx + 0x18], 0x29
and byte [rdi + rcx + 0x1c], 0xc0
movzx eax, byte [rdi + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [rdi + rcx + 0x20], al
lea rax, [0x141310bc8]
mov qword [rdi + rcx + 0x10], rax
mov qword [rdi + rcx + 0x28], rbx
lea rbx, [rdi + rcx]
add rbx, 0x10
mov qword [rdi + rcx + 0x30], r14
xor edi, edi
lea r15, [0x141310100]
jmp 0x140024a12
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r12, rax
lea rax, [rcx + 0x30]
mov qword [r12 + 8], rax
mov byte [r12 + rcx + 0x18], 0x16
and byte [r12 + rcx + 0x1c], 0xc0
movzx eax, byte [r12 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r12 + rcx + 0x20], al
mov qword [r12 + rcx + 0x10], r15
mov qword [r12 + rcx + 0x28], rbx
lea rbx, [r12 + rcx]
add rbx, 0x10
mov qword [r12 + rcx + 0x30], r14
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140024a24
cmp byte [rax], 0x45
je 0x140024b2f
mov rcx, rsi
call fcn.14002a5e0
test rax, rax
je 0x140024d3d
mov r14, rax
mov r12, qword [rsi + 0x1330]
mov rcx, qword [r12 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x1400249d7
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
jne 0x1400249c0
call fcn.140013130
mov rcx, rsi
call fcn.14002a450
test rax, rax
je 0x140024d3b
mov rbx, rax
mov rax, qword [rsi]
cmp qword [rsi + 8], rax
je 0x140024ca0
cmp byte [rax], 0x49
jne 0x140024ca0
xor edi, edi
mov rcx, rsi
xor edx, edx
call fcn.14001f340
test rax, rax
je 0x140024d3d
mov r14, rax
mov rdi, qword [rsi + 0x1330]
mov rcx, qword [rdi + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140024aed
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], rdi
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov rdi, rax
lea rax, [rcx + 0x30]
mov qword [rdi + 8], rax
mov byte [rdi + rcx + 0x18], 0x29
and byte [rdi + rcx + 0x1c], 0xc0
movzx eax, byte [rdi + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [rdi + rcx + 0x20], al
lea rax, [0x141310bc8]
mov qword [rdi + rcx + 0x10], rax
mov qword [rdi + rcx + 0x28], rbx
lea rbx, [rdi + rcx]
add rbx, 0x10
mov qword [rdi + rcx + 0x30], r14
jmp 0x140024ca0
inc rax
mov qword [rsi], rax
mov rcx, rsi
call fcn.14002a6d0
test rax, rax
je 0x140024d3b
mov r14, rax
mov r12, qword [rsi + 0x1330]
mov rcx, qword [r12 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140024b8e
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r12, rax
lea rax, [rcx + 0x30]
mov qword [r12 + 8], rax
mov byte [r12 + rcx + 0x18], 0x16
and byte [r12 + rcx + 0x1c], 0xc0
lea rdi, [r12 + rcx]
add rdi, 0x10
movzx eax, byte [r12 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r12 + rcx + 0x20], al
mov qword [r12 + rcx + 0x10], r15
mov qword [r12 + rcx + 0x28], rbx
mov qword [r12 + rcx + 0x30], r14
jmp 0x140024d3d
lea r15, [0x141310100]
xor ebx, ebx
jmp 0x140024c3d
lea rax, [rcx + 0x30]
mov qword [r12 + 8], rax
mov byte [r12 + rcx + 0x18], 0x16
and byte [r12 + rcx + 0x1c], 0xc0
movzx eax, byte [r12 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r12 + rcx + 0x20], al
mov qword [r12 + rcx + 0x10], r15
mov qword [r12 + rcx + 0x28], rbx
lea rbx, [r12 + rcx]
add rbx, 0x10
mov qword [r12 + rcx + 0x30], r14
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
je 0x140024c29
cmp byte [rax], 0x45
je 0x140024c9a
mov rcx, rsi
call fcn.14002a5e0
mov r14, rax
test rax, rax
je 0x140024d3d
test rbx, rbx
je 0x140024c8c
mov r12, qword [rsi + 0x1330]
mov rcx, qword [r12 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140024be0
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r12, rax
jmp 0x140024be0
mov rbx, r14
mov rax, qword [rsi]
cmp rax, qword [rsi + 8]
jne 0x140024c24
jmp 0x140024c29
inc rax
mov qword [rsi], rax
mov rcx, rsi
call fcn.14002a6d0
test rax, rax
je 0x140024d3b
mov r14, rax
mov r15, qword [rsi + 0x1330]
mov rcx, qword [r15 + 8]
lea rax, [rcx - 0xfc0]
cmp rax, 0xfffffffffffff00f
ja 0x140024cf8
mov ecx, 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140024a66
mov qword [rax], r15
mov qword [rax + 8], 0
mov qword [rsi + 0x1330], rax
xor ecx, ecx
mov r15, rax
lea rax, [rcx + 0x30]
mov qword [r15 + 8], rax
lea rdi, [r15 + rcx]
add rdi, 0x10
mov byte [r15 + rcx + 0x18], 0x16
and byte [r15 + rcx + 0x1c], 0xc0
movzx eax, byte [r15 + rcx + 0x20]
and al, 0xc0
or al, 0x15
mov byte [r15 + rcx + 0x20], al
lea rax, [0x141310100]
mov qword [r15 + rcx + 0x10], rax
mov qword [r15 + rcx + 0x28], rbx
mov qword [r15 + rcx + 0x30], r14
jmp 0x140024d3d
xor edi, edi
mov rax, rdi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret