Function at 0x14000b888
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x928]
sub rsp, 0xa00
mov rax, qword [0x14002c168]
xor rax, rsp
mov qword [rbp + 0x8f8], rax
xor eax, eax
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rax
mov dword [rbp + 0x298], eax
mov dword [rbp + 0x32c], eax
mov dword [rbp + 0x328], eax
cmp ecx, 2
jle 0x14000b8fe
mov eax, 0x80070057
jmp 0x140018660
mov r13d, eax
mov dword [rbp + 0x29c], eax
mov r15d, 1
jne 0x14000b933
mov rdx, qword [rdx + 8]
lea rcx, [0x140028614]
call qword [sym.imp.msvcrt.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
cmove r13d, r15d
mov dword [rbp + 0x29c], r13d
mov dl, 3
lea rcx, [0x14002cc78]
call fcn.140024ae0
lea rcx, [0x14002cc78]
call fcn.1400244c8
test al, al
je 0x14000b990
xor eax, eax
lea r9, [rbp + 0x298]
lea r8, str.LicenseType
mov qword [rsp + 0x20], rax
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionDeviceLicensing
mov rcx, 0xffffffff80000002
call fcn.140023a88
test eax, eax
js 0x14000b990
cmp dword [rbp + 0x298], r15d
jne 0x14000b990
xor eax, eax
mov r14d, eax
jmp 0x14001866a
xor eax, eax
mov qword [rbp + 0x338], rax
mov r14d, eax
mov dword [rbp + 0x2a0], eax
mov dword [rbp + 0x2a4], eax
mov qword [rbp + 0x340], rax
mov dword [rbp + 0x2a8], eax
lea edx, [rax + 4]
mov dword [rbp + 0x2ac], eax
lea ecx, [rax + 0x40]
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x340]
mov qword [rbp - 0x58], rax
mov rsi, rax
call fcn.14000b280
or dword [rbp - 0x24], 0xffffffff
lea rcx, [0x14002c240]
xor eax, eax
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
mov r12d, 0x8007000e
test rsi, rsi
jne 0x14000ba1b
mov qword [rbp + 0x340], rax
mov r15d, r12d
jmp 0x140010682
xorps xmm0, xmm0
mov qword [rbp + 0x340], rsi
movups xmmword [rbp + 0x6d8], xmm0
mov qword [rbp - 0x80], rax
mov qword [rbp + 0x808], rax
mov qword [rbp + 0x6d0], rax
mov dword [rbp + 0x2b0], eax
mov dword [rbp + 0x2b4], eax
mov qword [rbp + 0x458], rcx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov esi, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
xor eax, eax
test r13, r13
je 0x14000bc7d
mov rax, qword [rbp + 0x458]
lea edx, [rsi + 0x78]
mov qword [rbp - 0x80], r13
movups xmm0, xmmword [rax]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r13 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r13 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r13 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r13 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r13 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r13 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r13 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r13 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r13 + rdx + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x2c0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
mov qword [rsp + 0x68], rax
xor eax, eax
test rdx, rdx
je 0x14000bc7d
mov rax, qword [rbp + 0x2c0]
mov qword [rbp + 0x808], rdx
mov rcx, qword [rax]
mov qword [rdx], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x2c8], rax
mov dword [rbp + 0x2b8], 0xc
lea r8, [rbp + 0x2d0]
mov edx, 0x7fffffff
lea rcx, str.Allow_WindowsSubscription
call fcn.140025640
xor ecx, ecx
test eax, eax
jns 0x14000bb8d
xor eax, eax
mov qword [rbp + 0x2d0], rax
jmp 0x14000bfef
mov rax, qword [rbp + 0x2d0]
mov r9d, 0xc0000095
add rax, r15
mov qword [rbp + 0x2d0], rax
lea eax, [rax*2 + 4]
cmp eax, 4
jb 0x14000bbbb
mov r15d, ecx
mov dword [rbp + 0x2b8], eax
jmp 0x14000bbc4
mov eax, dword [rbp + 0x2b8]
mov r15d, r9d
mov dword [rbp - 0x30], r15d
test r15d, r15d
js 0x14000e2e1
add eax, 0xc4
or r8d, 0xffffffff
mov ecx, 0xc4
mov edx, r8d
cmp eax, ecx
mov r10d, 0x10000000
cmovae edx, eax
sbb r15d, r15d
and r15d, r9d
add r15d, r10d
mov dword [rbp - 0x30], r15d
cmp eax, ecx
jb 0x14000e2ca
lea eax, [rdx + 8]
mov ecx, r8d
cmp eax, edx
cmovae ecx, eax
sbb r15d, r15d
and r15d, r9d
add r15d, r10d
mov dword [rbp - 0x30], r15d
cmp eax, edx
jb 0x14000e2ca
mov dword [rbp + 0x2b8], esi
lea eax, [rcx + 8]
mov edx, r8d
cmp eax, ecx
cmovae edx, eax
sbb r15d, r15d
and r15d, r9d
add r15d, r10d
mov dword [rbp - 0x30], r15d
cmp eax, ecx
jb 0x14000e2ca
mov dword [rbp + 0x6cc], edx
mov esi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
xor eax, eax
test rdx, rdx
jne 0x14000bc88
mov r15d, 0xc0000017
jmp 0x14000bff5
mov qword [rbp + 0x6d0], rdx
mov dword [rbp + 0x6c8], eax
mov dword [rbp - 0x20], eax
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x14000e5dd
mov ecx, dword [rbp + 0x6cc]
lea rax, [rdx + 8]
add rcx, rdx
cmp rax, rcx
jbe 0x14000bcc2
mov r15d, 0xc0000023
jmp 0x14000e2dd
mov dword [rdx], 4
mov eax, dword [rbp - 0x20]
mov dword [r8], eax
mov ecx, dword [rbp + 0x6c8]
inc ecx
mov dword [rbp + 0x6c8], ecx
xor eax, eax
cmp qword [rbp + 0x6d0], rax
jne 0x14000bd25
mov dword [rbp - 0x18], 0xa4
mov eax, dword [rbp + 0x6cc]
lea edx, [rax + 0xa4]
cmp edx, eax
jb 0x14000bd13
inc ecx
mov dword [rbp + 0x6cc], edx
mov dword [rbp + 0x6c8], ecx
xor eax, eax
jmp 0x14000be16
mov r13d, 0xc0000095
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000e2e1
mov r8, qword [rbp + 0x6d0]
mov edx, eax
test ecx, ecx
je 0x14000bd5e
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14000be4d
mov dword [rbp - 0x18], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x14000e5d2
inc edx
mov r8, r9
cmp edx, ecx
jb 0x14000bd32
xor eax, eax
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x14000e5d2
mov ecx, dword [rbp + 0x6cc]
mov r15d, eax
add rcx, qword [rbp + 0x6d0]
mov dword [rbp - 0x30], eax
lea rax, [r8 + 0xa4]
cmp rax, rcx
ja 0x14000bcb7
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [r13]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [r13 + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [r13 + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [r13 + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [r13 + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [r13 + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [r13 + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [r13 + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
mov ecx, dword [rbp + 0x6c8]
inc ecx
mov dword [rbp + 0x6c8], ecx
xor eax, eax
test r15d, r15d
js 0x14000e2e1
mov edx, dword [rbp + 0x6cc]
cmp qword [rbp + 0x6d0], rax
jne 0x14000be59
mov dword [rbp - 0x14], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x14000e5d2
mov edx, eax
mov esi, 1
mov rax, qword [rbp + 0x2c8]
add ecx, esi
mov qword [rbp + 0x2d8], rax
jmp 0x14000bf11
mov r15d, 0xc0000095
mov dword [rbp - 0x30], r15d
jmp 0x14000be05
mov r8, qword [rbp + 0x6d0]
mov r9d, eax
mov esi, 1
test ecx, ecx
je 0x14000be9a
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14000bf36
mov dword [rbp - 0x14], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x14000e5d2
add r9d, esi
mov r8, r10
cmp r9d, ecx
jb 0x14000be6c
xor eax, eax
lea r9, [r8 + 4]
cmp r9, r8
jb 0x14000e5d2
mov ecx, edx
mov r15d, eax
add rcx, qword [rbp + 0x6d0]
mov dword [rbp - 0x30], eax
lea rax, [r8 + 0xc]
cmp rax, rcx
ja 0x14000bcb7
mov rax, qword [rsp + 0x68]
mov r13d, 0xc0000095
mov dword [r8], 8
mov rax, qword [rax]
mov qword [r9], rax
mov ecx, dword [rbp + 0x6c8]
mov edx, dword [rbp + 0x6cc]
add ecx, esi
mov dword [rbp + 0x6c8], ecx
test r15d, r15d
js 0x14000e2e1
mov rax, qword [rbp + 0x2c8]
mov qword [rbp + 0x2d8], rax
xor eax, eax
cmp qword [rbp + 0x6d0], rax
jne 0x14000bf45
mov dword [rbp - 0x10], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x14000e5d2
add ecx, esi
mov dword [rbp + 0x6cc], eax
mov dword [rbp + 0x6c8], ecx
jmp 0x14000bfca
mov r13d, 0xc0000095
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000beef
mov r8, qword [rbp + 0x6d0]
mov r9d, eax
test ecx, ecx
je 0x14000bf81
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14000bffe
mov dword [rbp - 0x10], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x14000bd19
add r9d, esi
mov r8, r10
cmp r9d, ecx
jb 0x14000bf53
xor eax, eax
lea r9, [r8 + 4]
cmp r9, r8
jb 0x14000bd19
mov ecx, edx
mov r15d, eax
add rcx, qword [rbp + 0x6d0]
mov dword [rbp - 0x30], eax
lea rax, [r8 + 0xc]
cmp rax, rcx
ja 0x14000bcb7
mov dword [r8], 8
mov rax, qword [rbp + 0x2d8]
mov qword [r9], rax
add dword [rbp + 0x6c8], esi
test r15d, r15d
js 0x14000e2e1
lea r8, [rbp + 0x2e0]
mov edx, 0x7fffffff
lea rcx, str.Allow_WindowsSubscription
call fcn.140025640
test eax, eax
jns 0x14000c007
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov r15d, 0xc000003e
mov dword [rbp - 0x30], r15d
jmp 0x14000e2e3
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000bfc1
mov rax, qword [rbp + 0x2e0]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x14000e5ca
lea r9d, [rcx + rcx]
mov qword [rbp + 0x2e0], rcx
xor eax, eax
test r9d, r9d
je 0x14000c134
cmp qword [rbp + 0x6d0], rax
jne 0x14000c0a0
add r9d, 4
cmp r9d, 4
jb 0x14000c08e
mov dword [rbp - 0xc], r9d
mov eax, dword [rbp + 0x6cc]
mov r13d, 0xc0000095
lea r8d, [r9 + rax]
cmp r8d, eax
jb 0x14000c077
add dword [rbp + 0x6c8], esi
xor eax, eax
mov dword [rbp + 0x6cc], r8d
mov r15d, eax
mov dword [rbp - 0x30], eax
jmp 0x14000c14b
or r8d, 0xffffffff
mov dword [rbp - 0x30], r13d
mov dword [rbp + 0x6cc], r8d
mov r15d, r13d
jmp 0x14000c14b
mov r13d, 0xc0000095
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000c144
mov ecx, eax
mov rdx, qword [rbp + 0x6d0]
cmp dword [rbp + 0x6c8], eax
jbe 0x14000c0d8
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14000c08e
mov dword [rbp - 0xc], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x14000c08e
add ecx, esi
mov rdx, r8
cmp ecx, dword [rbp + 0x6c8]
jb 0x14000c0b1
xor eax, eax
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x14000c08e
mov r8d, dword [rbp + 0x6cc]
mov r15d, eax
mov dword [rbp - 0x30], eax
mov ecx, r8d
add rcx, qword [rbp + 0x6d0]
lea rax, [r9 + 4]
add rax, rdx
mov r11d, r9d
cmp rax, rcx
jbe 0x14000c117
mov r15d, 0xc0000023
mov dword [rbp - 0x30], r15d
lea r13d, [r15 + 0x72]
jmp 0x14000c14b
mov dword [rdx], r9d
mov r8, r11
lea rdx, str.Allow_WindowsSubscription
mov rcx, r10
call sub.msvcrt.dll_memcpy
add dword [rbp + 0x6c8], esi
jmp 0x14000c13e
mov r15d, 0xc000000d
mov dword [rbp - 0x30], r15d
mov r13d, 0xc0000095
mov r8d, dword [rbp + 0x6cc]
test r15d, r15d
js 0x14000e2e1
mov eax, dword [rbp + 0x2a8]
mov dword [rbp - 8], eax
xor eax, eax
cmp qword [rbp + 0x6d0], rax
jne 0x14000c191
mov dword [rbp], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x14000bd19
add dword [rbp + 0x6c8], esi
mov r8d, eax
mov dword [rbp + 8], 4
jmp 0x14000c22f
mov ecx, eax
mov rdx, qword [rbp + 0x6d0]
cmp dword [rbp + 0x6c8], eax
jbe 0x14000c1d1
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14000c259
mov dword [rbp], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x14000bd19
add ecx, esi
mov rdx, r9
cmp ecx, dword [rbp + 0x6c8]
jb 0x14000c1a2
xor eax, eax
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x14000bd19
mov ecx, r8d
mov r15d, eax
add rcx, qword [rbp + 0x6d0]
mov dword [rbp - 0x30], eax
lea rax, [rdx + 8]
cmp rax, rcx
ja 0x14000bcb7
mov dword [rdx], 4
mov eax, dword [rbp - 8]
mov dword [r9], eax
add dword [rbp + 0x6c8], esi
mov r8d, dword [rbp + 0x6cc]
xor eax, eax
test r15d, r15d
js 0x14000e2e1
mov dword [rbp + 8], 4
cmp qword [rbp + 0x6d0], rax
jne 0x14000c262
mov dword [rbp + 0x10], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x14000bd19
add dword [rbp + 0x6c8], esi
mov r8d, eax
mov dword [rbp + 0x6cc], eax
xor eax, eax
jmp 0x14000c2f0
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000c214
mov ecx, eax
mov rdx, qword [rbp + 0x6d0]
cmp dword [rbp + 0x6c8], eax
jbe 0x14000c2a2
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14000c36b
mov dword [rbp + 0x10], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x14000bd19
add ecx, esi
mov rdx, r9
cmp ecx, dword [rbp + 0x6c8]
jb 0x14000c273
xor eax, eax
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x14000bd19
mov ecx, r8d
mov r15d, eax
add rcx, qword [rbp + 0x6d0]
mov dword [rbp - 0x30], eax
lea rax, [rdx + 8]
cmp rax, rcx
ja 0x14000bcb7
mov dword [rdx], 4
mov eax, dword [rbp + 8]
mov dword [r9], eax
add dword [rbp + 0x6c8], esi
mov r8d, dword [rbp + 0x6cc]
xor eax, eax
test r15d, r15d
js 0x14000e2e1
mov dword [rbp + 0x14], 8
mov r10, rax
mov qword [rbp + 0x810], rax
mov r9d, eax
mov dword [rbp - 0x30], eax
mov qword [rbp + 0x2f0], rax
mov qword [rbp - 0x78], rax
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x70], rax
mov dword [rbp + 0x18], eax
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x50], rax
mov dword [rbp + 0x1c], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x318], rax
lea eax, [r8 + 8]
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb r15d, r15d
and r15d, r13d
cmp eax, 8
jb 0x14000c45e
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14000c377
mov r15d, r13d
jmp 0x14000c45e
mov r15d, r13d
mov dword [rbp - 0x30], r13d
jmp 0x14000c2e5
mov dword [rbp + 0x20], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor eax, eax
test rsi, rsi
jne 0x14000c3bf
mov r9d, dword [rbp - 0x30]
mov r15d, 0xc0000017
mov r10, qword [rbp + 0x810]
jmp 0x14000c460
mov eax, dword [rbp + 0x6c8]
lea rdx, [rsi + 4]
mov dword [rsi], eax
cmp rdx, rsi
jb 0x14000c420
mov eax, dword [rbp + 0x6cc]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14000c420
mov edx, dword [rbp + 0x20]
xor eax, eax
mov r15d, eax
mov rax, qword [rbp + 0x318]
mov qword [rdx + rsi - 8], rax
mov r8d, dword [rbp + 0x6cc]
mov rdx, qword [rbp + 0x6d0]
call sub.msvcrt.dll_memcpy
mov r9d, dword [rbp + 0x20]
xor eax, eax
mov r10, rsi
mov qword [rbp + 0x810], rsi
mov esi, eax
mov dword [rbp - 0x30], r9d
jmp 0x14000c42e
mov r10, qword [rbp + 0x810]
mov r15d, r13d
mov r9d, dword [rbp - 0x30]
test rsi, rsi
je 0x14000c45e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9d, dword [rbp - 0x30]
mov r10, qword [rbp + 0x810]
xor eax, eax
or r15d, 0x10000000
mov dword [rbp - 0x30], r15d
jl 0x14000dd15
mov qword [rbp + 0x320], rax
mov r13, rax
mov qword [rbp - 0x70], rax
test r10, r10
jne 0x14000c48f
mov r15d, 0xc000000d
jmp 0x14000cd32
mov esi, r9d
mov qword [rbp + 0x820], rsi
test r9d, r9d
je 0x14000cc41
lea r15, [rsi + 8]
mov qword [rbp - 0x40], r15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r15, rax
mov qword [rbp - 0x38], rax
xor eax, eax
test r15, r15
je 0x14000cc41
mov r9, qword [rbp + 0x810]
xor r8d, r8d
mov byte [rsp + 0x50], al
mov ecx, r8d
test rsi, rsi
je 0x14000c502
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x14000c4f2
mov byte [rsp + 0x50], al
or r11d, 0xffffffff
mov qword [rbp + 0x818], rbx
mov rdx, rsi
mov dword [rbp - 0x30], r8d
mov dword [rsp + 0x58], r8d
mov rcx, r15
mov qword [rsp + 0x68], rcx
mov r10d, r8d
and edx, 7
je 0x14000c638
mov dword [rbp - 0x30], r8d
mov ecx, r8d
mov dword [rsp + 0x58], ecx
mov r15d, r8d
mov r11d, r8d
test edx, edx
je 0x14000c586
mov r10d, 0x38
movzx r8d, byte [r9]
inc r9
cmp r11d, 4
jge 0x14000c569
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x58]
or ecx, r8d
mov dword [rsp + 0x58], ecx
jmp 0x14000c576
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x58]
or r15d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14000c548
mov dword [rbp - 0x30], r15d
mov r10d, ecx
mov r11d, r15d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r15d, r15d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14000c5f9
mov rdi, qword [rsp + 0x68]
lea rbx, [rdi + 1]
mov qword [rsp + 0x68], rbx
cmp r15d, 4
jge 0x14000c5c2
rol ecx, 8
mov ebx, ecx
jmp 0x14000c5c9
rol r8d, 8
mov ebx, r8d
mov byte [rdi], bl
inc r15d
mov rbx, qword [rsp + 0x68]
mov rdi, rbx
cmp r15d, edx
jl 0x14000c5ac
mov rcx, rbx
mov qword [rsp + 0x68], rbx
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
jmp 0x14000c5fe
mov rcx, qword [rsp + 0x68]
cmp edx, 4
jbe 0x14000c615
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14000c62f
xor r8d, r8d
mov r11d, r8d
cmp edx, 4
jae 0x14000c634
lea ecx, [r8 + 4]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rsp + 0x68]
mov r15, qword [rbp - 0x38]
mov rdx, rsi
shr rdx, 3
mov qword [rbp - 0x68], rdx
test rdx, rdx
je 0x14000c9b1
movzx eax, word [rbp + 0x81e]
mov edx, dword [rbp + 0x81c]
movzx esi, word [rbp + 0x81c]
xor edx, ebx
mov rdi, qword [rbp - 0x68]
mov r14d, dword [rbp - 0x30]
mov r15d, dword [rsp + 0x58]
mov dword [rbp - 0x60], eax
movzx eax, word [rbp + 0x81a]
mov dword [rsp + 0x68], edx
lea rdx, [r9 + 2]
mov r12d, dword [rsp + 0x68]
mov dword [rsp + 0x54], eax
lea rax, [rcx + 7]
movzx r13d, bx
movzx ecx, byte [rdx - 1]
movzx r9d, byte [rdx - 2]
movzx r8d, byte [rdx + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rdx]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 1]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 3]
or r8d, ecx
movzx ecx, byte [rdx + 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rdx + 5]
add rdx, 8
shl r8d, 8
or r8d, ecx
mov qword [rbp - 0x68], rdx
mov edx, dword [rbp + 0x81c]
xor r11d, r8d
mov ecx, r11d
sub ecx, r13d
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x81a]
xor r10d, dword [rbp + 0x81c]
xor edx, r10d
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [r11 + rbx]
ror edx, 9
imul edx, esi
sub edx, ecx
movzx ecx, word [rbp + 0x81e]
xor r10d, edx
mov edx, r10d
xor edx, esi
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x81c]
xor r11d, edx
mov edx, r11d
xor edx, ebx
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x81a]
mov edx, r10d
sub edx, r13d
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x81e]
mov ecx, r11d
ror ecx, 0xf
xor ecx, esi
imul ecx, r13d
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, esi
xor r11d, ecx
mov ecx, r11d
sub ecx, r13d
sub ecx, dword [rbp + 0x81c]
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
xor ecx, dword [rbp - 0x60]
imul ecx, dword [rsp + 0x54]
ror edx, 0xa
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, r13d
ror ecx, 3
rol edx, 6
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x81e]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, r13d
xor r11d, ecx
movzx ecx, word [rbp + 0x81e]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, r13d
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, esi
rol edx, 3
imul edx, r13d
xor edx, ecx
movzx ecx, word [rbp + 0x81a]
xor r10d, edx
mov edx, r10d
sub edx, esi
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
ror ecx, 0xb
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x81e]
mov ecx, r10d
sub ecx, edx
sub ecx, ebx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
xor ecx, dword [rsp + 0x54]
ror edx, 7
imul ecx, r13d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x81e]
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x81a]
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, esi
ror ecx, 4
add edx, ecx
movzx ecx, word [rbp + 0x81e]
xor r10d, edx
mov edx, r10d
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, dword [rbp + 0x81c]
rol edx, 8
imul edx, r13d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x81a]
xor r10d, edx
mov edx, dword [rbp + 0x81c]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x81a]
xor edx, r11d
mov ecx, r11d
imul edx, esi
shr ecx, 8
xor edx, ecx
xor r10d, edx
mov rdx, qword [rbp - 0x68]
xor r11d, r10d
xor r10d, r15d
mov byte [rax - 4], r10b
xor r11d, r12d
xor r11d, r14d
ror r10d, 8
mov byte [rax], r11b
mov r15d, r9d
mov byte [rax - 5], r10b
lea rax, [rax + 8]
ror r11d, 8
mov r14d, r8d
mov byte [rax - 9], r11b
ror r10d, 8
mov byte [rax - 0xe], r10b
ror r11d, 8
mov byte [rax - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 0xf], r10b
mov byte [rax - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub rdi, 1
jne 0x14000c692
mov al, byte [rsp + 0x50]
movabs rdi, 0x7f1137fab69605e
mov r14d, dword [rbp + 0x2a0]
mov r12d, 0x8007000e
mov r13, qword [rbp - 0x70]
mov rsi, qword [rbp + 0x820]
mov r15, qword [rbp - 0x38]
movzx ecx, al
lea r8, [rsi + 8]
mov qword [r15 + rsi], rcx
mov qword [rbp + 0x320], r15
mov qword [rbp + 0x358], r8
lea rax, [0x14002c230]
mov esi, 8
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x368], rsi
lea rax, [0x14002c190]
mov qword [rbp + 0x378], 0xa0
mov qword [rbp + 0x370], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [rsi + 0x28]
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor eax, eax
test rsi, rsi
jne 0x14000ca33
mov r15d, 0xc0000017
jmp 0x14000cc30
mov eax, dword [rbp - 0x40]
mov dword [rsi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x40]
mov edx, 8
mov r8d, r8d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
jne 0x14000ca72
mov r15d, 0xc0000017
jmp 0x14000cb69
mov qword [rsi + 8], rcx
mov r8, qword [rbp - 0x40]
mov rdx, r15
mov r8d, r8d
call sub.msvcrt.dll_memcpy
mov r15d, 0xa0
mov dword [rsi + 0x10], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r15d
mov r15d, 8
mov edx, r15d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14000ca67
mov qword [rsi + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [r15 + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [rsi + 0x20], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r15d
mov edx, r15d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
xor eax, eax
test rcx, rcx
je 0x14000ca67
mov qword [rsi + 0x28], rcx
mov r15d, eax
mov r13, rsi
mov rax, qword [0x14002c230]
mov qword [rcx], rax
xor eax, eax
mov esi, eax
test rsi, rsi
je 0x14000cc2e
mov rax, qword [rsi + 8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000cba6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 8], rax
mov rax, qword [rsi + 0x18]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000cbda
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x18], rax
mov rax, qword [rsi + 0x28]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000cc0e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
test r15d, r15d
js 0x14000cc47
mov qword [rbp + 0x2f0], r13
mov r13, rax
jmp 0x14000cc47
mov r15d, 0xc0000001
mov rsi, qword [rbp + 0x320]
test rsi, rsi
je 0x14000cc7c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x320], rax
test r13, r13
je 0x14000cd32
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14000ccb4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14000cce3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14000cd12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
or r15d, 0x10000000
mov dword [rbp - 0x30], r15d
jl 0x14000dd15
mov r13, qword [rbp + 0x2f0]
mov ecx, dword [r13]
mov r8d, dword [r13 + 0x20]
add ecx, 4
mov edx, dword [r13 + 0x10]
cmp ecx, 4
jb 0x14000cea4
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14000cea4
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x14000cea4
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14000cea4
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x14000cea4
mov dword [rbp + 0x24], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor eax, eax
test rsi, rsi
jne 0x14000cdd2
mov r15d, 0xc0000017
mov r13d, 0xc0000095
jmp 0x14000ceaf
mov eax, dword [r13]
lea r15, [rsi + 4]
mov dword [rsi], eax
cmp r15, rsi
jb 0x14000ce6b
mov r8d, dword [r13]
mov rcx, r15
mov rdx, qword [r13 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r13]
add rcx, r15
cmp rcx, r15
jb 0x14000ce6b
mov eax, dword [r13 + 0x10]
lea r15, [rcx + 4]
mov dword [rcx], eax
cmp r15, rcx
jb 0x14000ce6b
mov r8d, dword [r13 + 0x10]
mov rcx, r15
mov rdx, qword [r13 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r13 + 0x10]
add rcx, r15
cmp rcx, r15
jb 0x14000ce6b
mov eax, dword [r13 + 0x20]
lea r15, [rcx + 4]
mov dword [rcx], eax
cmp r15, rcx
jb 0x14000ce6b
mov r8d, dword [r13 + 0x20]
mov rcx, r15
mov rdx, qword [r13 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r13 + 0x20]
add rax, r15
cmp rax, r15
jb 0x14000ce6b
xor eax, eax
mov qword [rbp - 0x78], rsi
mov r15d, eax
mov esi, eax
mov eax, dword [rbp + 0x24]
mov dword [rsp + 0x78], eax
jmp 0x14000ce71
mov r15d, 0xc0000095
xor eax, eax
test rsi, rsi
je 0x14000cdc7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, 0xc0000095
jmp 0x14000cead
mov r13d, 0xc0000095
mov r15d, r13d
xor eax, eax
or r15d, 0x10000000
mov dword [rbp - 0x30], r15d
jl 0x14000dd15
mov dword [rbp + 0x28], eax
mov dword [rbp + 0x2c], 0x3c
mov ecx, 0x48
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x34], ecx
cmp qword [rbp + 0x6d0], rax
jne 0x14000ceed
mov r15d, 0xc000000d
mov dword [rbp - 0x30], r15d
jmp 0x14000cfd2
cmp dword [rbp + 0x6c8], 1
jbe 0x14000cede
mov rax, qword [rbp + 0x6d0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000cfcb
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000cfcb
inc edx
cmp edx, 1
jb 0x14000cf01
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000cfcb
xor eax, eax
mov dword [rbp + 0x28], r8d
xor edx, edx
test r8d, r8d
cmovne rax, rcx
mov qword [rbp + 0x380], rax
cmp dword [rbp + 0x6c8], 2
jbe 0x14000cede
mov rax, qword [rbp + 0x6d0]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000cfcb
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000cfcb
inc edx
cmp edx, 2
jb 0x14000cf59
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000cfcb
xor eax, eax
mov dword [rbp + 0x38], edx
xor r9d, r9d
test edx, edx
cmovne rax, rcx
mov qword [rbp + 0x388], rax
lea eax, [r8 + 0x50]
cmp eax, 0x50
jb 0x14000cfcb
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14000cfcb
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14000cfcb
mov dword [rbp + 0x3c], eax
mov dword [rbp - 0x30], r9d
mov r15d, r9d
cmp eax, 0x400000
jbe 0x14000cfc6
mov r15d, 0x8000ffff
jmp 0x14000dd11
mov dword [rbp + 0x18], eax
jmp 0x14000cfd2
mov r15d, r13d
mov dword [rbp - 0x30], r13d
test r15d, r15d
js 0x14000dd15
mov esi, dword [rbp + 0x18]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor ecx, ecx
test rax, rax
jne 0x14000d015
mov r13, qword [rsp + 0x70]
mov r15d, 0xd0000017
jmp 0x14000d023
mov r13, rax
mov qword [rsp + 0x70], rax
mov r15d, 0x10000000
xor eax, eax
mov dword [rbp - 0x30], r15d
test r15d, r15d
js 0x14000dd17
mov rax, qword [rbp - 0x78]
test rax, rax
jne 0x14000d046
mov r15d, 0x80070057
jmp 0x14000dd11
test r13, r13
je 0x14000d03b
mov qword [rbp + 0x768], rax
lea r8, [rbp + 0x390]
mov eax, dword [rsp + 0x78]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x778], eax
mov eax, dword [rbp + 0x18]
mov dword [rbp + 0x77c], eax
xor eax, eax
mov qword [rbp + 0x770], r13
mov dword [rbp + 0x780], eax
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14000d0c6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edx, dword [rbp + 0x18]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
mov dword [rbp - 0x30], r15d
test r15d, r15d
js 0x14000d118
mov r15d, 0x80004005
jmp 0x14000d114
mov rcx, qword [rbp + 0x390]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14000d095
xor r9d, r9d
lea rdx, [rbp + 0x768]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp + 0x18]
mov r15d, eax
or r15d, 0x10000000
cmovge edx, dword [rbp + 0x77c]
mov dword [rbp + 0x18], edx
mov dword [rbp - 0x30], r15d
cmp r15d, 0xd0000023
jne 0x14000d131
mov eax, 0x8007007a
mov r15d, eax
mov dword [rbp - 0x30], eax
jmp 0x14000dd15
xor eax, eax
test r15d, r15d
js 0x14000dd17
mov qword [rbp - 0x68], rax
cmp edx, 4
jae 0x14000d150
mov r15d, 0xc000003e
jmp 0x14000d556
mov ecx, dword [r13]
lea r8, [r13 + 4]
mov dword [rsp + 0x68], ecx
cmp r8, r13
jb 0x14000d550
lea eax, [rdx - 4]
cmp eax, ecx
jae 0x14000d179
mov r15d, 0xc000003e
xor eax, eax
jmp 0x14000d556
lea r10, [rcx + r8]
mov qword [rbp + 0x818], rcx
mov qword [rbp - 0x38], r10
cmp r10, r8
jb 0x14000d54e
lea r9d, [rcx + 4]
cmp r9d, 4
jb 0x14000d54e
mov eax, edx
sub eax, r9d
cmp eax, 4
jb 0x14000d16c
mov r15d, dword [r10]
lea r8, [r10 + 4]
cmp r8, r10
jb 0x14000d54e
lea r10d, [r9 + 4]
cmp r10d, r9d
jb 0x14000d54e
mov eax, edx
sub eax, r10d
cmp eax, r15d
jb 0x14000d16c
lea r11, [r8 + r15]
cmp r11, r8
jb 0x14000d54e
lea r9d, [r15 + r10]
cmp r9d, r10d
jb 0x14000d54e
mov eax, edx
sub eax, r9d
cmp eax, 4
jb 0x14000d16c
mov r13d, dword [r11]
lea rax, [r11 + 4]
mov qword [rbp - 0x40], rax
cmp rax, r11
jb 0x14000d54e
lea r8d, [r9 + 4]
cmp r8d, r9d
jb 0x14000d54e
mov eax, edx
sub eax, r8d
cmp eax, r13d
jb 0x14000d16c
lea r9d, [r8 + r13]
cmp r9d, r8d
jb 0x14000d54e
cmp edx, r9d
jne 0x14000d16c
lea eax, [r15 + r13]
add ecx, eax
mov eax, edx
add rcx, 0xc
cmp rcx, rax
jne 0x14000d16c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor eax, eax
test rsi, rsi
jne 0x14000d28b
mov r15d, 0xc0000017
jmp 0x14000d46d
mov rax, qword [rsp + 0x70]
add rax, 4
je 0x14000d2f1
mov eax, dword [rsp + 0x68]
mov dword [rsi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x818]
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
jne 0x14000d2d6
mov r15d, 0xc0000017
jmp 0x14000d3b5
mov qword [rsi + 8], rcx
mov rdx, qword [rsp + 0x70]
mov r8, qword [rbp + 0x818]
add rdx, 4
call sub.msvcrt.dll_memcpy
jmp 0x14000d2f9
xor eax, eax
mov dword [rsi], eax
mov qword [rsi + 8], rax
mov rax, qword [rbp - 0x38]
add rax, 4
je 0x14000d34d
mov dword [rsi + 0x10], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
test rax, rax
je 0x14000d2cb
mov qword [rsi + 0x18], rax
mov rdx, qword [rbp - 0x38]
mov r8, r15
add rdx, 4
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor eax, eax
jmp 0x14000d356
xor eax, eax
mov dword [rsi + 0x10], eax
mov qword [rsi + 0x18], rax
mov r15, qword [rbp - 0x40]
test r15, r15
je 0x14000d3a3
mov dword [rsi + 0x20], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14000d2cb
mov qword [rsi + 0x28], rax
mov r8, r13
mov rdx, r15
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x14000d3aa
mov dword [rsi + 0x20], eax
mov qword [rsi + 0x28], rax
xor eax, eax
mov qword [rbp - 0x68], rsi
mov esi, eax
mov r15d, eax
test rsi, rsi
je 0x14000d46b
mov r13, qword [rsi + 8]
test r13, r13
je 0x14000d3ed
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 8], rax
mov r13, qword [rsi + 0x18]
test r13, r13
je 0x14000d41c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x18], rax
mov r13, qword [rsi + 0x28]
test r13, r13
je 0x14000d44b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rbp - 0x68]
test r15d, r15d
mov rsi, rax
cmovs rsi, qword [rbp - 0x68]
xor eax, eax
test r15d, r15d
cmovs rcx, rax
mov qword [rsp + 0x60], rcx
test rsi, rsi
je 0x14000d55b
mov r13, qword [rsi + 8]
test r13, r13
je 0x14000d4c2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 8], rax
mov r13, qword [rsi + 0x18]
test r13, r13
je 0x14000d4f1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x18], rax
mov r13, qword [rsi + 0x28]
test r13, r13
je 0x14000d520
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x60]
xor eax, eax
mov qword [rsp + 0x60], rcx
jmp 0x14000d55b
xor eax, eax
mov r15d, 0xc0000095
mov rcx, qword [rsp + 0x60]
or r15d, 0x10000000
mov dword [rbp - 0x30], r15d
jl 0x14000dd15
mov qword [rbp + 0x398], rax
mov rsi, rax
mov qword [rbp - 0x68], rax
mov r13, rax
test rcx, rcx
jne 0x14000d58d
mov r15d, 0xd000000d
jmp 0x14000dd11
mov rax, qword [rcx + 8]
mov qword [rbp + 0x818], rax
test rax, rax
je 0x14000d582
xor eax, eax
cmp dword [rcx], eax
jne 0x14000d5b2
mov r15d, 0xd000000d
mov dword [rbp - 0x30], r15d
jmp 0x14000dd17
mov r15d, dword [rcx]
test r15, r15
je 0x14000db45
add r15, 0xfffffffffffffff8
mov qword [rbp - 0x38], r15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
mov qword [rbp - 0x40], rax
xor eax, eax
test r9, r9
je 0x14000db3e
mov rsi, qword [rbp + 0x818]
mov rdx, r15
mov byte [rsp + 0x50], al
mov rcx, r9
mov qword [rbp + 0x820], rdi
mov qword [rbp - 0x70], rcx
and edx, 7
je 0x14000d72d
xor r8d, r8d
mov dword [rbp - 0x60], r8d
mov ecx, r8d
mov dword [rsp + 0x54], ecx
mov r10d, r8d
mov r11d, r8d
test edx, edx
je 0x14000d686
lea r10d, [rax + 0x38]
mov ebx, eax
movzx r8d, byte [rsi]
inc rsi
cmp r11d, 4
jge 0x14000d658
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or ebx, r8d
jmp 0x14000d669
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or ecx, r8d
mov dword [rsp + 0x54], ecx
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14000d63b
mov dword [rbp - 0x60], ebx
movabs rbx, 0xc81ecb17b1b54a58
mov r10d, dword [rbp - 0x60]
and dword [rsp + 0x58], eax
mov r11d, ecx
xor r11d, 0x699a899c
xor r10d, 0x92f65a5
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14000d6f6
mov rbx, r9
cmp dword [rsp + 0x58], 4
lea rdi, [rbx + 1]
mov qword [rbp - 0x70], rdi
jge 0x14000d6be
rol ecx, 8
mov edi, ecx
jmp 0x14000d6c5
rol r8d, 8
mov edi, r8d
inc dword [rsp + 0x58]
mov byte [rbx], dil
mov rdi, qword [rbp - 0x70]
mov rbx, rdi
cmp dword [rsp + 0x58], edx
jl 0x14000d6a8
mov rcx, rdi
movabs rbx, 0xc81ecb17b1b54a58
mov qword [rbp - 0x70], rcx
movabs rdi, 0x7f1137fab69605e
jmp 0x14000d6f9
mov rcx, r9
cmp edx, 4
jbe 0x14000d710
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14000d727
xor r11d, r11d
cmp edx, 4
jae 0x14000d73d
lea ecx, [r11 + 4]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x70]
jmp 0x14000d73d
xor edx, edx
or dword [rsp + 0x54], 0xffffffff
mov r11d, edx
mov dword [rbp - 0x60], edx
mov r10d, edx
mov rdx, r15
shr rdx, 3
mov qword [rbp - 0x70], rdx
test rdx, rdx
je 0x14000daa1
mov edx, dword [rbp + 0x824]
lea r15, [rsi + 2]
mov rsi, qword [rbp - 0x70]
mov r13d, edx
mov ebx, dword [rsp + 0x54]
xor r13d, edi
mov r14d, dword [rbp - 0x60]
mov r12d, edx
movzx eax, dx
mov dword [rsp + 0x58], eax
movzx eax, word [rbp + 0x822]
mov dword [rsp + 0x78], eax
movzx eax, di
mov dword [rbp - 0x30], eax
lea rax, [rcx + 7]
movzx ecx, byte [r15 - 1]
movzx r9d, byte [r15 - 2]
movzx r8d, byte [r15 + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [r15]
lea r15, [r15 + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r15 - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r15 - 5]
or r8d, ecx
xor r10d, r9d
movzx ecx, byte [r15 - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r15 - 3]
shl r8d, 8
or r8d, ecx
xor r11d, r8d
xor r11d, r10d
xor r11d, r13d
mov edx, r11d
mov ecx, r11d
sub edx, edi
rol ecx, 0xa
rol edx, 5
imul edx, dword [rsp + 0x58]
add edx, ecx
movzx ecx, word [rbp + 0x822]
xor r10d, edx
lea edx, [r12 + r10]
ror edx, 9
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
sub edx, dword [rsp + 0x58]
imul edx, dword [rbp - 0x30]
shr ecx, 0xd
sub edx, ecx
movzx ecx, word [rbp + 0x822]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x826]
rol edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
mov ecx, r12d
xor r11d, edx
mov edx, edi
xor edx, r11d
sub ecx, edx
xor r10d, ecx
mov ecx, dword [rsp + 0x58]
xor ecx, r10d
mov edx, r10d
imul ecx, dword [rsp + 0x78]
ror edx, 6
xor edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 2
lea edx, [r12 + r11]
ror edx, 0xf
imul edx, dword [rbp - 0x30]
add edx, ecx
movzx ecx, word [rbp + 0x826]
xor r10d, edx
mov edx, r10d
sub edx, edi
ror edx, 0xe
imul edx, ecx
mov ecx, r10d
rol ecx, 8
sub edx, ecx
xor r11d, edx
mov edx, edi
xor edx, r11d
mov ecx, r11d
ror ecx, 0xa
ror edx, 0xc
imul edx, dword [rsp + 0x58]
xor edx, ecx
movzx ecx, word [rbp + 0x826]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x822]
imul edx, ecx
mov ecx, r10d
shr ecx, 0xa
xor edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x826]
mov ecx, r11d
not ecx
ror ecx, 5
add ecx, dword [rbp - 0x30]
imul ecx, edx
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
xor ecx, edi
xor r11d, ecx
movzx ecx, word [rbp + 0x826]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
rol edx, 2
imul edx, dword [rsp + 0x58]
shr ecx, 2
add edx, ecx
movzx ecx, word [rbp + 0x822]
xor r10d, edx
mov edx, r10d
sub edx, r12d
ror edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
mov ecx, dword [rsp + 0x58]
xor r11d, edx
xor ecx, r11d
mov edx, r11d
imul ecx, dword [rbp - 0x30]
ror edx, 9
add edx, ecx
movzx ecx, word [rbp + 0x822]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x826]
rol edx, 5
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
mov ecx, r13d
xor r11d, edx
movzx edx, word [rbp + 0x822]
xor ecx, r11d
xor r10d, ecx
mov ecx, r10d
ror ecx, 3
sub ecx, edx
imul ecx, dword [rsp + 0x58]
xor r11d, ecx
mov edx, r11d
sub edx, r12d
ror edx, 1
imul edx, dword [rbp - 0x30]
mov ecx, r11d
ror ecx, 6
sub edx, ecx
movzx ecx, word [rbp + 0x826]
xor r10d, edx
lea edx, [rdi + r10]
rol edx, 3
imul edx, ecx
mov ecx, r10d
rol ecx, 0xe
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xe
lea edx, [rdi + r11]
rol edx, 0xf
imul edx, dword [rsp + 0x58]
sub edx, ecx
movzx ecx, word [rbp + 0x822]
xor r10d, edx
mov edx, r10d
xor edx, dword [rbp - 0x30]
imul edx, ecx
mov ecx, r10d
shr ecx, 3
xor edx, ecx
xor r11d, edx
mov edx, r12d
xor edx, r11d
mov ecx, r11d
xor r11d, ebx
rol edx, 4
imul edx, dword [rbp - 0x30]
mov ebx, r8d
rol ecx, 2
xor edx, ecx
xor edx, r14d
mov r14d, r9d
xor r10d, edx
mov byte [rax - 4], r10b
mov byte [rax], r11b
lea rax, [rax + 8]
ror r10d, 8
mov byte [rax - 0xd], r10b
ror r11d, 8
mov byte [rax - 9], r11b
ror r10d, 8
mov byte [rax - 0xe], r10b
ror r11d, 8
mov byte [rax - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 0xf], r10b
mov byte [rax - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub rsi, 1
jne 0x14000d78c
mov al, byte [rsp + 0x50]
movabs rbx, 0xc81ecb17b1b54a58
mov r14d, dword [rbp + 0x2a0]
mov r12d, 0x8007000e
mov r13, qword [rbp - 0x68]
mov r15, qword [rbp - 0x38]
mov r9, qword [rbp - 0x40]
xor edx, edx
mov ecx, edx
test r15, r15
je 0x14000dab6
xor al, byte [rcx + r9]
inc rcx
cmp rcx, r15
jb 0x14000daaa
movzx ecx, al
mov rax, qword [rbp + 0x818]
cmp rcx, qword [r15 + rax]
je 0x14000dad7
mov rsi, qword [rbp + 0x398]
mov r15d, 0xc004d501
xor eax, eax
jmp 0x14000daf0
xor eax, eax
mov qword [rbp + 0x398], r9
mov rsi, r9
mov qword [rbp - 0x40], rax
mov r13, r15
mov r9d, eax
mov r15d, eax
test r9, r9
je 0x14000db1f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x40]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp + 0x398]
xor eax, eax
test r15d, r15d
js 0x14000db45
mov qword [rbp - 0x50], rsi
mov r15d, 0x10000000
mov rsi, rax
mov qword [rbp + 0x398], rax
mov dword [rbp + 0x1c], r13d
jmp 0x14000db4f
mov rsi, qword [rbp + 0x398]
mov r13d, dword [rbp + 0x1c]
mov r15d, 0xd0000001
mov dword [rbp - 0x30], r15d
test rsi, rsi
je 0x14000db85
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, dword [rbp + 0x1c]
xor eax, eax
mov qword [rbp + 0x398], rax
test r15d, r15d
js 0x14000dd15
cmp r13d, 4
jae 0x14000db9f
mov r15d, 0xc000003e
jmp 0x14000dd0c
mov r9, qword [rbp - 0x50]
mov r10d, dword [r9]
lea rcx, [r9 + 4]
mov dword [rsp + 0x68], r10d
cmp rcx, r9
jb 0x14000dd06
lea eax, [r13 - 4]
cmp eax, 4
jb 0x14000db94
mov r15d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x14000dd06
lea eax, [r13 - 8]
cmp eax, r15d
jb 0x14000db94
lea eax, [r15 + 8]
cmp eax, 8
jb 0x14000dd06
mov ecx, r13d
lea rdx, [r15 + rsi]
mov r8d, r15d
lea rax, [r9 + rcx]
cmp rax, rdx
jb 0x14000db94
mov rax, r9
sub rax, r15
sub rax, rsi
add rax, rcx
cmp rax, 8
jae 0x14000db94
xor eax, eax
mov dword [rsp + 0x54], eax
mov r13d, eax
mov r9d, eax
test rsi, rsi
je 0x14000dc88
mov rcx, rsi
cmp rdx, rsi
jb 0x14000dd06
jbe 0x14000dc83
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14000dd06
cmp rax, rdx
ja 0x14000dc70
mov eax, dword [rcx]
add eax, 4
cmp eax, 4
jb 0x14000dc7b
mov dword [rbp + 0x40], eax
mov r10d, eax
add r10, rcx
cmp r10, rcx
jb 0x14000dd06
mov rcx, r10
cmp r10, rdx
ja 0x14000dc70
inc r9d
mov dword [rsp + 0x54], r9d
cmp rcx, rdx
jae 0x14000dc86
jmp 0x14000dc2b
mov r15d, 0xc000000d
jmp 0x14000dd0c
mov r15d, 0xc0000095
jmp 0x14000dcf0
cmp rcx, rdx
jne 0x14000dc70
test r15d, r15d
je 0x14000dcc3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
test rax, rax
jne 0x14000dcc0
mov r15d, 0xc0000017
jmp 0x14000dcf0
mov r8, r15
test rsi, rsi
je 0x14000dcd3
mov rdx, rsi
mov rcx, r13
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x54]
mov dword [rbp + 0x6d8], eax
mov qword [rbp + 0x6e0], r13
mov dword [rbp + 0x6dc], r15d
xor eax, eax
mov r15d, eax
test r15d, r15d
js 0x14000dd0c
mov eax, dword [rsp + 0x68]
cmp eax, dword [rbp + 0x6d8]
je 0x14000dd0c
jmp 0x14000db94
mov r15d, 0xc0000095
bts r15d, 0x1c
mov dword [rbp - 0x30], r15d
xor eax, eax
mov rsi, qword [rbp + 0x810]
test rsi, rsi
je 0x14000dd45
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov r13, qword [rbp + 0x2f0]
test r13, r13
je 0x14000de0b
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14000dd84
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14000ddb3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14000dde2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x2f0], rax
mov rsi, qword [rbp - 0x78]
test rsi, rsi
je 0x14000de36
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov rsi, qword [rsp + 0x70]
test rsi, rsi
je 0x14000de62
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov r13, qword [rsp + 0x60]
test r13, r13
je 0x14000df1f
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14000de9f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14000dece
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14000defd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov rsi, qword [rbp - 0x50]
test rsi, rsi
je 0x14000df4a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
test r15d, r15d
js 0x14000e2e1
mov r10d, 1
cmp dword [rbp + 0x6d8], r10d
jae 0x14000df6d
mov r15d, 0xc004d501
jmp 0x14000e2dd
cmp qword [rbp + 0x6e0], rax
jne 0x14000df88
mov r15d, 0xc000000d
mov dword [rbp - 0x30], r15d
mov r13d, 0xc0000095
jmp 0x14000dfde
cmp dword [rbp + 0x6d8], eax
jbe 0x14000df76
mov rsi, qword [rbp + 0x6e0]
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x14000dfd1
xor r8d, r8d
mov dword [rbp + 0x44], ecx
test ecx, ecx
cmovne rax, rdx
mov qword [rbp + 0x3a0], rax
mov dword [rbp - 0x30], r8d
mov r15d, r8d
cmp ecx, 4
jne 0x14000bcb7
mov eax, dword [rax]
mov dword [rbp + 0x2b4], eax
xor eax, eax
jmp 0x14000df80
mov r13d, 0xc0000095
mov r15d, r13d
mov dword [rbp - 0x30], r13d
test r15d, r15d
js 0x14000e2e1
mov r15d, dword [rbp + 0x2b4]
mov r11d, 0x8007007a
cmp r15d, 0xd0000023
cmove r15d, r11d
mov dword [rbp - 0x30], r15d
mov dword [rbp + 0x2b4], r15d
cmp r15d, r11d
je 0x14000e018
test r15d, r15d
js 0x14000e2e1
cmp dword [rbp + 0x6d8], 6
jne 0x14000df62
cmp qword [rbp + 0x6e0], rax
jne 0x14000e03a
mov r15d, 0xc000000d
mov dword [rbp - 0x30], r15d
jmp 0x14000e0a5
mov rax, qword [rbp + 0x6e0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000e09c
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000e09c
add edx, r10d
cmp edx, r10d
jb 0x14000e045
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14000e09c
xor eax, eax
mov dword [rbp + 0x48], ecx
xor r8d, r8d
test ecx, ecx
cmovne rax, rdx
mov qword [rbp + 0x3a8], rax
mov dword [rbp - 0x30], r8d
mov r15d, r8d
cmp ecx, 8
jne 0x14000bcb7
mov rax, qword [rax]
mov qword [rbp + 0x3b0], rax
jmp 0x14000e0a3
mov r15d, r13d
mov dword [rbp - 0x30], r13d
xor eax, eax
test r15d, r15d
js 0x14000e2e1
cmp qword [rbp + 0x6e0], rax
jne 0x14000e0c3
mov r15d, 0xc000000d
mov dword [rbp - 0x30], r15d
jmp 0x14000e129
mov rax, qword [rbp + 0x6e0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000e120
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000e120
add edx, r10d
cmp edx, 2
jb 0x14000e0ce
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14000e120
xor eax, eax
mov dword [rbp + 0x4c], ecx
xor r8d, r8d
test ecx, ecx
cmovne rax, rdx
mov qword [rbp + 0x3b8], rax
mov dword [rbp - 0x30], r8d
mov r15d, r8d
cmp ecx, 4
jne 0x14000bcb7
mov eax, dword [rax]
mov dword [rbp + 0x50], eax
jmp 0x14000e127
mov r15d, r13d
mov dword [rbp - 0x30], r13d
xor eax, eax
test r15d, r15d
js 0x14000e2e1
cmp qword [rbp + 0x6e0], rax
jne 0x14000e146
mov r15d, 0xc000000d
jmp 0x14000e2dd
mov rax, qword [rbp + 0x6e0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000bd19
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000bd19
add edx, r10d
cmp edx, 3
jb 0x14000e151
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000bd19
xor eax, eax
mov dword [rbp + 0x54], r8d
test r8d, r8d
mov r9d, eax
cmovne r9, rcx
mov qword [rbp + 0x3c0], r9
mov rax, qword [rbp + 0x6e0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000e1fc
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000e1fc
add edx, r10d
cmp edx, 4
jb 0x14000e1a6
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14000e1fc
xor eax, eax
mov dword [rbp + 0x58], ecx
xor r10d, r10d
test ecx, ecx
cmovne rax, rdx
mov qword [rbp + 0x3c8], rax
mov dword [rbp - 0x30], r10d
mov r15d, r10d
cmp ecx, 4
jne 0x14000bcb7
mov eax, dword [rax]
lea r10d, [rcx - 3]
mov dword [rbp + 0x5c], eax
jmp 0x14000e203
mov r15d, r13d
mov dword [rbp - 0x30], r13d
test r15d, r15d
js 0x14000e2e1
mov rax, qword [rbp + 0x6e0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000e26c
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000e26c
add edx, r10d
cmp edx, 5
jb 0x14000e217
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14000e26c
xor eax, eax
mov dword [rbp + 0x60], ecx
xor r10d, r10d
test ecx, ecx
cmovne rax, rdx
mov qword [rbp + 0x3d0], rax
mov dword [rbp - 0x30], r10d
mov r15d, r10d
cmp ecx, 4
jne 0x14000bcb7
mov eax, dword [rax]
mov dword [rbp + 0x2b0], eax
jmp 0x14000e273
mov r15d, r13d
mov dword [rbp - 0x30], r13d
test r15d, r15d
js 0x14000e2e1
mov rax, qword [rbp + 0x3b0]
cmp qword [rbp + 0x2c8], rax
jne 0x14000df62
mov eax, dword [rbp + 0x2b0]
mov ecx, dword [rbp + 0x5c]
mov dword [rbp + 0x2a8], eax
mov eax, dword [rbp + 0x50]
mov dword [rbp + 0x2a4], eax
mov dword [rbp + 0x2ac], ecx
cmp ecx, 4
jbe 0x14000e2b8
mov r15d, r11d
mov dword [rbp - 0x30], r11d
jmp 0x14000e2e1
cmp r8d, 4
ja 0x14000e2af
mov rcx, qword [rbp - 0x58]
mov rdx, r9
call sub.msvcrt.dll_memcpy
xor eax, eax
test r15d, r15d
js 0x14000e2e3
mov eax, dword [rbp + 0x2b4]
test eax, eax
cmovne r15d, eax
mov dword [rbp - 0x30], r15d
xor eax, eax
mov rsi, qword [rbp + 0x6d0]
mov dword [rbp + 0x6cc], eax
mov dword [rbp + 0x6c8], eax
test rsi, rsi
je 0x14000e324
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x6d0], rax
mov rsi, qword [rbp + 0x6e0]
mov dword [rbp + 0x6dc], eax
mov dword [rbp + 0x6d8], eax
test rsi, rsi
je 0x14000e365
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x6e0], rax
mov rsi, qword [rbp - 0x80]
test rsi, rsi
je 0x14000e390
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov rsi, qword [rbp + 0x808]
test rsi, rsi
je 0x14000e3be
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
test r15d, r15d
js 0x14001067b
cmp dword [rbp + 0x2a8], eax
je 0x140010649
mov r13, rax
mov qword [rbp - 0x68], rax
mov qword [rbp + 0x6f0], rax
xorps xmm0, xmm0
lea rax, [0x14002c240]
mov qword [rbp + 0x3d8], rax
movups xmmword [rbp + 0x6f8], xmm0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
xor eax, eax
test rsi, rsi
je 0x140010579
mov rcx, qword [rbp + 0x3d8]
mov eax, 0x80
mov qword [rbp + 0x818], rsi
movups xmm0, xmmword [rcx]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rsi + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rsi + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rsi + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rsi + rax - 0x10], xmm1
movups xmm0, xmmword [rcx + rax]
movups xmmword [rsi + rax], xmm0
movups xmm1, xmmword [rcx + rax + 0x10]
movups xmmword [rsi + rax + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x3e0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov eax, 8
mov r8d, eax
mov edx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
xor eax, eax
test r13, r13
je 0x14001056f
mov rax, qword [rbp + 0x3e0]
mov qword [rbp - 0x68], r13
mov rcx, qword [rax]
mov qword [r13], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x3e8], rax
mov dword [rbp + 0x64], 0xc
mov dword [rbp + 0x6ec], 0xc4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xc4
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
xor eax, eax
test rdx, rdx
je 0x14001056f
mov qword [rbp + 0x6f0], rdx
mov dword [rbp + 0x6e8], eax
mov dword [rbp + 0x68], 4
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x14001056f
mov ecx, dword [rbp + 0x6ec]
lea rax, [rdx + 8]
add rcx, rdx
cmp rax, rcx
ja 0x140010574
mov dword [rdx], 4
mov eax, dword [rbp + 0x68]
mov dword [r8], eax
mov edx, dword [rbp + 0x6e8]
inc edx
mov dword [rbp + 0x6e8], edx
xor eax, eax
cmp qword [rbp + 0x6f0], rax
jne 0x14000e5e8
mov dword [rbp + 0x70], 0xa4
mov eax, dword [rbp + 0x6ec]
lea ecx, [rax + 0xa4]
cmp ecx, eax
jb 0x140010574
lea eax, [rdx + 1]
mov dword [rbp + 0x6ec], ecx
mov dword [rbp + 0x6e8], eax
mov r10d, 1
jmp 0x14000e6ba
or qword [rbp + 0x2e0], 0xffffffffffffffff
mov r15d, 0xc0000095
jmp 0x14000e2dd
mov r15d, 0xc0000095
jmp 0x14000bff5
mov r8, qword [rbp + 0x6f0]
mov ecx, eax
mov r10d, 1
test edx, edx
je 0x14000e626
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x140010574
mov dword [rbp + 0x70], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x140010574
add ecx, r10d
mov r8, r9
cmp ecx, edx
jb 0x14000e5fb
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x140010574
mov ecx, dword [rbp + 0x6ec]
lea rax, [r8 + 0xa4]
add rcx, qword [rbp + 0x6f0]
cmp rax, rcx
ja 0x140010574
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [rsi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [rsi + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [rsi + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
add dword [rbp + 0x6e8], r10d
mov ecx, dword [rbp + 0x6ec]
xor eax, eax
cmp qword [rbp + 0x6f0], rax
jne 0x14000e6f1
mov dword [rbp + 0x74], 0xc
lea edx, [rcx + 0xc]
cmp edx, ecx
jb 0x14001056f
mov rax, qword [rbp + 0x3e8]
add dword [rbp + 0x6e8], r10d
mov qword [rbp + 0x3f0], rax
jmp 0x14000e786
mov r8d, eax
mov rdx, qword [rbp + 0x6f0]
cmp dword [rbp + 0x6e8], eax
jbe 0x14000e732
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x140010574
mov dword [rbp + 0x74], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140010574
add r8d, r10d
mov rdx, r9
cmp r8d, dword [rbp + 0x6e8]
jb 0x14000e703
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x140010574
add rcx, qword [rbp + 0x6f0]
lea rax, [rdx + 0xc]
cmp rax, rcx
ja 0x14001056d
mov dword [rdx], 8
mov rax, qword [r13]
mov qword [r8], rax
add dword [rbp + 0x6e8], r10d
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x3f0], rax
xor eax, eax
cmp qword [rbp + 0x6f0], rax
jne 0x14000e7a0
mov edx, dword [rbp + 0x6ec]
mov dword [rbp + 0x78], 0xc
lea ecx, [rdx + 0xc]
cmp ecx, edx
jb 0x140010574
mov dword [rbp + 0x6ec], ecx
jmp 0x14000e81c
mov ecx, eax
mov rdx, qword [rbp + 0x6f0]
cmp dword [rbp + 0x6e8], eax
jbe 0x14000e7df
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x140010574
mov dword [rbp + 0x78], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x140010574
add ecx, r10d
mov rdx, r8
cmp ecx, dword [rbp + 0x6e8]
jb 0x14000e7b1
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x140010574
mov ecx, dword [rbp + 0x6ec]
lea rax, [rdx + 0xc]
add rcx, qword [rbp + 0x6f0]
cmp rax, rcx
ja 0x140010574
mov dword [rdx], 8
mov rax, qword [rbp + 0x3f0]
mov qword [r8], rax
mov ecx, dword [rbp + 0x6ec]
add dword [rbp + 0x6e8], r10d
mov dword [rbp + 0x7c], 0xc
xor eax, eax
mov r9d, eax
mov qword [rbp - 0x38], rax
mov r8d, eax
mov dword [rsp + 0x68], eax
mov qword [rbp + 0x3f8], rax
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x54], eax
mov qword [rbp + 0x820], rax
mov dword [rbp + 0x80], eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x50], rax
mov dword [rbp + 0x84], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x400], rax
lea eax, [rcx + 8]
mov edx, 0xc0000095
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb esi, esi
and esi, edx
cmp eax, 8
jb 0x14000e98d
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14000e8a6
mov esi, edx
jmp 0x14000e98d
mov dword [rbp + 0x88], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
xor eax, eax
test r13, r13
jne 0x14000e8eb
mov esi, 0xc0000017
mov r8d, eax
mov r9d, eax
jmp 0x14000e98f
mov eax, dword [rbp + 0x6e8]
lea rdx, [r13 + 4]
mov dword [r13], eax
cmp rdx, r13
jb 0x14000e952
mov eax, dword [rbp + 0x6ec]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14000e952
mov edx, dword [rbp + 0x88]
xor eax, eax
mov esi, eax
mov rax, qword [rbp + 0x400]
mov qword [rdx + r13 - 8], rax
mov r8d, dword [rbp + 0x6ec]
mov rdx, qword [rbp + 0x6f0]
call sub.msvcrt.dll_memcpy
mov r8d, dword [rbp + 0x88]
xor eax, eax
mov r9, r13
mov qword [rbp - 0x38], r13
mov r13d, eax
mov dword [rsp + 0x68], r8d
jmp 0x14000e95f
mov r8d, dword [rsp + 0x68]
mov esi, 0xc0000095
mov r9d, r8d
test r13, r13
je 0x14000e98d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r8d, dword [rsp + 0x68]
mov r9, qword [rbp - 0x38]
xor eax, eax
or esi, 0x10000000
jl 0x14001025e
mov qword [rbp + 0x408], rax
mov r13, rax
mov qword [rsp + 0x60], rax
test r9, r9
jne 0x14000e9b9
mov esi, 0xc000000d
jmp 0x14000f261
mov esi, r8d
mov qword [rsp + 0x70], rsi
test r8d, r8d
je 0x14000f155
lea rax, [rsi + 8]
mov qword [rbp - 0x78], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8, [rsi + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
mov qword [rbp + 0x810], rax
xor eax, eax
test rdx, rdx
je 0x14000f155
mov r9, qword [rbp - 0x38]
xor r8d, r8d
mov byte [rsp + 0x50], al
mov ecx, r8d
test rsi, rsi
je 0x14000ea2b
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x14000ea1b
mov byte [rsp + 0x50], al
mov rcx, rdx
mov qword [rbp - 0x58], rdx
mov rdx, rsi
mov qword [rbp + 0x808], rbx
or r11d, 0xffffffff
mov dword [rsp + 0x68], r8d
mov dword [rbp - 0x60], r8d
mov r10d, r8d
and edx, 7
je 0x14000eb54
mov dword [rsp + 0x68], r8d
mov ecx, r8d
mov dword [rbp - 0x60], ecx
mov r13d, r8d
mov r11d, r8d
test edx, edx
je 0x14000eaac
mov r10d, 0x38
movzx r8d, byte [r9]
inc r9
cmp r11d, 4
jge 0x14000ea8f
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rbp - 0x60]
or ecx, r8d
mov dword [rbp - 0x60], ecx
jmp 0x14000ea9b
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rbp - 0x60]
or r13d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14000ea70
mov dword [rsp + 0x68], r13d
mov r10d, ecx
mov r11d, r13d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r13d, r13d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14000eb1b
mov rdi, qword [rbp - 0x58]
lea rbx, [rdi + 1]
mov qword [rbp - 0x58], rbx
cmp r13d, 4
jge 0x14000eae6
rol ecx, 8
mov ebx, ecx
jmp 0x14000eaed
rol r8d, 8
mov ebx, r8d
mov byte [rdi], bl
inc r13d
mov rbx, qword [rbp - 0x58]
mov rdi, rbx
cmp r13d, edx
jl 0x14000ead1
mov rcx, rbx
mov qword [rbp - 0x58], rbx
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
jmp 0x14000eb1f
mov rcx, qword [rbp - 0x58]
cmp edx, 4
jbe 0x14000eb36
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14000eb50
xor r8d, r8d
mov r11d, r8d
cmp edx, 4
jae 0x14000eb54
lea ecx, [r8 + 4]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x58]
mov r13, rsi
shr r13, 3
test r13, r13
je 0x14000eeb5
movzx eax, word [rbp + 0x80e]
lea r15, [r9 + 2]
movzx esi, word [rbp + 0x80c]
mov edi, dword [rsp + 0x68]
mov r14d, dword [rbp - 0x60]
mov dword [rsp + 0x58], eax
movzx eax, word [rbp + 0x80a]
mov dword [rsp + 0x78], eax
lea rax, [rcx + 7]
movzx r12d, bx
movzx ecx, byte [r15 - 1]
movzx r9d, byte [r15 - 2]
movzx r8d, byte [r15 + 2]
mov edx, dword [rbp + 0x80c]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [r15]
lea r15, [r15 + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r15 - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r15 - 5]
or r8d, ecx
movzx ecx, byte [r15 - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r15 - 3]
shl r8d, 8
or r8d, ecx
xor r11d, r8d
mov ecx, r11d
sub ecx, r12d
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, dword [rbp + 0x80c]
xor edx, r10d
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [rbx + r11]
ror edx, 9
imul edx, esi
sub edx, ecx
movzx ecx, word [rbp + 0x80e]
xor r10d, edx
mov edx, r10d
xor edx, esi
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x80c]
xor r11d, edx
mov edx, ebx
xor edx, r11d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x80a]
mov edx, r10d
sub edx, r12d
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x80e]
mov ecx, r11d
ror ecx, 0xf
xor ecx, esi
imul ecx, r12d
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, esi
xor r11d, ecx
mov ecx, r11d
sub ecx, r12d
sub ecx, dword [rbp + 0x80c]
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
xor ecx, dword [rsp + 0x58]
imul ecx, dword [rsp + 0x78]
ror edx, 0xa
xor edx, ecx
xor r11d, edx
mov edx, r12d
xor edx, r11d
mov ecx, r11d
rol edx, 6
imul edx, esi
ror ecx, 3
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x80e]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, r12d
xor r11d, ecx
movzx ecx, word [rbp + 0x80e]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, r12d
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, esi
rol edx, 3
imul edx, r12d
xor edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
mov edx, r10d
sub edx, esi
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
imul edx, esi
ror ecx, 0xb
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x80e]
mov ecx, r10d
sub ecx, ebx
sub ecx, edx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
xor ecx, dword [rsp + 0x78]
ror edx, 7
imul ecx, r12d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x80e]
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x80a]
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, esi
ror ecx, 4
add edx, ecx
movzx ecx, word [rbp + 0x80e]
xor r10d, edx
mov edx, r10d
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, dword [rbp + 0x80c]
rol edx, 8
imul edx, r12d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
mov edx, dword [rbp + 0x80c]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x80a]
xor edx, r11d
mov ecx, r11d
shr ecx, 8
imul edx, esi
xor edx, ecx
mov ecx, dword [rbp + 0x80c]
xor r10d, edx
xor ecx, ebx
xor r11d, ecx
xor r11d, r10d
xor r10d, r14d
mov byte [rax - 4], r10b
xor r11d, edi
mov byte [rax], r11b
mov r14d, r9d
ror r10d, 8
mov edi, r8d
mov byte [rax - 5], r10b
lea rax, [rax + 8]
ror r11d, 8
mov byte [rax - 9], r11b
ror r10d, 8
mov byte [rax - 0xe], r10b
ror r11d, 8
mov byte [rax - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 0xf], r10b
mov byte [rax - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r13, 1
jne 0x14000eb95
mov al, byte [rsp + 0x50]
movabs rdi, 0x7f1137fab69605e
mov r14d, dword [rbp + 0x2a0]
mov r12d, 0x8007000e
mov r15d, dword [rbp - 0x30]
mov rsi, qword [rsp + 0x70]
movzx ecx, al
mov rax, qword [rbp + 0x810]
mov qword [rax + rsi], rcx
mov rsi, qword [rbp - 0x78]
mov qword [rbp + 0x410], rsi
mov qword [rbp + 0x408], rax
lea rax, [0x14002c230]
mov r13d, 8
mov qword [rbp + 0x418], rax
mov qword [rbp + 0x420], r13
lea rax, [0x14002c190]
mov qword [rbp + 0x430], 0xa0
mov qword [rbp + 0x428], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [r13 + 0x28]
mov edx, r13d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
test rax, rax
jne 0x14000ef3d
mov esi, 0xc0000017
jmp 0x14000f137
mov esi, esi
mov dword [r13], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x14000ef75
mov esi, 0xc0000017
jmp 0x14000f06c
mov qword [r13 + 8], rax
mov rdx, qword [rbp + 0x810]
mov r8, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov esi, 0xa0
mov dword [r13 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14000ef6b
mov qword [r13 + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [rsi + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [r13 + 0x20], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
xor eax, eax
test rcx, rcx
je 0x14000ef6b
mov qword [r13 + 0x28], rcx
mov esi, eax
mov qword [rsp + 0x60], r13
mov rax, qword [0x14002c230]
mov qword [rcx], rax
xor eax, eax
mov r13d, eax
test r13, r13
je 0x14000f137
mov rax, qword [r13 + 8]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000f0ab
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000f0e1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rax, qword [r13 + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000f117
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test esi, esi
js 0x14000f14e
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x3f8], rax
xor eax, eax
mov r13d, eax
jmp 0x14000f15a
mov r13, qword [rsp + 0x60]
jmp 0x14000f15a
mov esi, 0xc0000001
mov rax, qword [rbp + 0x408]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000f196
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x408], rax
test r13, r13
je 0x14000f261
mov rax, qword [r13 + 8]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000f1d5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000f20b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rax, qword [r13 + 0x28]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000f241
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
or esi, 0x10000000
jl 0x14001025e
mov r13, qword [rbp + 0x3f8]
mov ecx, dword [r13]
mov r8d, dword [r13 + 0x20]
add ecx, 4
mov edx, dword [r13 + 0x10]
cmp ecx, 4
jb 0x14000f3e5
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14000f3e5
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x14000f3e5
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14000f3e5
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x14000f3e5
mov dword [rbp + 0x8c], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rsi, rax
mov qword [rsp + 0x60], rax
xor eax, eax
test rsi, rsi
jne 0x14000f303
mov esi, 0xc0000017
mov r10d, 0xc0000095
jmp 0x14000f3f0
mov eax, dword [r13]
mov dword [rsi], eax
lea rax, [rsi + 4]
cmp rax, rsi
jb 0x14000f3a8
mov r8d, dword [r13]
mov rcx, rax
mov rdx, qword [r13 + 8]
call sub.msvcrt.dll_memcpy
mov edx, dword [r13]
lea rcx, [rsi + 4]
add rdx, rcx
cmp rdx, rcx
jb 0x14000f3a8
mov eax, dword [r13 + 0x10]
lea rsi, [rdx + 4]
mov dword [rdx], eax
cmp rsi, rdx
jb 0x14000f3a8
mov r8d, dword [r13 + 0x10]
mov rcx, rsi
mov rdx, qword [r13 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r13 + 0x10]
add rcx, rsi
cmp rcx, rsi
jb 0x14000f3a8
mov eax, dword [r13 + 0x20]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x14000f3a8
mov r8d, dword [r13 + 0x20]
mov rcx, rsi
mov rdx, qword [r13 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r13 + 0x20]
mov r13, qword [rsp + 0x60]
add rax, rsi
cmp rax, rsi
jb 0x14000f3ad
xor eax, eax
mov qword [rbp - 0x40], r13
mov esi, eax
mov r13d, eax
mov eax, dword [rbp + 0x8c]
mov dword [rsp + 0x54], eax
jmp 0x14000f3b2
mov r13, qword [rsp + 0x60]
mov esi, 0xc0000095
xor eax, eax
test r13, r13
je 0x14000f2f8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10d, 0xc0000095
jmp 0x14000f3ee
mov r10d, 0xc0000095
mov esi, r10d
xor eax, eax
or esi, 0x10000000
jl 0x14001025e
mov dword [rbp + 0x90], eax
mov dword [rbp + 0x94], 0x1c
mov ecx, 0x28
mov dword [rbp + 0x98], ecx
mov dword [rbp + 0x9c], ecx
cmp qword [rbp + 0x6f0], rax
jne 0x14000f430
mov esi, 0xc000000d
jmp 0x14000f518
cmp dword [rbp + 0x6e8], 1
jbe 0x14000f426
mov rax, qword [rbp + 0x6f0]
xor ecx, ecx
mov edx, ecx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000f515
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000f515
inc edx
cmp edx, 1
jb 0x14000f444
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000f515
xor eax, eax
mov dword [rbp + 0x90], r8d
xor edx, edx
test r8d, r8d
cmovne rax, rcx
mov qword [rbp + 0x438], rax
cmp dword [rbp + 0x6e8], 2
jbe 0x14000f426
mov rax, qword [rbp + 0x6f0]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000f515
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14000f515
inc edx
cmp edx, 2
jb 0x14000f49f
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14000f515
xor eax, eax
mov dword [rbp + 0xa0], edx
xor r9d, r9d
test edx, edx
cmovne rax, rcx
mov qword [rbp + 0x440], rax
lea eax, [r8 + 0x30]
cmp eax, 0x30
jb 0x14000f515
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14000f515
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14000f515
mov dword [rbp + 0xa4], eax
mov esi, r9d
cmp eax, 0x400000
jbe 0x14000f50d
mov esi, 0x8000ffff
jmp 0x14001025e
mov dword [rbp + 0x80], eax
jmp 0x14000f518
mov esi, r10d
test esi, esi
js 0x14001025e
mov esi, dword [rbp + 0x80]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor ecx, ecx
test rax, rax
jne 0x14000f55a
mov esi, 0xd0000017
mov r13d, ecx
jmp 0x14000f569
mov r13, rax
mov qword [rbp + 0x820], rax
mov esi, 0x10000000
test esi, esi
js 0x14001025e
mov rax, qword [rbp - 0x40]
test rax, rax
jne 0x14000f584
mov esi, 0x80070057
jmp 0x14001025e
test r13, r13
je 0x14000f57a
mov qword [rbp + 0x788], rax
lea r8, [rbp + 0x448]
mov eax, dword [rsp + 0x54]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x798], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x79c], eax
xor eax, eax
mov qword [rbp + 0x790], r13
mov dword [rbp + 0x7a0], eax
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14000f601
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x14000f5f9
mov esi, 0x80004005
mov edx, dword [rbp + 0x80]
jmp 0x14000f653
mov rcx, qword [rbp + 0x448]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14000f5d6
xor r9d, r9d
lea rdx, [rbp + 0x788]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp + 0x80]
mov esi, eax
or esi, 0x10000000
cmovge edx, dword [rbp + 0x79c]
mov dword [rbp + 0x80], edx
cmp esi, 0xd0000023
jne 0x14000f665
mov esi, 0x8007007a
jmp 0x14001025e
xor eax, eax
test esi, esi
js 0x14001025e
mov qword [rsp + 0x60], rax
cmp edx, 4
jae 0x14000f683
mov esi, 0xc000003e
jmp 0x14000faca
mov r8d, dword [r13]
lea rcx, [r13 + 4]
mov dword [rsp + 0x68], r8d
cmp rcx, r13
jb 0x14000fac5
lea eax, [rdx - 4]
cmp eax, r8d
jae 0x14000f6af
mov esi, 0xc000003e
mov rcx, qword [rbp - 0x70]
jmp 0x14000facd
lea r10, [rcx + r8]
mov qword [rsp + 0x70], r8
mov qword [rbp - 0x78], r10
cmp r10, rcx
jb 0x14000fabb
lea r9d, [r8 + 4]
cmp r9d, 4
jb 0x14000fabb
mov eax, edx
sub eax, r9d
cmp eax, 4
jb 0x14000f6a1
mov esi, dword [r10]
lea rcx, [r10 + 4]
cmp rcx, r10
jb 0x14000fabb
lea r10d, [r9 + 4]
cmp r10d, r9d
jb 0x14000fabb
mov eax, edx
sub eax, r10d
cmp eax, esi
jb 0x14000f6a1
lea r9, [rcx + rsi]
cmp r9, rcx
jb 0x14000fabb
lea r11d, [r10 + rsi]
cmp r11d, r10d
jb 0x14000fabb
mov eax, edx
sub eax, r11d
cmp eax, 4
jb 0x14000f6a1
mov ecx, dword [r9]
lea rax, [r9 + 4]
mov dword [rsp + 0x54], ecx
mov qword [rbp + 0x810], rax
cmp rax, r9
jb 0x14000fabb
lea r9d, [r11 + 4]
cmp r9d, r11d
jb 0x14000fabb
mov eax, edx
sub eax, r9d
cmp eax, ecx
jb 0x14000f6a1
lea r10d, [r9 + rcx]
cmp r10d, r9d
jb 0x14000fabb
cmp edx, r10d
jne 0x14000f6a1
lea eax, [rsi + r8]
add ecx, eax
mov eax, edx
add rcx, 0xc
cmp rcx, rax
jne 0x14000f6a1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r13, rax
xor eax, eax
test r13, r13
jne 0x14000f7c3
mov esi, 0xc0000017
jmp 0x14000f9c7
mov rax, qword [rbp + 0x820]
add rax, 4
je 0x14000f82a
mov eax, dword [rsp + 0x68]
mov dword [r13], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
jne 0x14000f80f
mov esi, 0xc0000017
jmp 0x14000f900
mov qword [r13 + 8], rcx
mov rdx, qword [rbp + 0x820]
mov r8, qword [rsp + 0x70]
add rdx, 4
call sub.msvcrt.dll_memcpy
jmp 0x14000f834
xor eax, eax
mov dword [r13], eax
mov qword [r13 + 8], rax
mov rax, qword [rbp - 0x78]
add rax, 4
je 0x14000f888
mov dword [r13 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
test rax, rax
je 0x14000f805
mov qword [r13 + 0x18], rax
mov rdx, qword [rbp - 0x78]
mov r8, rsi
add rdx, 4
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor eax, eax
jmp 0x14000f892
xor eax, eax
mov dword [r13 + 0x10], eax
mov qword [r13 + 0x18], rax
mov rsi, qword [rbp + 0x810]
test rsi, rsi
je 0x14000f8ec
mov eax, dword [rsp + 0x54]
mov dword [r13 + 0x20], eax
mov qword [rbp - 0x70], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x70]
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14000f805
mov qword [r13 + 0x28], rax
mov r8, qword [rbp - 0x70]
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x14000f8f4
mov dword [r13 + 0x20], eax
mov qword [r13 + 0x28], rax
xor eax, eax
mov qword [rsp + 0x60], r13
mov r13d, eax
mov esi, eax
test r13, r13
je 0x14000f9c5
mov rax, qword [r13 + 8]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000f93d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rax, qword [r13 + 0x18]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000f971
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rax, qword [r13 + 0x28]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000f9a5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rsp + 0x60]
test esi, esi
mov r13, rax
cmovs r13, qword [rsp + 0x60]
xor r11d, r11d
test esi, esi
cmovs rcx, r11
mov qword [rbp - 0x70], rcx
test r13, r13
je 0x14000fad0
mov rax, qword [r13 + 8]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000fa24
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rax, qword [r13 + 0x18]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000fa5b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rax, qword [r13 + 0x28]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000fa91
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x70], rcx
jmp 0x14000facd
mov esi, 0xc0000095
jmp 0x14000f6a6
mov esi, 0xc0000095
mov rcx, rax
xor r11d, r11d
or esi, 0x10000000
jl 0x14001025e
mov qword [rbp + 0x450], r11
mov r13, r11
mov qword [rsp + 0x60], r11
test rcx, rcx
jne 0x14000fafa
mov esi, 0xd000000d
jmp 0x14001025e
mov rax, qword [rcx + 8]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000faf0
cmp dword [rcx], r11d
je 0x14000faf0
mov esi, dword [rcx]
mov dword [rsp + 0x68], r11d
test rsi, rsi
je 0x140010099
add rsi, 0xfffffffffffffff8
mov qword [rbp - 0x78], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x810], rax
mov r9, rax
test rax, rax
je 0x140010092
mov r13, qword [rsp + 0x70]
mov rdx, rsi
mov qword [rbp + 0x808], rdi
mov al, r11b
mov byte [rsp + 0x50], al
mov rcx, r9
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x60], r11d
and edx, 7
je 0x14000fc8d
mov ecx, r11d
mov r10d, r11d
mov dword [rsp + 0x54], ecx
test edx, edx
je 0x14000fbe5
lea r10d, [r11 + 0x38]
mov ebx, ecx
movzx r8d, byte [r13]
inc r13
cmp r11d, 4
jge 0x14000fbb7
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or ebx, r8d
jmp 0x14000fbc8
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or ecx, r8d
mov dword [rsp + 0x54], ecx
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14000fb99
mov dword [rbp - 0x60], ebx
movabs rbx, 0xc81ecb17b1b54a58
mov r10d, dword [rbp - 0x60]
and dword [rsp + 0x58], 0
mov r11d, ecx
xor r11d, 0x699a899c
xor r10d, 0x92f65a5
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14000fc56
mov rbx, r9
cmp dword [rsp + 0x58], 4
lea rdi, [rbx + 1]
mov qword [rbp - 0x58], rdi
jge 0x14000fc1e
rol ecx, 8
mov edi, ecx
jmp 0x14000fc25
rol r8d, 8
mov edi, r8d
inc dword [rsp + 0x58]
mov byte [rbx], dil
mov rdi, qword [rbp - 0x58]
mov rbx, rdi
cmp dword [rsp + 0x58], edx
jl 0x14000fc08
mov rcx, rdi
movabs rbx, 0xc81ecb17b1b54a58
mov qword [rbp - 0x58], rcx
movabs rdi, 0x7f1137fab69605e
jmp 0x14000fc59
mov rcx, r9
cmp edx, 4
jbe 0x14000fc70
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14000fc87
xor r11d, r11d
cmp edx, 4
jae 0x14000fc97
lea ecx, [r11 + 4]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x58]
jmp 0x14000fc97
or dword [rsp + 0x54], 0xffffffff
xor edx, edx
mov r10d, edx
mov rdx, rsi
shr rdx, 3
mov qword [rbp - 0x48], rdx
test rdx, rdx
je 0x14000ffeb
mov r12d, dword [rbp + 0x80c]
lea rsi, [r13 + 2]
mov r13, qword [rbp - 0x48]
lea r15, [rcx + 7]
mov ebx, dword [rsp + 0x54]
mov edx, edi
mov r14d, dword [rbp - 0x60]
xor edx, r12d
movzx eax, r12w
mov dword [rsp + 0x58], eax
movzx eax, word [rbp + 0x80a]
mov dword [rbp - 0x80], eax
movzx eax, di
mov dword [rbp - 0x58], eax
mov eax, edx
movzx ecx, byte [rsi - 1]
movzx r9d, byte [rsi - 2]
movzx r8d, byte [rsi + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rsi]
lea rsi, [rsi + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rsi - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rsi - 5]
or r8d, ecx
xor r10d, r9d
movzx ecx, byte [rsi - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rsi - 3]
shl r8d, 8
or r8d, ecx
mov ecx, r12d
xor ecx, edi
xor r11d, r8d
xor r11d, ecx
xor r11d, r10d
mov edx, r11d
mov ecx, r11d
sub edx, edi
rol ecx, 0xa
rol edx, 5
imul edx, dword [rsp + 0x58]
add edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
lea edx, [r12 + r10]
ror edx, 9
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
sub edx, dword [rsp + 0x58]
imul edx, dword [rbp - 0x58]
shr ecx, 0xd
sub edx, ecx
movzx ecx, word [rbp + 0x80e]
xor r10d, edx
movzx edx, word [rbp + 0x80a]
xor edx, r10d
rol edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
mov ecx, r12d
xor r11d, edx
mov edx, r11d
xor edx, edi
sub ecx, edx
xor r10d, ecx
mov ecx, dword [rsp + 0x58]
xor ecx, r10d
mov edx, r10d
imul ecx, dword [rbp - 0x80]
ror edx, 6
xor edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 2
lea edx, [r12 + r11]
ror edx, 0xf
imul edx, dword [rbp - 0x58]
add edx, ecx
xor r10d, edx
mov edx, r10d
sub edx, edi
ror edx, 0xe
movzx ecx, word [rbp + 0x80e]
imul edx, ecx
mov ecx, r10d
rol ecx, 8
sub edx, ecx
xor r11d, edx
mov edx, edi
xor edx, r11d
mov ecx, r11d
ror ecx, 0xa
ror edx, 0xc
imul edx, dword [rsp + 0x58]
xor edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
movzx edx, word [rbp + 0x80e]
xor edx, r10d
imul edx, ecx
mov ecx, r10d
shr ecx, 0xa
xor edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x80e]
mov ecx, r11d
not ecx
ror ecx, 5
add ecx, dword [rbp - 0x58]
imul ecx, edx
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
xor ecx, edi
xor r11d, ecx
xor edx, r11d
mov ecx, r11d
rol edx, 2
imul edx, dword [rsp + 0x58]
shr ecx, 2
add edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
mov edx, r10d
sub edx, r12d
ror edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
mov ecx, dword [rsp + 0x58]
xor r11d, edx
xor ecx, r11d
mov edx, r11d
imul ecx, dword [rbp - 0x58]
ror edx, 9
add edx, ecx
movzx ecx, word [rbp + 0x80e]
xor r10d, edx
movzx edx, word [rbp + 0x80a]
xor edx, r10d
rol edx, 5
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
mov ecx, eax
xor r11d, edx
movzx edx, word [rbp + 0x80a]
xor ecx, r11d
xor r10d, ecx
mov ecx, r10d
ror ecx, 3
sub ecx, edx
imul ecx, dword [rsp + 0x58]
xor r11d, ecx
mov edx, r11d
mov ecx, r11d
sub edx, r12d
ror ecx, 6
ror edx, 1
imul edx, dword [rbp - 0x58]
sub edx, ecx
movzx ecx, word [rbp + 0x80e]
xor r10d, edx
lea edx, [rdi + r10]
rol edx, 3
imul edx, ecx
mov ecx, r10d
rol ecx, 0xe
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xe
lea edx, [rdi + r11]
rol edx, 0xf
imul edx, dword [rsp + 0x58]
sub edx, ecx
movzx ecx, word [rbp + 0x80a]
xor r10d, edx
mov edx, dword [rbp - 0x58]
xor edx, r10d
imul edx, ecx
mov ecx, r10d
shr ecx, 3
xor edx, ecx
xor r11d, edx
mov edx, r12d
xor edx, r11d
mov ecx, r11d
xor r11d, ebx
rol edx, 4
imul edx, dword [rbp - 0x58]
mov ebx, r8d
rol ecx, 2
xor edx, ecx
xor edx, r14d
mov r14d, r9d
xor r10d, edx
mov byte [r15 - 4], r10b
mov byte [r15], r11b
lea r15, [r15 + 8]
ror r10d, 8
mov byte [r15 - 0xd], r10b
ror r11d, 8
mov byte [r15 - 9], r11b
ror r10d, 8
mov byte [r15 - 0xe], r10b
ror r11d, 8
mov byte [r15 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r15 - 0xf], r10b
mov byte [r15 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r13, 1
jne 0x14000fce5
mov al, byte [rsp + 0x50]
movabs rbx, 0xc81ecb17b1b54a58
mov r14d, dword [rbp + 0x2a0]
mov r12d, 0x8007000e
mov r15d, dword [rbp - 0x30]
mov rsi, qword [rbp - 0x78]
mov r9, qword [rbp + 0x810]
xor r11d, r11d
mov ecx, r11d
test rsi, rsi
je 0x140010002
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x14000fff6
movzx ecx, al
mov rax, qword [rsp + 0x70]
cmp rcx, qword [rsi + rax]
je 0x14001001e
mov r13, qword [rbp + 0x450]
mov esi, 0xc004d501
jmp 0x14001003b
mov r13, r9
mov qword [rbp + 0x450], r9
mov qword [rsp + 0x60], rsi
mov r9, r11
mov esi, dword [rsp + 0x68]
mov qword [rbp + 0x810], r11
test r9, r9
je 0x14001006e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x810]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13, qword [rbp + 0x450]
xor r11d, r11d
test esi, esi
js 0x140010099
mov rcx, qword [rsp + 0x60]
mov esi, 0x10000000
mov qword [rbp - 0x50], r13
mov r13, r11
mov dword [rbp + 0x84], ecx
mov qword [rbp + 0x450], r11
jmp 0x1400100a4
mov r13, qword [rbp + 0x450]
mov ecx, dword [rbp + 0x84]
mov esi, 0xd0000001
test r13, r13
je 0x1400100d9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, dword [rbp + 0x84]
xor r11d, r11d
mov qword [rbp + 0x450], r11
test esi, esi
js 0x14001025e
cmp ecx, 4
jae 0x1400100f0
mov esi, 0xc000003e
jmp 0x14001025a
mov r9, qword [rbp - 0x50]
mov r10d, dword [r9]
lea rdx, [r9 + 4]
mov dword [rbp - 0x58], r10d
cmp rdx, r9
jb 0x140010255
lea eax, [rcx - 4]
cmp eax, 4
jb 0x1400100e6
mov r13d, dword [rdx]
lea rsi, [rdx + 4]
cmp rsi, rdx
jb 0x140010255
lea eax, [rcx - 8]
cmp eax, r13d
jb 0x1400100e6
lea eax, [r13 + 8]
cmp eax, 8
jb 0x140010255
mov ecx, ecx
lea rdx, [rsi + r13]
mov r8d, r13d
lea rax, [rcx + r9]
cmp rax, rdx
jb 0x1400100e6
sub rcx, r13
sub rcx, rsi
add rcx, r9
cmp rcx, 8
jae 0x1400100e6
mov dword [rbp - 0x80], r11d
mov rax, r11
mov qword [rbp - 0x48], rax
mov r9d, r11d
test rsi, rsi
je 0x1400101c4
mov rcx, rsi
cmp rdx, rsi
jb 0x140010255
jbe 0x1400101bf
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x140010255
cmp rax, rdx
ja 0x1400101ff
mov eax, dword [rcx]
add eax, 4
cmp eax, 4
jb 0x140010206
mov dword [rbp + 0xa8], eax
mov r10d, eax
add r10, rcx
cmp r10, rcx
jb 0x140010255
mov rcx, r10
cmp r10, rdx
ja 0x1400101ff
inc r9d
mov dword [rbp - 0x80], r9d
cmp rcx, rdx
jb 0x140010177
mov rax, r11
cmp rcx, rdx
jne 0x1400101ff
test r13d, r13d
je 0x140010210
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x48], rax
test rax, rax
jne 0x14001020d
mov esi, 0xc0000017
jmp 0x140010241
mov esi, 0xc000000d
jmp 0x14001025a
mov esi, 0xc0000095
jmp 0x140010241
mov r8, r13
test rsi, rsi
je 0x140010227
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x48]
xor r11d, r11d
mov qword [rbp + 0x700], rax
mov eax, dword [rbp - 0x80]
mov dword [rbp + 0x6f8], eax
mov dword [rbp + 0x6fc], r13d
mov esi, r11d
test esi, esi
js 0x14001025a
mov eax, dword [rbp - 0x58]
cmp eax, dword [rbp + 0x6f8]
je 0x14001025a
jmp 0x1400100e6
mov esi, 0xc0000095
bts esi, 0x1c
mov r13, qword [rbp - 0x38]
test r13, r13
je 0x140010287
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13, qword [rbp + 0x3f8]
test r13, r13
je 0x14001035c
mov rax, qword [r13 + 8]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400102cb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 8], rax
mov rax, qword [r13 + 0x18]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400102ff
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x18], rax
mov rax, qword [r13 + 0x28]
mov qword [rbp - 0x48], rax
test rax, rax
je 0x140010333
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x3f8], rax
mov r13, qword [rbp - 0x40]
test r13, r13
je 0x140010385
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13, qword [rbp + 0x820]
test r13, r13
je 0x1400103b1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
xor r9d, r9d
test rax, rax
je 0x140010485
mov r13, qword [rax + 8]
test r13, r13
je 0x1400103f5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
xor r9d, r9d
mov qword [rax + 8], r9
mov r13, qword [rax + 0x18]
test r13, r13
je 0x140010429
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
xor r9d, r9d
mov qword [rax + 0x18], r9
mov r13, qword [rax + 0x28]
test r13, r13
je 0x14001045e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13, qword [rbp - 0x70]
xor eax, eax
mov qword [r13 + 0x28], rax
jmp 0x140010462
mov r13, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
mov r13, qword [rbp - 0x50]
test r13, r13
je 0x1400104b1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
test esi, esi
js 0x140010564
mov edx, dword [rbp + 0x6f8]
cmp edx, 1
jb 0x140010564
mov rsi, qword [rbp + 0x700]
test rsi, rsi
je 0x140010564
test edx, edx
je 0x140010564
mov ecx, dword [rsi]
lea r8, [rsi + 4]
cmp r8, rsi
jb 0x140010564
test ecx, ecx
mov dword [rbp + 0xac], ecx
mov rax, r9
cmovne rax, r8
mov qword [rbp + 0x460], rax
cmp ecx, 4
jne 0x140010564
mov eax, dword [rax]
mov dword [rbp + 0xb0], eax
test eax, eax
js 0x140010564
cmp edx, 1
jbe 0x140010564
mov edx, r9d
lea rcx, [rsi + 4]
cmp rcx, rsi
jb 0x140010564
mov esi, dword [rsi]
add rsi, rcx
cmp rsi, rcx
jb 0x140010564
inc edx
cmp edx, 1
jb 0x14001051a
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x140010564
test ecx, ecx
mov dword [rbp + 0xb4], ecx
mov rax, r9
cmovne rax, rdx
mov qword [rbp + 0x468], rax
cmp ecx, 8
jne 0x140010564
mov rax, qword [rax]
mov qword [rbp + 0x470], rax
mov r13, qword [rbp + 0x818]
jmp 0x140010577
xor eax, eax
mov r13, rsi
jmp 0x140010579
mov r13, rsi
xor eax, eax
mov rsi, qword [rbp + 0x6f0]
mov dword [rbp + 0x6ec], eax
mov dword [rbp + 0x6e8], eax
test rsi, rsi
je 0x1400105ba
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x6f0], rax
mov rsi, qword [rbp + 0x700]
mov dword [rbp + 0x6fc], eax
mov dword [rbp + 0x6f8], eax
test rsi, rsi
je 0x1400105fb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x700], rax
test r13, r13
je 0x140010620
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp - 0x68]
test rsi, rsi
je 0x140010649
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [rbp + 0x2ac]
xor ecx, ecx
mov esi, dword [rbp + 0x2a4]
mov r13d, dword [rbp + 0x29c]
mov dword [rbp + 0xb8], eax
mov rax, qword [rbp + 0x340]
mov qword [rbp + 0x338], rax
mov qword [rbp + 0x340], rcx
jmp 0x140010685
mov r13d, dword [rbp + 0x29c]
mov esi, dword [rbp - 0x24]
lea rcx, [rbp + 0x340]
call fcn.14000b280
mov ecx, 0xc004f01e
test r15d, r15d
jns 0x1400106ea
cmp r15d, 0xd0000034
jne 0x1400106ad
lea r15d, [rcx - 0xc]
mov r14d, r15d
jmp 0x1400106fe
cmp r15d, 0xd00000e5
je 0x1400106d0
cmp r15d, 0xc004d501
je 0x1400106d0
cmp r15d, 0xd000003e
jne 0x1400106d6
mov r15d, 0xc004f028
jmp 0x1400106a8
mov r15d, 0xc004f027
test r15d, r15d
jns 0x1400106ea
mov eax, 0x8007007a
cmp r15d, eax
jne 0x1400106a8
mov r14d, ecx
jmp 0x1400106fe
cmp esi, 4
jne 0x1400106e5
mov rax, qword [rbp + 0x338]
mov ecx, dword [rax]
mov dword [rbp + 0xbc], ecx
lea rcx, [rbp + 0x338]
call fcn.14000b280
xor r15d, r15d
test r14d, r14d
jns 0x14001071a
mov ecx, r14d
jmp 0x140018665
test byte [rbp + 0xbc], 1
jne 0x14001072b
mov r14d, r15d
jmp 0x14001866a
lea r9, [rbp + 0xc0]
mov qword [rsp + 0x20], r15
lea r8, str.DisableSubscription
mov rcx, 0xffffffff80000002
lea rdx, str.SystemCurrentControlSetServicesClipSVCParameters
call fcn.140023a88
test eax, eax
js 0x1400107ac
cmp dword [rbp + 0xc0], r15d
je 0x1400107ac
lea rcx, [rbp + 0x308]
call qword [sym.imp.CLIPC.dll_ClipOpen]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
js 0x140018663
mov rcx, qword [rbp + 0x308]
lea rdx, str.ClipCallServerCleanSubscriptionData
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.CLIPC.dll_ClipCallServer]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jns 0x14001866a
jmp 0x140018663
mov esi, dword [rbp + 0xbc]
shr esi, 1
cmp esi, 2
jne 0x1400107d1
lea rcx, [rbp + 0xc4]
call fcn.14000ac4c
mov r14d, eax
test eax, eax
jns 0x14001080e
jmp 0x140018663
cmp esi, 1
jne 0x14001865b
xor edx, edx
lea rcx, [rbp + 0xc4]
call qword [sym.imp.dsreg.dll_DsrIsDeviceJoined]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jns 0x1400107fd
mov ecx, eax
call fcn.140001c64
mov ecx, r14d
call fcn.140001c84
test r14d, r14d
js 0x140010712
cmp dword [rbp + 0xc4], r15d
je 0x14001858f
test r13d, r13d
je 0x1400108de
mov ecx, 2
call fcn.14001870c
mov edi, 3
mov rbx, rax
mov ecx, edi
call fcn.14001870c
lea r9d, [rdi - 2]
mov rdx, rax
mov ecx, r9d
mov r8, rbx
call fcn.1400220cc
cmp dword [section..data], 5
mov r14d, eax
jbe 0x1400108d0
movabs rdx, 0x400000000000
test qword [0x14002c010], rdx
je 0x1400108d0
mov rax, qword [0x14002c018]
and rax, rdx
cmp rax, qword [0x14002c018]
jne 0x1400108d0
lea rax, [rbp + 0xc8]
mov dword [rbp + 0xc8], r14d
mov qword [rbp + 0x858], rax
lea rdx, [0x14002938d]
lea rax, [rbp + 0x838]
mov dword [rbp + 0x860], 4
mov qword [rsp + 0x28], rax
lea rcx, [section..data]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov dword [rbp + 0x864], r15d
call fcn.140001090
test r14d, r14d
jns 0x14001866a
jmp 0x140010712
cmp esi, 2
je 0x140010907
lea rcx, [rbp + 0xcc]
call fcn.14000ab84
mov r14d, eax
test eax, eax
js 0x140018663
cmp dword [rbp + 0xcc], r15d
je 0x140010723
mov qword [rbp + 0x478], r15
mov dword [rbp - 0x58], r15d
mov dword [rbp + 0xd0], r15d
mov qword [rbp + 0x480], r15
mov dword [rbp + 0xd4], r15d
mov edx, 4
mov dword [rbp - 0x28], r15d
lea ecx, [rdx + 0x3c]
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x480]
mov qword [rbp - 0x48], rax
mov rsi, rax
call fcn.14000b280
test rsi, rsi
jne 0x140010963
mov qword [rbp + 0x480], r15
jmp 0x1400154b5
xor eax, eax
mov qword [rbp + 0x480], rsi
mov qword [rbp + 0x710], rax
xorps xmm0, xmm0
mov dword [rbp + 0xd8], eax
mov r13, r15
mov dword [rbp + 0xdc], eax
lea rax, [0x14002c240]
mov qword [rbp + 0x488], rax
movups xmmword [rbp + 0x718], xmm0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov esi, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x1400109dc
mov r12d, 0xc0000017
mov dword [rbp - 0x80], r12d
jmp 0x140010af4
mov rax, qword [rbp + 0x488]
mov edx, 0x80
mov r13, r14
mov qword [rbp + 0x818], r14
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r14 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r14 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r14 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r14 + rdx + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x490], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r15, rax
test rax, rax
jne 0x140010a95
mov r12d, 0xc0000017
mov r15d, r11d
mov dword [rbp - 0x80], r12d
jmp 0x140010af4
mov rax, qword [rbp + 0x490]
mov qword [rbp - 0x68], r15
mov rcx, qword [rax]
mov qword [r15], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x498], rax
mov dword [rbp + 0xe0], 0xc
lea r8, [rbp + 0x4a0]
mov edx, 0x7fffffff
lea rcx, str.CE163B38_1AEC_47AF_854D_FC90ABD6951C
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x140010de9
mov qword [rbp + 0x4a0], r11
mov r12d, 0xc000003e
mov dword [rbp - 0x80], r12d
mov rsi, qword [rbp + 0x710]
mov dword [rbp + 0x70c], r11d
mov dword [rbp + 0x708], r11d
test rsi, rsi
je 0x140010b38
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x710], r11
mov rsi, qword [rbp + 0x720]
mov dword [rbp + 0x71c], r11d
mov dword [rbp + 0x718], r11d
test rsi, rsi
je 0x140010b7c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x720], r11
test r13, r13
je 0x140010ba4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r15, r15
je 0x140010bcc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r12d, r12d
js 0x1400154b2
cmp dword [rbp + 0xd4], r11d
je 0x1400147bc
xorps xmm0, xmm0
mov qword [rbp + 0x730], r11
lea rax, [0x14002c240]
mov r15, r11
movups xmmword [rbp + 0x738], xmm0
mov qword [rbp + 0x550], rax
mov r13, r11
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r14d, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
je 0x1400146e4
mov rcx, qword [rbp + 0x550]
mov r15, rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea eax, [r14 + 0x78]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rsi + rax - 0x10], xmm1
movups xmm0, xmmword [rcx + rax]
movups xmmword [rsi + rax], xmm0
movups xmm1, xmmword [rcx + rax + 0x10]
movups xmmword [rsi + rax + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x558], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
je 0x1400146e4
mov rcx, qword [rbp + 0x558]
mov r13, rax
mov qword [rbp - 0x68], rax
mov rdx, qword [rcx]
mov qword [rax], rdx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x560], rax
mov dword [rbp + 0x16c], 0xc
mov dword [rbp + 0x72c], 0xc4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xc4
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
je 0x1400146e4
mov qword [rbp + 0x730], rax
mov dword [rbp + 0x728], r11d
mov dword [rbp + 0x170], 4
lea r8, [rax + 4]
cmp r8, rax
jb 0x1400146e4
mov ecx, dword [rbp + 0x72c]
add rcx, rax
add rax, 8
cmp rax, rcx
ja 0x1400146e4
mov dword [rdx], 4
mov eax, dword [rbp + 0x170]
mov dword [r8], eax
mov edx, dword [rbp + 0x728]
inc edx
mov dword [rbp + 0x728], edx
cmp qword [rbp + 0x730], r11
jne 0x140013504
mov dword [rbp + 0x178], 0xa4
mov eax, dword [rbp + 0x72c]
lea ecx, [rax + 0xa4]
cmp ecx, eax
jb 0x1400146e4
lea eax, [rdx + 1]
mov dword [rbp + 0x72c], ecx
mov dword [rbp + 0x728], eax
lea r10d, [r11 + 1]
jmp 0x1400135da
mov rax, qword [rbp + 0x4a0]
mov r9d, 0xc0000095
inc rax
mov qword [rbp + 0x4a0], rax
lea eax, [rax*2 + 4]
cmp eax, 4
jb 0x140010e17
mov r12d, r11d
mov dword [rbp + 0xe0], eax
jmp 0x140010e20
mov eax, dword [rbp + 0xe0]
mov r12d, r9d
mov dword [rbp - 0x80], r12d
test r12d, r12d
js 0x140010af4
add eax, 0xc4
or r8d, 0xffffffff
mov ecx, 0xc4
mov edx, r8d
cmp eax, ecx
mov r10d, 0x10000000
cmovae edx, eax
sbb r12d, r12d
and r12d, r9d
add r12d, r10d
mov dword [rbp - 0x80], r12d
cmp eax, ecx
jb 0x1400134bc
lea eax, [rdx + 8]
mov ecx, r8d
cmp eax, edx
cmovae ecx, eax
sbb r12d, r12d
and r12d, r9d
add r12d, r10d
mov dword [rbp - 0x80], r12d
cmp eax, edx
jb 0x1400134bc
mov dword [rbp + 0xe0], esi
lea eax, [rcx + 8]
mov edx, r8d
cmp eax, ecx
cmovae edx, eax
sbb r12d, r12d
and r12d, r9d
add r12d, r10d
mov dword [rbp - 0x80], r12d
cmp eax, ecx
jb 0x1400134bc
mov dword [rbp + 0x70c], edx
mov esi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
jne 0x140010ee5
mov r12d, 0xc0000017
jmp 0x140010af0
mov qword [rbp + 0x710], rdx
mov dword [rbp + 0x708], r11d
mov dword [rbp + 0xe8], r11d
lea r8, [rax + 4]
cmp r8, rdx
jb 0x1400134f9
mov ecx, dword [rbp + 0x70c]
add rax, 8
add rcx, rdx
cmp rax, rcx
jbe 0x140010f24
mov r12d, 0xc0000023
jmp 0x140010af0
mov dword [rdx], 4
mov eax, dword [rbp + 0xe8]
mov dword [r8], eax
mov ecx, dword [rbp + 0x708]
inc ecx
mov dword [rbp + 0x708], ecx
cmp qword [rbp + 0x710], r11
jne 0x140010f89
mov dword [rbp + 0xf0], 0xa4
mov eax, dword [rbp + 0x70c]
lea edx, [rax + 0xa4]
cmp edx, eax
jb 0x140010f77
inc ecx
mov dword [rbp + 0x70c], edx
mov dword [rbp + 0x708], ecx
jmp 0x140011079
mov r14d, 0xc0000095
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x140010af4
mov r8, qword [rbp + 0x710]
mov edx, r11d
test ecx, ecx
je 0x140010fc4
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x1400110b3
mov dword [rbp + 0xf0], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x1400134f9
inc edx
mov r8, r9
cmp edx, ecx
jb 0x140010f97
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x1400134f9
mov ecx, dword [rbp + 0x70c]
lea rax, [r8 + 0xa4]
add rcx, qword [rbp + 0x710]
mov r12d, r11d
mov dword [rbp - 0x80], r11d
cmp rax, rcx
ja 0x140010f19
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [r14]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [r14 + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [r14 + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
mov ecx, dword [rbp + 0x708]
inc ecx
mov dword [rbp + 0x708], ecx
test r12d, r12d
js 0x140010af4
mov edx, dword [rbp + 0x70c]
cmp qword [rbp + 0x710], r11
jne 0x1400110bf
mov dword [rbp + 0xf4], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x1400134f9
mov edx, eax
mov esi, 1
mov rax, qword [rbp + 0x498]
add ecx, esi
mov qword [rbp + 0x4a8], rax
jmp 0x140011172
mov r12d, 0xc0000095
mov dword [rbp - 0x80], r12d
jmp 0x14001106a
mov r8, qword [rbp + 0x710]
mov r9d, r11d
mov esi, 1
test ecx, ecx
je 0x140011101
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14001119a
mov dword [rbp + 0xf4], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x1400134f9
add r9d, esi
mov r8, r10
cmp r9d, ecx
jb 0x1400110d2
lea r9, [r8 + 4]
cmp r9, r8
jb 0x1400134f9
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rbp + 0x710]
mov r12d, r11d
mov dword [rbp - 0x80], r11d
cmp rax, rcx
ja 0x140010f19
mov dword [r8], 8
mov r14d, 0xc0000095
mov rax, qword [r15]
mov qword [r9], rax
mov ecx, dword [rbp + 0x708]
mov edx, dword [rbp + 0x70c]
add ecx, esi
mov dword [rbp + 0x708], ecx
test r12d, r12d
js 0x140010af4
mov rax, qword [rbp + 0x498]
mov qword [rbp + 0x4a8], rax
cmp qword [rbp + 0x710], r11
jne 0x1400111a9
mov dword [rbp + 0xf8], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x1400134f9
add ecx, esi
mov dword [rbp + 0x70c], eax
mov dword [rbp + 0x708], ecx
jmp 0x140011230
mov r14d, 0xc0000095
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x140011152
mov r8, qword [rbp + 0x710]
mov r9d, r11d
test ecx, ecx
je 0x1400111e6
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14001125b
mov dword [rbp + 0xf8], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x140010f7d
add r9d, esi
mov r8, r10
cmp r9d, ecx
jb 0x1400111b7
lea r9, [r8 + 4]
cmp r9, r8
jb 0x140010f7d
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rbp + 0x710]
mov r12d, r11d
mov dword [rbp - 0x80], r11d
cmp rax, rcx
ja 0x140010f19
mov dword [r8], 8
mov rax, qword [rbp + 0x4a8]
mov qword [r9], rax
add dword [rbp + 0x708], esi
test r12d, r12d
js 0x140010af4
lea r8, [rbp + 0x4b0]
mov edx, 0x7fffffff
lea rcx, str.CE163B38_1AEC_47AF_854D_FC90ABD6951C
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x140011264
mov qword [rbp + 0x4b0], r11
jmp 0x140010aea
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x140011227
mov rax, qword [rbp + 0x4b0]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x1400134f1
lea r9d, [rcx + rcx]
mov qword [rbp + 0x4b0], rcx
test r9d, r9d
je 0x14001139c
cmp qword [rbp + 0x710], r11
jne 0x1400112fd
add r9d, 4
cmp r9d, 4
jb 0x1400112eb
mov dword [rbp + 0xfc], r9d
mov eax, dword [rbp + 0x70c]
mov r14d, 0xc0000095
lea r8d, [r9 + rax]
cmp r8d, eax
jb 0x1400112d4
add dword [rbp + 0x708], esi
mov r12d, r11d
mov dword [rbp + 0x70c], r8d
mov dword [rbp - 0x80], r11d
jmp 0x1400113b3
or r8d, 0xffffffff
mov dword [rbp - 0x80], r14d
mov dword [rbp + 0x70c], r8d
mov r12d, r14d
jmp 0x1400113b3
mov r14d, 0xc0000095
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x1400113ac
mov ecx, r11d
mov rdx, qword [rbp + 0x710]
cmp dword [rbp + 0x708], r11d
jbe 0x140011338
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400112eb
mov dword [rbp + 0xfc], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x1400112eb
add ecx, esi
mov rdx, r8
cmp ecx, dword [rbp + 0x708]
jb 0x140011310
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x1400112eb
mov r8d, dword [rbp + 0x70c]
lea rax, [r9 + 4]
mov ecx, r8d
mov dword [rbp - 0x80], r11d
add rcx, qword [rbp + 0x710]
add rax, rdx
mov r12d, r11d
mov r11d, r9d
cmp rax, rcx
jbe 0x14001137c
mov r12d, 0xc0000023
xor r11d, r11d
mov dword [rbp - 0x80], r12d
lea r14d, [r12 + 0x72]
jmp 0x1400113b3
mov dword [rdx], r9d
mov r8, r11
lea rdx, str.CE163B38_1AEC_47AF_854D_FC90ABD6951C
mov rcx, r10
call sub.msvcrt.dll_memcpy
add dword [rbp + 0x708], esi
xor r11d, r11d
jmp 0x1400113a6
mov r12d, 0xc000000d
mov dword [rbp - 0x80], r12d
mov r14d, 0xc0000095
mov r8d, dword [rbp + 0x70c]
test r12d, r12d
js 0x140010af4
mov eax, dword [rbp + 0xd4]
mov dword [rbp + 0x100], eax
cmp qword [rbp + 0x710], r11
jne 0x140011400
mov dword [rbp + 0x108], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140010f7d
add dword [rbp + 0x708], esi
mov r8d, eax
mov dword [rbp + 0x110], 4
jmp 0x1400114a6
mov ecx, r11d
mov rdx, qword [rbp + 0x710]
cmp dword [rbp + 0x708], r11d
jbe 0x140011443
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400114d1
mov dword [rbp + 0x108], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140010f7d
add ecx, esi
mov rdx, r9
cmp ecx, dword [rbp + 0x708]
jb 0x140011413
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x140010f7d
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rbp + 0x710]
mov r12d, r11d
mov dword [rbp - 0x80], r11d
cmp rax, rcx
ja 0x140010f19
mov dword [rdx], 4
mov eax, dword [rbp + 0x100]
mov dword [r9], eax
add dword [rbp + 0x708], esi
mov r8d, dword [rbp + 0x70c]
test r12d, r12d
js 0x140010af4
mov dword [rbp + 0x110], 4
cmp qword [rbp + 0x710], r11
jne 0x1400114da
mov dword [rbp + 0x118], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140010f7d
add dword [rbp + 0x708], esi
mov r8d, eax
mov dword [rbp + 0x70c], eax
jmp 0x14001156d
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x14001148a
mov ecx, r11d
mov rdx, qword [rbp + 0x710]
cmp dword [rbp + 0x708], r11d
jbe 0x14001151d
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400115f2
mov dword [rbp + 0x118], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140010f7d
add ecx, esi
mov rdx, r9
cmp ecx, dword [rbp + 0x708]
jb 0x1400114ed
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x140010f7d
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rbp + 0x710]
mov r12d, r11d
mov dword [rbp - 0x80], r11d
cmp rax, rcx
ja 0x140010f19
mov dword [rdx], 4
mov eax, dword [rbp + 0x110]
mov dword [r9], eax
add dword [rbp + 0x708], esi
mov r8d, dword [rbp + 0x70c]
test r12d, r12d
js 0x140010af4
mov dword [rbp + 0x11c], 8
mov r9, r11
mov qword [rbp - 0x38], r11
mov r15d, r11d
mov qword [rbp + 0x4b8], r11
mov qword [rbp - 0x40], r11
mov r13d, r11d
mov dword [rsp + 0x68], r11d
mov qword [rbp + 0x820], r11
mov dword [rbp + 0x120], r11d
mov qword [rbp - 0x70], r11
mov qword [rbp - 0x50], r11
mov dword [rbp + 0x124], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x4c0], rax
lea eax, [r8 + 8]
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb r12d, r12d
and r12d, r14d
cmp eax, 8
jb 0x1400116d2
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x1400115fe
mov r12d, r14d
jmp 0x1400116d2
mov r12d, r14d
mov dword [rbp - 0x80], r14d
jmp 0x140011564
mov dword [rbp + 0x128], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001163f
mov r12d, 0xc0000017
jmp 0x1400116ce
mov eax, dword [rbp + 0x708]
lea rdx, [rsi + 4]
mov dword [rsi], eax
cmp rdx, rsi
jb 0x14001169f
mov eax, dword [rbp + 0x70c]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14001169f
mov edx, dword [rbp + 0x128]
mov r12d, r11d
mov rax, qword [rbp + 0x4c0]
mov qword [rdx + rsi - 8], rax
mov r8d, dword [rbp + 0x70c]
mov rdx, qword [rbp + 0x710]
call sub.msvcrt.dll_memcpy
mov r15d, dword [rbp + 0x128]
xor r11d, r11d
mov r9, rsi
mov qword [rbp - 0x38], rsi
mov esi, r11d
jmp 0x1400116a6
mov r9, qword [rbp - 0x38]
mov r12d, r14d
test rsi, rsi
je 0x1400116d2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r9, qword [rbp - 0x38]
or r12d, 0x10000000
mov dword [rbp - 0x80], r12d
jl 0x140012206
mov qword [rbp + 0x4c8], r11
mov r14, r11
mov qword [rsp + 0x60], r11
test r9, r9
jne 0x140011702
mov r12d, 0xc000000d
jmp 0x140011f4b
mov esi, r15d
mov qword [rsp + 0x70], rsi
test r15d, r15d
je 0x140011e4f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8, [rsi + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x78], rax
mov r13, rax
test rax, rax
je 0x140011e4f
mov r9, qword [rbp - 0x38]
mov dl, r11b
mov byte [rsp + 0x50], dl
mov ecx, r11d
test r15d, r15d
je 0x14001176a
xor dl, byte [r9 + rcx]
inc rcx
cmp rcx, rsi
jb 0x14001175a
mov byte [rsp + 0x50], dl
xor r8d, r8d
mov qword [rbp + 0x810], rbx
mov r12, rax
mov dword [rbp - 0x80], r8d
mov r10d, r11d
mov dword [rsp + 0x54], r8d
or r11d, 0xffffffff
mov rax, rsi
and eax, 7
je 0x14001187c
mov dword [rbp - 0x80], r8d
mov ecx, r8d
mov dword [rsp + 0x54], ecx
mov r15d, r8d
mov r11d, r8d
test eax, eax
je 0x1400117ea
lea r10d, [r8 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, 4
jge 0x1400117cd
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or ecx, r8d
mov dword [rsp + 0x54], ecx
jmp 0x1400117da
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x54]
or r15d, r8d
inc r11d
sub r10d, 8
cmp r11d, eax
jl 0x1400117ac
mov dword [rbp - 0x80], r15d
mov r10d, ecx
mov r11d, r15d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r15d, r15d
mov ecx, r10d
mov r8d, r11d
test eax, eax
je 0x14001184b
lea rdi, [r12 + 1]
mov qword [rbp + 0x808], rdi
cmp r15d, 4
jge 0x140011824
rol ecx, 8
mov edi, ecx
jmp 0x14001182b
rol r8d, 8
mov edi, r8d
mov byte [r12], dil
inc r15d
mov rdi, qword [rbp + 0x808]
mov r12, rdi
cmp r15d, eax
jl 0x14001180b
movabs rdi, 0x7f1137fab69605e
cmp eax, 4
jbe 0x140011862
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001187c
xor r8d, r8d
mov r11d, r8d
cmp eax, 4
jae 0x14001187c
lea ecx, [r8 + 4]
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r15, rsi
shr r15, 3
test r15, r15
je 0x140011bc3
movzx eax, word [rbp + 0x812]
lea rcx, [r9 + 2]
mov edi, dword [rbp - 0x80]
mov r14d, dword [rsp + 0x54]
mov dword [rbp - 0x60], eax
mov eax, dword [rbp + 0x814]
xor eax, ebx
movzx esi, bx
add r12, 7
mov r13d, eax
mov qword [rbp + 0x808], r12
mov r12d, dword [rbp + 0x814]
movzx edx, r12w
movzx eax, byte [rcx - 1]
movzx r9d, byte [rcx - 2]
movzx r8d, byte [rcx + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [rcx]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx + 1]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx + 3]
or r8d, eax
movzx eax, byte [rcx + 4]
shl r8d, 8
or r8d, eax
movzx eax, byte [rcx + 5]
add rcx, 8
shl r8d, 8
or r8d, eax
mov qword [rbp - 0x80], rcx
xor r11d, r8d
mov eax, r11d
sub eax, esi
xor eax, r9d
xor r10d, eax
movzx eax, word [rbp + 0x812]
xor r10d, r12d
mov ecx, r10d
xor ecx, r12d
ror ecx, 0xf
imul ecx, eax
mov eax, r10d
ror eax, 7
add ecx, eax
xor r11d, ecx
mov eax, r11d
ror eax, 0xa
lea ecx, [rbx + r11]
ror ecx, 9
imul ecx, edx
sub ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
mov ecx, edx
xor ecx, r10d
rol ecx, 4
imul ecx, eax
mov eax, r10d
rol eax, 5
add ecx, eax
mov eax, r12d
xor r11d, ecx
mov ecx, ebx
xor ecx, r11d
sub eax, ecx
xor r10d, eax
movzx eax, word [rbp + 0x812]
mov ecx, r10d
sub ecx, esi
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r11d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r11d
ror eax, 0xf
xor eax, edx
imul eax, esi
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, ecx
imul eax, edx
xor r11d, eax
mov eax, r11d
sub eax, esi
sub eax, r12d
xor r10d, eax
movzx eax, word [rbp + 0x816]
xor eax, r10d
mov ecx, r10d
imul eax, dword [rbp - 0x60]
ror ecx, 0xa
xor ecx, eax
xor r11d, ecx
mov ecx, esi
xor ecx, r11d
mov eax, r11d
rol ecx, 6
imul ecx, edx
ror eax, 3
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
ror eax, 0xf
sub eax, ecx
imul eax, esi
xor r11d, eax
xor ecx, r11d
mov eax, r11d
imul ecx, esi
shr eax, 1
xor ecx, eax
mov eax, r11d
xor r10d, ecx
shr eax, 0xf
mov ecx, r11d
sub ecx, edx
rol ecx, 3
imul ecx, esi
xor ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 9
imul ecx, edx
ror eax, 0xb
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
sub eax, ebx
sub eax, ecx
xor r11d, eax
movzx eax, word [rbp + 0x812]
xor eax, r11d
mov ecx, r11d
ror ecx, 7
imul eax, esi
sub eax, ecx
movzx ecx, word [rbp + 0x816]
xor r10d, eax
movzx eax, word [rbp + 0x812]
xor ecx, r10d
rol ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 0x10
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 0xa
imul ecx, edx
ror eax, 4
add ecx, eax
xor r10d, ecx
movzx eax, word [rbp + 0x816]
mov ecx, r10d
sub ecx, ebx
ror ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 9
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor ecx, r12d
rol eax, 2
rol ecx, 8
imul ecx, esi
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r12d
sub ecx, r10d
ror ecx, 0xb
imul ecx, eax
mov eax, r10d
ror eax, 0xc
sub ecx, eax
xor r11d, ecx
movzx ecx, word [rbp + 0x812]
xor ecx, r11d
mov eax, r11d
xor r11d, r13d
shr eax, 8
imul ecx, edx
xor ecx, eax
mov rax, qword [rbp + 0x808]
xor r10d, ecx
mov rcx, qword [rbp - 0x80]
xor r11d, r10d
xor r10d, r14d
xor r11d, edi
mov r14d, r9d
mov byte [rax - 4], r10b
mov edi, r8d
mov byte [rax], r11b
ror r10d, 8
mov byte [rax - 5], r10b
ror r11d, 8
mov byte [rax - 1], r11b
ror r10d, 8
mov byte [rax - 6], r10b
ror r11d, 8
mov byte [rax - 2], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 7], r10b
mov byte [rax - 3], r11b
add rax, 8
ror r11d, 8
ror r10d, 8
mov qword [rbp + 0x808], rax
sub r15, 1
jne 0x1400118c6
mov dl, byte [rsp + 0x50]
movabs rdi, 0x7f1137fab69605e
mov r14, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
mov r13, qword [rbp - 0x78]
movzx eax, dl
lea r15, [rsi + 8]
mov qword [rsi + r13], rax
mov qword [rbp + 0x4c8], r13
mov qword [rbp + 0x4d0], r15
lea rax, [0x14002c230]
mov esi, 8
mov qword [rbp + 0x4d8], rax
mov qword [rbp + 0x4e0], rsi
lea r12, [0x14002c190]
mov qword [rbp + 0x4f0], 0xa0
mov qword [rbp + 0x4e8], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [rsi + 0x28]
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x140011c46
mov r12d, 0xc0000017
jmp 0x140011e3e
mov r15d, r15d
mov dword [rax], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r15d
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x140011c82
mov r12d, 0xc0000017
jmp 0x140011d83
mov qword [rsi + 8], rax
mov r8, r15
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r15d, 0xa0
mov dword [rsi + 0x10], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r15d
mov r15d, 8
mov edx, r15d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140011c77
mov qword [rsi + 0x18], rax
movups xmm0, xmmword [r12]
lea edx, [r15 + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r12 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r12 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r12 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r12 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r12 + 0x70]
movups xmmword [rax + rdx - 0x10], xmm1
movups xmm0, xmmword [r12 + rdx]
movups xmmword [rax + rdx], xmm0
movups xmm1, xmmword [r12 + rdx + 0x10]
movups xmmword [rax + rdx + 0x10], xmm1
mov dword [rsi + 0x20], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r15d
mov edx, r15d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x140011c77
mov qword [rsi + 0x28], rax
mov rax, qword [0x14002c230]
mov r14, rsi
mov qword [rcx], rax
mov r12d, r11d
mov esi, r11d
test rsi, rsi
je 0x140011e3e
mov r15, qword [rsi + 8]
test r15, r15
je 0x140011dbc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r15, qword [rsi + 0x18]
test r15, r15
je 0x140011dec
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r15, qword [rsi + 0x28]
test r15, r15
je 0x140011e1b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r12d, r12d
js 0x140011e55
mov qword [rbp + 0x4b8], r14
mov r14, r11
jmp 0x140011e55
mov r12d, 0xc0000001
mov rsi, qword [rbp + 0x4c8]
test rsi, rsi
je 0x140011e8b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x4c8], r11
test r14, r14
je 0x140011f46
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x140011ec4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov rsi, qword [r14 + 0x18]
test rsi, rsi
je 0x140011ef4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov rsi, qword [r14 + 0x28]
test rsi, rsi
je 0x140011f23
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13d, dword [rsp + 0x68]
or r12d, 0x10000000
mov dword [rbp - 0x80], r12d
jl 0x140012206
mov r14, qword [rbp + 0x4b8]
mov ecx, dword [r14]
mov r8d, dword [r14 + 0x20]
add ecx, 4
mov edx, dword [r14 + 0x10]
cmp ecx, 4
jb 0x1400120b7
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400120b7
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x1400120b7
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400120b7
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x1400120b7
mov dword [rbp + 0x12c], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r12d, r12d
mov rsi, rax
test rax, rax
jne 0x140011fee
mov r12d, 0xc0000017
mov r14d, 0xc0000095
jmp 0x1400120c0
mov eax, dword [r14]
lea r15, [rsi + 4]
mov dword [rsi], eax
cmp r15, rsi
jb 0x140012083
mov r8d, dword [r14]
mov rcx, r15
mov rdx, qword [r14 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14]
add rcx, r15
cmp rcx, r15
jb 0x140012083
mov eax, dword [r14 + 0x10]
lea r15, [rcx + 4]
mov dword [rcx], eax
cmp r15, rcx
jb 0x140012083
mov r8d, dword [r14 + 0x10]
mov rcx, r15
mov rdx, qword [r14 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14 + 0x10]
add rcx, r15
cmp rcx, r15
jb 0x140012083
mov eax, dword [r14 + 0x20]
lea r15, [rcx + 4]
mov dword [rcx], eax
cmp r15, rcx
jb 0x140012083
mov r8d, dword [r14 + 0x20]
mov rcx, r15
mov rdx, qword [r14 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r14 + 0x20]
add rax, r15
cmp rax, r15
jb 0x140012083
xor r13d, r13d
mov qword [rbp - 0x40], rsi
mov esi, r13d
mov r13d, dword [rbp + 0x12c]
jmp 0x140012089
mov r12d, 0xc0000095
test rsi, rsi
je 0x140011fe3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x140011fe3
mov r14d, 0xc0000095
mov r12d, r14d
or r12d, 0x10000000
mov dword [rbp - 0x80], r12d
jl 0x140012203
xor esi, esi
mov dword [rbp + 0x130], esi
mov dword [rbp + 0x134], 0x3c
lea eax, [rsi + 0x48]
mov dword [rbp + 0x138], eax
mov dword [rbp + 0x13c], eax
cmp qword [rbp + 0x710], rsi
jne 0x14001210a
mov r12d, 0xc000000d
mov dword [rbp - 0x80], r12d
jmp 0x140012494
cmp dword [rbp + 0x708], 1
jbe 0x1400120fb
mov rax, qword [rbp + 0x710]
mov edx, esi
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001248d
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001248d
inc edx
cmp edx, 1
jb 0x14001211c
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001248d
test r8d, r8d
mov dword [rbp + 0x130], r8d
mov rax, rsi
cmovne rax, rcx
mov qword [rbp + 0x4f8], rax
cmp dword [rbp + 0x708], 2
jbe 0x1400120fb
mov rax, qword [rbp + 0x710]
mov edx, esi
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001248d
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001248d
inc edx
cmp edx, 2
jb 0x140012178
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001248d
test edx, edx
mov dword [rbp + 0x140], edx
mov rax, rsi
cmovne rax, rcx
mov qword [rbp + 0x500], rax
lea eax, [r8 + 0x50]
cmp eax, 0x50
jb 0x14001248d
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14001248d
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14001248d
mov dword [rbp + 0x144], eax
mov dword [rbp - 0x80], esi
mov r12d, esi
cmp eax, 0x400000
jbe 0x140012485
mov r12d, 0x8000ffff
mov dword [rbp - 0x80], r12d
xor r11d, r11d
mov r15, qword [rbp - 0x40]
mov r13d, 0x8007007a
mov rsi, qword [rbp - 0x38]
test rsi, rsi
je 0x14001223c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp + 0x4b8]
test r14, r14
je 0x140012305
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x14001227c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov rsi, qword [r14 + 0x18]
test rsi, rsi
je 0x1400122ac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov rsi, qword [r14 + 0x28]
test rsi, rsi
je 0x1400122db
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x4b8], r11
test r15, r15
je 0x14001232d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp + 0x820]
test rsi, rsi
je 0x14001235c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp - 0x70]
test r14, r14
je 0x14001241b
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x140012399
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov rsi, qword [r14 + 0x18]
test rsi, rsi
je 0x1400123c9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov rsi, qword [r14 + 0x28]
test rsi, rsi
je 0x1400123f8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x50]
test rsi, rsi
je 0x140012447
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r12d, r12d
js 0x1400134e1
mov r10d, 1
cmp dword [rbp + 0x718], r10d
jb 0x140013469
cmp qword [rbp + 0x720], r11
jne 0x14001315d
mov r12d, 0xc000000d
mov dword [rbp - 0x80], r12d
mov r14d, 0xc0000095
jmp 0x1400131bc
mov dword [rbp + 0x120], eax
jmp 0x140012494
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x140012203
mov esi, dword [rbp + 0x120]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x1400124dd
mov r14, qword [rbp + 0x820]
mov r12d, 0xd0000017
jmp 0x1400124ed
mov r14, rax
mov qword [rbp + 0x820], rax
mov r12d, 0x10000000
mov r15, qword [rbp - 0x40]
mov dword [rbp - 0x80], r12d
test r12d, r12d
js 0x14001220a
test r15, r15
jne 0x140012512
mov r12d, 0x80070057
mov dword [rbp - 0x80], r12d
jmp 0x14001220a
test r14, r14
je 0x140012503
mov eax, dword [rbp + 0x120]
lea r8, [rbp + 0x508]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x7bc], eax
mov ecx, 1
mov qword [rbp + 0x7a8], r15
mov dword [rbp + 0x7b8], r13d
mov qword [rbp + 0x7b0], r14
mov dword [rbp + 0x7c0], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x140012596
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edx, dword [rbp + 0x120]
movzx r12d, ax
or r12d, 0x80070000
test eax, eax
cmovle r12d, eax
mov dword [rbp - 0x80], r12d
test r12d, r12d
js 0x1400125ee
mov r12d, 0x80004005
jmp 0x1400125ea
mov rcx, qword [rbp + 0x508]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140012562
xor r9d, r9d
lea rdx, [rbp + 0x7a8]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp + 0x120]
mov r12d, eax
or r12d, 0x10000000
cmovge edx, dword [rbp + 0x7bc]
mov dword [rbp + 0x120], edx
mov dword [rbp - 0x80], r12d
xor r11d, r11d
cmp r12d, 0xd0000023
jne 0x14001260c
mov r13d, 0x8007007a
mov r12d, r13d
mov dword [rbp - 0x80], r13d
jmp 0x140012210
test r12d, r12d
js 0x14001220a
mov qword [rsp + 0x60], r11
cmp edx, 4
jae 0x14001262a
mov r12d, 0xc000003e
jmp 0x140012a09
mov r13d, dword [r14]
lea r12, [r14 + 4]
cmp r12, r14
jb 0x140012a03
lea eax, [rdx - 4]
cmp eax, r13d
jb 0x14001261f
lea r9, [r12 + r13]
mov qword [rbp - 0x78], r9
cmp r9, r12
jb 0x140012a03
lea r8d, [r13 + 4]
cmp r8d, 4
jb 0x140012a03
mov eax, edx
sub eax, r8d
cmp eax, 4
jb 0x14001261f
mov r14d, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x140012a03
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x140012a03
mov eax, edx
sub eax, r9d
cmp eax, r14d
jb 0x14001261f
lea r10, [rcx + r14]
cmp r10, rcx
jb 0x140012a03
lea r8d, [r9 + r14]
cmp r8d, r9d
jb 0x140012a03
mov eax, edx
sub eax, r8d
cmp eax, 4
jb 0x14001261f
mov r15d, dword [r10]
lea rax, [r10 + 4]
mov qword [rbp + 0x810], rax
cmp rax, r10
jb 0x140012a03
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x140012a03
mov eax, edx
sub eax, ecx
cmp eax, r15d
jb 0x14001261f
lea r8d, [rcx + r15]
cmp r8d, ecx
jb 0x140012a03
cmp edx, r8d
jne 0x14001261f
lea ecx, [r14 + r13]
mov eax, edx
add ecx, r15d
add rcx, 0xc
cmp rcx, rax
jne 0x14001261f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x140012751
mov r12d, 0xc0000017
jmp 0x140012929
test r12, r12
je 0x1400127a6
mov dword [rax], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001278f
mov r12d, 0xc0000017
jmp 0x14001286e
mov qword [rsi + 8], rax
mov r8, r13
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x1400127ad
mov dword [rax], r11d
mov qword [rax + 8], r11
mov r12, qword [rbp - 0x78]
add r12, 4
je 0x1400127fd
mov dword [rsi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140012784
mov qword [rsi + 0x18], rax
mov r8, r14
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140012805
mov dword [rsi + 0x10], r11d
mov qword [rsi + 0x18], r11
mov r14, qword [rbp + 0x810]
test r14, r14
je 0x14001285b
mov dword [rsi + 0x20], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140012784
mov qword [rsi + 0x28], rax
mov r8, r15
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140012863
mov dword [rsi + 0x20], r11d
mov qword [rsi + 0x28], r11
mov qword [rsp + 0x60], rsi
mov r12d, r11d
mov rsi, r11
test rsi, rsi
je 0x140012929
mov r14, qword [rsi + 8]
test r14, r14
je 0x1400128a7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r14, qword [rsi + 0x18]
test r14, r14
je 0x1400128d7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r14, qword [rsi + 0x28]
test r14, r14
je 0x140012906
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r15, qword [rsp + 0x60]
test r12d, r12d
mov rsi, r11
cmovs rsi, qword [rsp + 0x60]
cmovs r15, r11
mov qword [rbp - 0x70], r15
test rsi, rsi
je 0x140012a0d
mov r14, qword [rsi + 8]
test r14, r14
je 0x14001297b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r14, qword [rsi + 0x18]
test r14, r14
je 0x1400129ab
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r14, qword [rsi + 0x28]
test r14, r14
je 0x1400129da
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x70], r15
jmp 0x140012a0d
mov r12d, 0xc0000095
mov r15, qword [rbp - 0x70]
or r12d, 0x10000000
mov dword [rbp - 0x80], r12d
jl 0x140012206
mov qword [rbp + 0x510], r11
mov rsi, r11
mov qword [rsp + 0x60], r11
mov r14, r11
test r15, r15
jne 0x140012a44
mov r12d, 0xd000000d
mov dword [rbp - 0x80], r12d
jmp 0x140012206
mov r13, qword [r15 + 8]
mov qword [rsp + 0x70], r13
test r13, r13
je 0x140012a35
cmp dword [r15], r11d
je 0x140012a35
mov r15d, dword [r15]
mov dword [rbp - 0x80], r11d
test r15, r15
je 0x140012f90
add r15, 0xfffffffffffffff8
mov qword [rbp - 0x78], r15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x810], rax
mov r12, rax
test rax, rax
je 0x140012f89
mov r8, r15
mov qword [rbp + 0x808], rdi
mov dl, r11b
mov r9, r13
mov byte [rsp + 0x50], dl
mov r13, rax
mov esi, r11d
and r8d, 7
je 0x140012b9e
mov dword [rsp + 0x68], r11d
mov ecx, r11d
mov dword [rsp + 0x54], ecx
test r8d, r8d
je 0x140012b18
lea r10d, [r11 + 0x38]
movzx eax, byte [r9]
inc r9
cmp r11d, 4
jge 0x140012afd
lea ecx, [r10 - 0x20]
shl eax, cl
mov ecx, dword [rsp + 0x54]
or ecx, eax
mov dword [rsp + 0x54], ecx
jmp 0x140012b08
mov ecx, r10d
shl eax, cl
mov ecx, dword [rsp + 0x54]
or esi, eax
inc r11d
sub r10d, 8
cmp r11d, r8d
jl 0x140012ade
mov dword [rsp + 0x68], esi
mov r11d, ecx
xor esi, 0x699a899c
xor r11d, 0x92f65a5
xor r10d, r10d
mov eax, r11d
mov ecx, esi
test r8d, r8d
je 0x140012b6c
lea rbx, [r13 + 1]
mov qword [rbp - 0x60], rbx
cmp r10d, 4
jge 0x140012b4a
rol eax, 8
mov ebx, eax
jmp 0x140012b4f
rol ecx, 8
mov ebx, ecx
mov byte [r13], bl
inc r10d
mov rbx, qword [rbp - 0x60]
mov r13, rbx
cmp r10d, r8d
jl 0x140012b35
movabs rbx, 0xc81ecb17b1b54a58
cmp r8d, 4
jbe 0x140012b83
mov ecx, 8
sub ecx, r8d
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x140012ba8
xor eax, eax
mov esi, eax
cmp r8d, 4
jae 0x140012ba8
lea ecx, [rax + 4]
sub ecx, r8d
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140012ba8
or dword [rsp + 0x68], 0xffffffff
mov dword [rsp + 0x54], r11d
mov rax, r15
shr rax, 3
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140012eed
mov edx, dword [rbp + 0x80c]
lea r12, [r13 + 7]
mov r13, qword [rbp - 0x30]
lea r15, [r9 + 2]
mov ebx, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x54]
movzx eax, dx
mov dword [rbp - 0x60], eax
movzx eax, word [rbp + 0x80a]
mov dword [rsp + 0x58], eax
movzx eax, di
mov dword [rsp + 0x78], eax
movzx eax, byte [r15 - 1]
mov r8d, edx
movzx r10d, byte [r15 - 2]
movzx r9d, byte [r15 + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [r15]
lea r15, [r15 + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [r15 - 5]
or r9d, eax
xor r11d, r10d
movzx eax, byte [r15 - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [r15 - 3]
shl r9d, 8
or r9d, eax
xor esi, r9d
xor r8d, esi
mov esi, dword [rbp - 0x60]
xor r8d, r11d
xor r8d, edi
mov ecx, r8d
mov eax, r8d
sub ecx, edi
rol eax, 0xa
rol ecx, 5
imul ecx, esi
add ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
lea ecx, [r11 + rdx]
ror ecx, 9
imul ecx, eax
mov eax, r11d
rol eax, 2
sub ecx, eax
xor r8d, ecx
mov ecx, r8d
mov eax, r8d
sub ecx, esi
shr eax, 0xd
imul ecx, dword [rsp + 0x78]
sub ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
mov ecx, r11d
xor ecx, eax
movzx eax, word [rbp + 0x80e]
rol ecx, 6
imul ecx, eax
mov eax, r11d
rol eax, 2
sub ecx, eax
mov eax, edx
xor r8d, ecx
mov ecx, edi
xor ecx, r8d
sub eax, ecx
xor r11d, eax
mov eax, r11d
mov ecx, r11d
ror ecx, 6
xor eax, esi
imul eax, dword [rsp + 0x58]
xor ecx, eax
xor r8d, ecx
mov eax, r8d
rol eax, 2
lea ecx, [r8 + rdx]
ror ecx, 0xf
imul ecx, dword [rsp + 0x78]
add ecx, eax
xor r11d, ecx
mov ecx, r11d
movzx eax, word [rbp + 0x80e]
sub ecx, edi
ror ecx, 0xe
imul ecx, eax
mov eax, r11d
rol eax, 8
sub ecx, eax
xor r8d, ecx
mov ecx, r8d
mov eax, r8d
xor ecx, edi
ror eax, 0xa
ror ecx, 0xc
imul ecx, esi
movzx esi, word [rbp + 0x80e]
xor ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
mov ecx, r11d
xor ecx, esi
imul ecx, eax
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor r8d, ecx
mov eax, r8d
not eax
ror eax, 5
add eax, dword [rsp + 0x78]
imul eax, esi
xor r11d, eax
movzx eax, word [rbp + 0x80e]
mov esi, r11d
sub esi, eax
xor esi, r8d
mov r8d, dword [rbp - 0x60]
xor esi, edi
mov ecx, esi
xor ecx, eax
mov eax, esi
rol ecx, 2
imul ecx, r8d
shr eax, 2
add ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
mov ecx, r11d
sub ecx, edx
ror ecx, 6
imul ecx, eax
mov eax, r11d
rol eax, 7
add ecx, eax
xor esi, ecx
mov eax, esi
mov ecx, esi
xor eax, r8d
ror ecx, 9
imul eax, dword [rsp + 0x78]
add ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
mov ecx, r11d
xor ecx, eax
movzx eax, word [rbp + 0x80e]
rol ecx, 5
imul ecx, eax
mov eax, r11d
rol eax, 7
add ecx, eax
xor esi, ecx
movzx ecx, word [rbp + 0x80a]
xor r11d, esi
xor r11d, edx
xor r11d, edi
mov eax, r11d
ror eax, 3
sub eax, ecx
imul eax, r8d
xor esi, eax
mov ecx, esi
sub ecx, edx
mov eax, esi
ror ecx, 1
imul ecx, dword [rsp + 0x78]
ror eax, 6
sub ecx, eax
movzx eax, word [rbp + 0x80e]
xor r11d, ecx
lea ecx, [r11 + rdi]
rol ecx, 3
imul ecx, eax
mov eax, r11d
rol eax, 0xe
add ecx, eax
xor esi, ecx
mov eax, esi
ror eax, 0xe
lea ecx, [rsi + rdi]
rol ecx, 0xf
imul ecx, r8d
sub ecx, eax
movzx eax, word [rbp + 0x80a]
xor r11d, ecx
mov ecx, r11d
xor ecx, dword [rsp + 0x78]
imul ecx, eax
mov eax, r11d
shr eax, 3
xor ecx, eax
xor esi, ecx
mov ecx, esi
mov eax, esi
xor esi, ebx
rol eax, 2
xor ecx, edx
mov ebx, r9d
rol ecx, 4
imul ecx, dword [rsp + 0x78]
xor ecx, eax
xor ecx, r14d
mov r14d, r10d
xor r11d, ecx
mov byte [r12 - 4], r11b
mov byte [r12], sil
lea r12, [r12 + 8]
ror r11d, 8
mov byte [r12 - 0xd], r11b
ror esi, 8
mov byte [r12 - 9], sil
ror r11d, 8
mov byte [r12 - 0xe], r11b
ror esi, 8
mov byte [r12 - 0xa], sil
ror r11d, 8
ror esi, 8
mov byte [r12 - 0xf], r11b
mov byte [r12 - 0xb], sil
ror esi, 8
ror r11d, 8
sub r13, 1
jne 0x140012bef
mov dl, byte [rsp + 0x50]
movabs rbx, 0xc81ecb17b1b54a58
mov r14, qword [rsp + 0x60]
mov r15, qword [rbp - 0x78]
mov r12, qword [rbp + 0x810]
xor r11d, r11d
mov eax, r11d
test r15, r15
je 0x140012f04
xor dl, byte [rax + r12]
inc rax
cmp rax, r15
jb 0x140012ef8
mov rcx, qword [rsp + 0x70]
movzx eax, dl
cmp rax, qword [r15 + rcx]
je 0x140012f21
mov rsi, qword [rbp + 0x510]
mov r15d, 0xc004d501
jmp 0x140012f35
mov rsi, r12
mov qword [rbp + 0x510], r12
mov r14, r15
mov r12, r11
mov r15d, dword [rbp - 0x80]
test r12, r12
je 0x140012f64
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp + 0x510]
xor r11d, r11d
test r15d, r15d
js 0x140012f90
mov r13, rsi
mov qword [rbp - 0x50], rsi
mov rsi, r11
mov qword [rbp + 0x510], r11
mov dword [rbp + 0x124], r14d
mov r12d, 0x10000000
jmp 0x140012fa1
mov rsi, qword [rbp + 0x510]
mov r14d, dword [rbp + 0x124]
mov r12d, 0xd0000001
mov r13, qword [rbp - 0x50]
mov dword [rbp - 0x80], r12d
test rsi, rsi
je 0x140012fdb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14d, dword [rbp + 0x124]
xor r11d, r11d
mov qword [rbp + 0x510], r11
test r12d, r12d
js 0x140012206
cmp r14d, 4
jae 0x140012ff5
mov r12d, 0xc000003e
jmp 0x140013153
mov r8d, dword [r13]
lea rcx, [r13 + 4]
mov dword [rbp - 0x80], r8d
cmp rcx, r13
jb 0x14001314d
lea eax, [r14 - 4]
cmp eax, 4
jb 0x140012fea
mov r15d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x14001314d
lea eax, [r14 - 8]
cmp eax, r15d
jb 0x140012fea
lea eax, [r15 + 8]
cmp eax, 8
jb 0x14001314d
mov ecx, r14d
lea rdx, [rsi + r15]
lea rax, [rcx + r13]
cmp rax, rdx
jb 0x140012fea
mov rax, r13
sub rax, rsi
sub rax, r15
add rax, rcx
cmp rax, 8
jae 0x140012fea
mov r14, r11
mov r13d, r11d
test rsi, rsi
je 0x1400130cf
mov rcx, rsi
cmp rdx, rsi
jb 0x14001314d
jbe 0x1400130ca
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14001314d
cmp rax, rdx
ja 0x1400130b7
mov eax, dword [rcx]
add eax, 4
cmp eax, 4
jb 0x1400130c2
mov dword [rbp + 0x148], eax
mov r8d, eax
add r8, rcx
cmp r8, rcx
jb 0x14001314d
mov rcx, r8
cmp r8, rdx
ja 0x1400130b7
inc r13d
cmp rcx, rdx
jae 0x1400130cd
jmp 0x140013074
mov r12d, 0xc000000d
jmp 0x140013153
mov r12d, 0xc0000095
jmp 0x140013138
cmp rcx, rdx
jne 0x1400130b7
test r15d, r15d
je 0x14001310a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x14001310a
mov r12d, 0xc0000017
jmp 0x140013138
test rsi, rsi
je 0x140013120
mov r8, r15
mov rdx, rsi
mov rcx, r14
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov qword [rbp + 0x720], r14
mov dword [rbp + 0x71c], r15d
mov dword [rbp + 0x718], r13d
mov r12d, r11d
test r12d, r12d
js 0x140013153
mov eax, dword [rbp - 0x80]
cmp eax, dword [rbp + 0x718]
je 0x140013153
jmp 0x140012fea
mov r12d, 0xc0000095
bts r12d, 0x1c
jmp 0x140012a3b
cmp dword [rbp + 0x718], r11d
jbe 0x140012470
mov rsi, qword [rbp + 0x720]
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x1400131af
test ecx, ecx
mov dword [rbp + 0x14c], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x518], rax
mov dword [rbp - 0x80], r11d
mov r12d, r11d
cmp ecx, 4
jne 0x140013430
mov eax, dword [rax]
mov dword [rbp + 0xdc], eax
jmp 0x14001247a
mov r14d, 0xc0000095
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x1400134e1
mov r12d, dword [rbp + 0xdc]
cmp r12d, 0xd0000023
cmove r12d, r13d
mov dword [rbp - 0x80], r12d
mov dword [rbp + 0xdc], r12d
cmp r12d, r13d
je 0x1400131f0
test r12d, r12d
js 0x1400134e1
cmp dword [rbp + 0x718], 6
jne 0x140013469
cmp qword [rbp + 0x720], r11
jne 0x140013212
mov r12d, 0xc000000d
mov dword [rbp - 0x80], r12d
jmp 0x14001327b
mov rax, qword [rbp + 0x720]
mov edx, r11d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140013274
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x140013274
add edx, r10d
cmp edx, r10d
jb 0x14001321c
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x140013274
test ecx, ecx
mov dword [rbp + 0x150], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x520], rax
mov dword [rbp - 0x80], r11d
mov r12d, r11d
cmp ecx, 8
jne 0x140013430
mov rax, qword [rax]
mov qword [rbp + 0x528], rax
jmp 0x14001327b
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x1400134e1
cmp qword [rbp + 0x720], r11
jne 0x140013299
mov r12d, 0xc000000d
mov dword [rbp - 0x80], r12d
jmp 0x140013300
mov rax, qword [rbp + 0x720]
mov edx, r11d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400132f9
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400132f9
add edx, r10d
cmp edx, 2
jb 0x1400132a3
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x1400132f9
test ecx, ecx
mov dword [rbp + 0x154], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x530], rax
mov dword [rbp - 0x80], r11d
mov r12d, r11d
cmp ecx, 4
jne 0x140013430
mov eax, dword [rax]
mov dword [rbp + 0x158], eax
jmp 0x140013300
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x1400134e1
cmp qword [rbp + 0x720], r11
jne 0x14001331d
mov r12d, 0xc000000d
jmp 0x140013436
mov rax, qword [rbp + 0x720]
mov edx, r11d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400134da
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400134da
add edx, r10d
cmp edx, 3
jb 0x140013327
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400134da
test r8d, r8d
mov dword [rbp + 0x15c], r8d
mov r9, r11
cmovne r9, rcx
mov qword [rbp + 0x538], r9
mov rax, qword [rbp + 0x720]
mov edx, r11d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400133ce
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400133ce
add edx, r10d
cmp edx, 4
jb 0x14001337c
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x1400133ce
test ecx, ecx
mov dword [rbp + 0x160], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x540], rax
mov dword [rbp - 0x80], r11d
mov r12d, r11d
cmp ecx, 4
jne 0x140013430
mov eax, dword [rax]
mov dword [rbp + 0x164], eax
jmp 0x1400133d5
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x1400134e1
mov rax, qword [rbp + 0x720]
mov edx, r11d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140013449
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x140013449
add edx, r10d
cmp edx, 5
jb 0x1400133e8
mov ecx, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x140013449
test ecx, ecx
mov dword [rbp + 0x168], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x548], rax
mov dword [rbp - 0x80], r11d
mov r12d, r11d
cmp ecx, 4
je 0x14001343f
mov r12d, 0xc0000023
mov dword [rbp - 0x80], r12d
jmp 0x1400134e1
mov eax, dword [rax]
mov dword [rbp + 0xd8], eax
jmp 0x140013450
mov r12d, r14d
mov dword [rbp - 0x80], r14d
test r12d, r12d
js 0x1400134e1
mov rax, qword [rbp + 0x528]
cmp qword [rbp + 0x498], rax
je 0x140013471
mov r12d, 0xc004d501
jmp 0x140013436
mov eax, dword [rbp + 0xd8]
mov ecx, dword [rbp + 0x164]
mov dword [rbp + 0xd4], eax
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0xd0], eax
mov dword [rbp - 0x28], ecx
cmp ecx, 4
ja 0x14001349d
cmp r8d, 4
jbe 0x1400134a6
mov r12d, r13d
mov dword [rbp - 0x80], r13d
jmp 0x1400134e1
mov rcx, qword [rbp - 0x48]
mov rdx, r9
call sub.msvcrt.dll_memcpy
mov r13, qword [rbp + 0x818]
xor r11d, r11d
mov r15, qword [rbp - 0x68]
test r12d, r12d
js 0x140010af4
mov eax, dword [rbp + 0xdc]
test eax, eax
cmovne r12d, eax
jmp 0x1400109d3
mov dword [rbp - 0x80], r14d
mov r12d, r14d
mov r13, qword [rbp + 0x818]
mov r15, qword [rbp - 0x68]
jmp 0x140010af4
or qword [rbp + 0x4b0], 0xffffffffffffffff
mov r12d, 0xc0000095
jmp 0x140010af0
mov r8, qword [rbp + 0x730]
mov ecx, r11d
mov r10d, 1
test edx, edx
je 0x140013546
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x1400146e4
mov dword [rbp + 0x178], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x1400146e4
add ecx, r10d
mov r8, r9
cmp ecx, edx
jb 0x140013518
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x1400146e4
mov ecx, dword [rbp + 0x72c]
lea rax, [r8 + 0xa4]
add rcx, qword [rbp + 0x730]
cmp rax, rcx
ja 0x1400146e4
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [rsi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [rsi + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [rsi + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
add dword [rbp + 0x728], r10d
mov ecx, dword [rbp + 0x72c]
cmp qword [rbp + 0x730], r11
jne 0x140013612
mov dword [rbp + 0x17c], 0xc
lea edx, [rcx + 0xc]
cmp edx, ecx
jb 0x1400146e4
mov rax, qword [rbp + 0x560]
add dword [rbp + 0x728], r10d
mov qword [rbp + 0x568], rax
jmp 0x1400136a8
mov r8d, r11d
mov rdx, qword [rbp + 0x730]
cmp dword [rbp + 0x728], r11d
jbe 0x140013657
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400146e4
mov dword [rbp + 0x17c], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x1400146e4
add r8d, r10d
mov rdx, r9
cmp r8d, dword [rbp + 0x728]
jb 0x140013625
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x1400146e4
add rcx, qword [rbp + 0x730]
lea rax, [rdx + 0xc]
cmp rax, rcx
ja 0x1400146e4
mov dword [rdx], 8
mov rax, qword [r14]
mov qword [r8], rax
add dword [rbp + 0x728], r10d
mov rax, qword [rbp + 0x560]
mov qword [rbp + 0x568], rax
cmp qword [rbp + 0x730], r11
jne 0x1400136c8
mov edx, dword [rbp + 0x72c]
mov dword [rbp + 0x180], 0xc
lea ecx, [rdx + 0xc]
cmp ecx, edx
jb 0x1400146e4
mov dword [rbp + 0x72c], ecx
jmp 0x140013749
mov ecx, r11d
mov rdx, qword [rbp + 0x730]
cmp dword [rbp + 0x728], r11d
jbe 0x14001370c
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400146e4
mov dword [rbp + 0x180], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x1400146e4
add ecx, r10d
mov rdx, r8
cmp ecx, dword [rbp + 0x728]
jb 0x1400136db
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x1400146e4
mov ecx, dword [rbp + 0x72c]
lea rax, [rdx + 0xc]
add rcx, qword [rbp + 0x730]
cmp rax, rcx
ja 0x1400146e4
mov dword [rdx], 8
mov rax, qword [rbp + 0x568]
mov qword [r8], rax
mov ecx, dword [rbp + 0x72c]
add dword [rbp + 0x728], r10d
mov dword [rbp + 0x184], 0xc
mov r8, r11
mov qword [rbp + 0x818], r11
mov r13d, r11d
mov qword [rbp + 0x570], r11
mov qword [rbp - 0x38], r11
mov dword [rsp + 0x68], r11d
mov qword [rbp - 0x40], r11
mov dword [rbp + 0x188], r11d
mov qword [rbp + 0x820], r11
mov qword [rbp - 0x70], r11
mov dword [rbp + 0x18c], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x578], rax
lea eax, [rcx + 8]
mov r15d, 0xc0000095
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb esi, esi
and esi, r15d
cmp eax, 8
jb 0x1400138b5
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x1400137d9
mov esi, r15d
jmp 0x1400138b5
mov dword [rbp + 0x190], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x14001381c
mov esi, 0xc0000017
mov r8d, r11d
jmp 0x1400138b5
mov eax, dword [rbp + 0x728]
lea rdx, [r14 + 4]
mov dword [r14], eax
cmp rdx, r14
jb 0x140013880
mov eax, dword [rbp + 0x72c]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x140013880
mov edx, dword [rbp + 0x190]
mov esi, r11d
mov rax, qword [rbp + 0x578]
mov qword [rdx + r14 - 8], rax
mov r8d, dword [rbp + 0x72c]
mov rdx, qword [rbp + 0x730]
call sub.msvcrt.dll_memcpy
mov r13d, dword [rbp + 0x190]
xor r11d, r11d
mov r8, r14
mov qword [rbp + 0x818], r14
mov r14d, r11d
jmp 0x140013886
mov r8, r11
mov esi, r15d
test r14, r14
je 0x1400138b5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r8, qword [rbp + 0x818]
xor r11d, r11d
or esi, 0x10000000
jl 0x1400143eb
mov qword [rbp + 0x580], r11
mov r15, r11
mov qword [rbp - 0x50], r11
test r8, r8
jne 0x1400138de
mov esi, 0xc000000d
jmp 0x140014139
mov esi, r13d
mov qword [rsp + 0x60], rsi
test r13d, r13d
je 0x140014043
lea r14, [rsi + 8]
mov qword [rsp + 0x70], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x78], rax
mov r13, rax
test rax, rax
je 0x140014043
mov r9, qword [rbp + 0x818]
mov dl, r11b
mov byte [rsp + 0x50], dl
mov ecx, r11d
test rsi, rsi
je 0x140013951
xor dl, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x140013941
mov byte [rsp + 0x50], dl
xor r8d, r8d
mov qword [rbp + 0x810], rbx
mov r14, rax
mov dword [rsp + 0x54], r8d
mov r10d, r11d
mov dword [rbp - 0x60], r8d
or r11d, 0xffffffff
mov rax, rsi
and eax, 7
je 0x140013a63
mov dword [rsp + 0x54], r8d
mov ecx, r8d
mov dword [rbp - 0x60], ecx
mov r13d, r8d
mov r11d, r8d
test eax, eax
je 0x1400139cf
lea r10d, [r8 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, 4
jge 0x1400139b2
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rbp - 0x60]
or ecx, r8d
mov dword [rbp - 0x60], ecx
jmp 0x1400139be
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rbp - 0x60]
or r13d, r8d
inc r11d
sub r10d, 8
cmp r11d, eax
jl 0x140013993
mov dword [rsp + 0x54], r13d
mov r10d, ecx
mov r11d, r13d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r13d, r13d
mov ecx, r10d
mov r8d, r11d
test eax, eax
je 0x140013a2e
lea rdi, [r14 + 1]
mov qword [rbp + 0x808], rdi
cmp r13d, 4
jge 0x140013a08
rol ecx, 8
mov edi, ecx
jmp 0x140013a0f
rol r8d, 8
mov edi, r8d
mov byte [r14], dil
inc r13d
mov rdi, qword [rbp + 0x808]
mov r14, rdi
cmp r13d, eax
jl 0x1400139f0
movabs rdi, 0x7f1137fab69605e
cmp eax, 4
jbe 0x140013a45
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140013a5f
xor r8d, r8d
mov r11d, r8d
cmp eax, 4
jae 0x140013a5f
lea ecx, [r8 + 4]
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r13, qword [rbp - 0x78]
mov rax, rsi
shr rax, 3
mov qword [rbp + 0x808], rax
test rax, rax
je 0x140013dc6
movzx eax, word [rbp + 0x812]
lea rdx, [r14 + 7]
mov r14, qword [rbp + 0x808]
lea r12, [r9 + 2]
mov edi, dword [rsp + 0x54]
mov r13d, dword [rbp - 0x60]
movzx esi, word [rbp + 0x814]
mov dword [rsp + 0x58], eax
movzx r15d, bx
movzx eax, byte [r12 - 1]
movzx r9d, byte [r12 - 2]
movzx r8d, byte [r12 + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [r12]
lea r12, [r12 + 8]
shl r9d, 8
or r9d, eax
movzx eax, byte [r12 - 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [r12 - 5]
or r8d, eax
movzx eax, byte [r12 - 4]
shl r8d, 8
or r8d, eax
movzx eax, byte [r12 - 3]
shl r8d, 8
or r8d, eax
xor r11d, r8d
mov eax, r11d
sub eax, r15d
xor eax, r9d
xor eax, dword [rbp + 0x814]
xor r10d, eax
movzx eax, word [rbp + 0x812]
mov ecx, r10d
xor ecx, dword [rbp + 0x814]
ror ecx, 0xf
imul ecx, eax
mov eax, r10d
ror eax, 7
add ecx, eax
xor r11d, ecx
mov eax, r11d
ror eax, 0xa
lea ecx, [r11 + rbx]
ror ecx, 9
imul ecx, esi
sub ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
mov ecx, esi
xor ecx, r10d
rol ecx, 4
imul ecx, eax
mov eax, r10d
rol eax, 5
add ecx, eax
mov eax, dword [rbp + 0x814]
xor r11d, ecx
mov ecx, r11d
xor ecx, ebx
sub eax, ecx
xor r10d, eax
movzx eax, word [rbp + 0x812]
mov ecx, r10d
sub ecx, r15d
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r11d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r11d
ror eax, 0xf
xor eax, esi
imul eax, r15d
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, ecx
imul eax, esi
xor r11d, eax
mov eax, r11d
sub eax, dword [rbp + 0x814]
sub eax, r15d
xor r10d, eax
movzx eax, word [rbp + 0x816]
mov ecx, r10d
ror ecx, 0xa
xor eax, r10d
imul eax, dword [rsp + 0x58]
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor ecx, r15d
ror eax, 3
rol ecx, 6
imul ecx, esi
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
ror eax, 0xf
sub eax, ecx
imul eax, r15d
xor r11d, eax
xor ecx, r11d
mov eax, r11d
imul ecx, r15d
shr eax, 1
xor ecx, eax
mov eax, r11d
xor r10d, ecx
shr eax, 0xf
mov ecx, r11d
sub ecx, esi
rol ecx, 3
imul ecx, r15d
xor ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r10d
sub ecx, esi
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 9
imul ecx, esi
ror eax, 0xb
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
sub eax, ecx
sub eax, ebx
xor r11d, eax
movzx eax, word [rbp + 0x812]
xor eax, r11d
mov ecx, r11d
ror ecx, 7
imul eax, r15d
sub eax, ecx
movzx ecx, word [rbp + 0x816]
xor r10d, eax
movzx eax, word [rbp + 0x812]
xor ecx, r10d
rol ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 0x10
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 0xa
imul ecx, esi
ror eax, 4
add ecx, eax
xor r10d, ecx
mov ecx, r10d
movzx eax, word [rbp + 0x816]
sub ecx, ebx
ror ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 9
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor ecx, dword [rbp + 0x814]
rol ecx, 8
imul ecx, r15d
rol eax, 2
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, dword [rbp + 0x814]
sub ecx, r10d
ror ecx, 0xb
imul ecx, eax
mov eax, r10d
ror eax, 0xc
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r11d, ecx
mov ecx, r11d
xor ecx, eax
mov eax, r11d
xor r11d, dword [rbp + 0x814]
imul ecx, esi
shr eax, 8
xor ecx, eax
xor r10d, ecx
xor r11d, r10d
xor r10d, r13d
mov byte [rdx - 4], r10b
xor r11d, ebx
xor r11d, edi
ror r10d, 8
mov byte [rdx], r11b
mov r13d, r9d
mov byte [rdx - 5], r10b
lea rdx, [rdx + 8]
ror r11d, 8
mov edi, r8d
mov byte [rdx - 9], r11b
ror r10d, 8
mov byte [rdx - 0xe], r10b
ror r11d, 8
mov byte [rdx - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rdx - 0xf], r10b
mov byte [rdx - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x140013aa7
mov dl, byte [rsp + 0x50]
movabs rdi, 0x7f1137fab69605e
mov r12d, dword [rbp - 0x80]
mov r15, qword [rbp - 0x50]
mov rsi, qword [rsp + 0x60]
mov r13, qword [rbp - 0x78]
movzx eax, dl
mov qword [rsi + r13], rax
mov rsi, qword [rsp + 0x70]
mov qword [rbp + 0x588], rsi
mov qword [rbp + 0x580], r13
lea rax, [0x14002c230]
mov r14d, 8
mov qword [rbp + 0x590], rax
mov qword [rbp + 0x598], r14
lea rax, [0x14002c190]
mov qword [rbp + 0x5a8], 0xa0
mov qword [rbp + 0x5a0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [r14 + 0x28]
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x140013e4b
mov esi, 0xc0000017
jmp 0x140014033
mov esi, esi
mov dword [rax], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x140013e84
mov esi, 0xc0000017
jmp 0x140013f78
mov qword [r14 + 8], rax
mov r8, rsi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov esi, 0xa0
mov dword [r14 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x140013e7a
mov qword [r14 + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [rsi + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [r14 + 0x20], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x140013e7a
mov qword [r14 + 0x28], rax
mov rax, qword [0x14002c230]
mov r15, r14
mov qword [rcx], rax
mov esi, r11d
mov r14d, r11d
test r14, r14
je 0x140014033
mov r13, qword [r14 + 8]
test r13, r13
je 0x140013fb1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r13, qword [r14 + 0x18]
test r13, r13
je 0x140013fe1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r13, qword [r14 + 0x28]
test r13, r13
je 0x140014010
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x140014048
mov qword [rbp + 0x570], r15
mov r15, r11
jmp 0x140014048
mov esi, 0xc0000001
mov r14, qword [rbp + 0x580]
test r14, r14
je 0x14001407e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x580], r11
test r15, r15
je 0x140014139
mov r14, qword [r15 + 8]
test r14, r14
je 0x1400140b7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r15 + 8], r11
mov r14, qword [r15 + 0x18]
test r14, r14
je 0x1400140e7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r15 + 0x18], r11
mov r14, qword [r15 + 0x28]
test r14, r14
je 0x140014116
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r15 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or esi, 0x10000000
jl 0x1400143eb
mov r14, qword [rbp + 0x570]
mov ecx, dword [r14]
mov r8d, dword [r14 + 0x20]
add ecx, 4
mov edx, dword [r14 + 0x10]
cmp ecx, 4
jb 0x1400142a2
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400142a2
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x1400142a2
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400142a2
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x1400142a2
mov dword [rbp + 0x194], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r13d, r13d
mov r15, rax
test rax, rax
jne 0x1400141d6
mov esi, 0xc0000017
mov r15d, 0xc0000095
jmp 0x1400142ae
mov eax, dword [r14]
lea rsi, [r15 + 4]
mov dword [r15], eax
cmp rsi, r15
jb 0x14001426f
mov r8d, dword [r14]
mov rcx, rsi
mov rdx, qword [r14 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14]
add rcx, rsi
cmp rcx, rsi
jb 0x14001426f
mov eax, dword [r14 + 0x10]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x14001426f
mov r8d, dword [r14 + 0x10]
mov rcx, rsi
mov rdx, qword [r14 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14 + 0x10]
add rcx, rsi
cmp rcx, rsi
jb 0x14001426f
mov eax, dword [r14 + 0x20]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x14001426f
mov r8d, dword [r14 + 0x20]
mov rcx, rsi
mov rdx, qword [r14 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r14 + 0x20]
add rax, rsi
cmp rax, rsi
jb 0x14001426f
mov eax, dword [rbp + 0x194]
mov esi, r13d
mov qword [rbp - 0x38], r15
mov r15, r13
mov dword [rsp + 0x68], eax
jmp 0x140014274
mov esi, 0xc0000095
test r15, r15
je 0x1400141cb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x1400141cb
mov r15d, 0xc0000095
xor r13d, r13d
mov esi, r15d
or esi, 0x10000000
jl 0x1400143e8
mov dword [rbp + 0x198], r13d
mov dword [rbp + 0x19c], 0x1c
mov eax, 0x28
mov dword [rbp + 0x1a0], eax
mov dword [rbp + 0x1a4], eax
lea r14d, [rax - 0x27]
cmp qword [rbp + 0x730], r13
jne 0x1400142f3
mov esi, 0xc000000d
jmp 0x1400147f3
cmp dword [rbp + 0x728], r14d
jbe 0x1400142e9
mov rax, qword [rbp + 0x730]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400147f0
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400147f0
add edx, r14d
cmp edx, r14d
jb 0x140014306
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400147f0
test r8d, r8d
mov dword [rbp + 0x198], r8d
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x5b0], rax
cmp dword [rbp + 0x728], 2
jbe 0x1400142e9
mov rax, qword [rbp + 0x730]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400147f0
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400147f0
add edx, r14d
cmp edx, 2
jb 0x140014364
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400147f0
test edx, edx
mov dword [rbp + 0x1a8], edx
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x5b8], rax
lea eax, [r8 + 0x30]
cmp eax, 0x30
jb 0x1400147f0
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x1400147f0
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x1400147f0
mov dword [rbp + 0x1ac], eax
mov esi, r13d
cmp eax, 0x400000
jbe 0x1400147e8
mov esi, 0x8000ffff
xor r11d, r11d
mov r13, qword [rbp - 0x38]
mov r14, qword [rbp + 0x818]
test r14, r14
je 0x14001441e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp + 0x570]
test r14, r14
je 0x1400144e7
mov r15, qword [r14 + 8]
test r15, r15
je 0x14001445e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r15, qword [r14 + 0x18]
test r15, r15
je 0x14001448e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r15, qword [r14 + 0x28]
test r15, r15
je 0x1400144bd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x570], r11
test r13, r13
je 0x14001450f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp - 0x40]
test r14, r14
je 0x14001453b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r15, qword [rbp + 0x820]
test r15, r15
je 0x1400145fd
mov r14, qword [r15 + 8]
test r14, r14
je 0x14001457b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r15 + 8], r11
mov r14, qword [r15 + 0x18]
test r14, r14
je 0x1400145ab
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r15 + 0x18], r11
mov r14, qword [r15 + 0x28]
test r14, r14
je 0x1400145da
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r15 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp - 0x70]
test r14, r14
je 0x140014629
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x1400146dc
mov edx, dword [rbp + 0x738]
cmp edx, 1
jb 0x1400146dc
mov rsi, qword [rbp + 0x740]
test rsi, rsi
je 0x1400146dc
test edx, edx
je 0x1400146dc
mov ecx, dword [rsi]
lea r8, [rsi + 4]
cmp r8, rsi
jb 0x1400146dc
test ecx, ecx
mov dword [rbp + 0x1b4], ecx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x5d0], rax
cmp ecx, 4
jne 0x1400146dc
mov eax, dword [rax]
mov dword [rbp + 0x1b8], eax
test eax, eax
js 0x1400146dc
cmp edx, 1
jbe 0x1400146dc
mov edx, r11d
lea rcx, [rsi + 4]
cmp rcx, rsi
jb 0x1400146dc
mov esi, dword [rsi]
add rsi, rcx
cmp rsi, rcx
jb 0x1400146dc
inc edx
cmp edx, 1
jb 0x140014692
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x1400146dc
test ecx, ecx
mov dword [rbp + 0x1bc], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x5d8], rax
cmp ecx, 8
jne 0x1400146dc
mov rax, qword [rax]
mov qword [rbp + 0x5e0], rax
mov r13, qword [rbp - 0x68]
mov r15, qword [rbp - 0x48]
mov rsi, qword [rbp + 0x730]
mov dword [rbp + 0x72c], r11d
mov dword [rbp + 0x728], r11d
test rsi, rsi
je 0x140014728
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x730], r11
mov rsi, qword [rbp + 0x740]
mov dword [rbp + 0x73c], r11d
mov dword [rbp + 0x738], r11d
test rsi, rsi
je 0x14001476c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x740], r11
test r15, r15
je 0x140014794
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x1400147bc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov eax, dword [rbp - 0x28]
xor r15d, r15d
mov esi, dword [rbp + 0xd0]
mov dword [rbp + 0x1c0], eax
mov rax, qword [rbp + 0x480]
mov qword [rbp + 0x478], rax
mov qword [rbp + 0x480], r11
jmp 0x1400154b8
mov dword [rbp + 0x188], eax
jmp 0x1400147f3
mov esi, r15d
test esi, esi
js 0x1400143e8
mov esi, dword [rbp + 0x188]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x140014836
mov esi, 0xd0000017
mov r15d, r11d
jmp 0x140014842
mov r15, rax
mov qword [rbp - 0x40], rax
mov esi, 0x10000000
mov r13, qword [rbp - 0x38]
test esi, esi
js 0x1400143ef
test r13, r13
jne 0x14001485d
mov esi, 0x80070057
jmp 0x1400143ef
test r15, r15
je 0x140014853
mov eax, dword [rsp + 0x68]
lea r8, [rbp + 0x5c0]
mov dword [rbp + 0x7d8], eax
lea rdx, [0x140027fe0]
mov eax, dword [rbp + 0x188]
mov ecx, r14d
mov dword [rbp + 0x7dc], eax
mov qword [rbp + 0x7c8], r13
mov qword [rbp + 0x7d0], r15
mov dword [rbp + 0x7e0], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x1400148d9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x1400148d1
mov esi, 0x80004005
mov edx, dword [rbp + 0x188]
jmp 0x14001492b
mov rcx, qword [rbp + 0x5c0]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400148ae
xor r9d, r9d
lea rdx, [rbp + 0x7c8]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp + 0x188]
mov esi, eax
or esi, 0x10000000
cmovge edx, dword [rbp + 0x7dc]
mov dword [rbp + 0x188], edx
xor r11d, r11d
cmp esi, 0xd0000023
jne 0x140014940
mov esi, 0x8007007a
jmp 0x1400143ef
test esi, esi
js 0x1400143ef
mov qword [rbp - 0x50], r11
cmp edx, 4
jae 0x14001495b
mov esi, 0xc000003e
jmp 0x140014d3e
mov r13d, dword [r15]
lea rcx, [r15 + 4]
cmp rcx, r15
jb 0x140014d39
lea eax, [rdx - 4]
cmp eax, r13d
jb 0x140014951
lea r9, [rcx + r13]
mov qword [rsp + 0x70], r9
cmp r9, rcx
jb 0x140014d39
lea r8d, [r13 + 4]
cmp r8d, 4
jb 0x140014d39
mov eax, edx
sub eax, r8d
cmp eax, 4
jb 0x140014951
mov esi, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x140014d39
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x140014d39
mov eax, edx
sub eax, r9d
cmp eax, esi
jb 0x140014951
lea r10, [rcx + rsi]
cmp r10, rcx
jb 0x140014d39
lea r8d, [r9 + rsi]
cmp r8d, r9d
jb 0x140014d39
mov eax, edx
sub eax, r8d
cmp eax, 4
jb 0x140014951
mov r15d, dword [r10]
lea rax, [r10 + 4]
mov qword [rbp - 0x78], rax
cmp rax, r10
jb 0x140014d39
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x140014d39
mov eax, edx
sub eax, ecx
cmp eax, r15d
jb 0x140014951
lea r8d, [rcx + r15]
cmp r8d, ecx
jb 0x140014d39
cmp edx, r8d
jne 0x140014951
lea ecx, [rsi + r13]
mov eax, edx
add ecx, r15d
add rcx, 0xc
cmp rcx, rax
jne 0x140014951
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x140014a7e
mov esi, 0xc0000017
jmp 0x140014c5c
mov rax, qword [rbp - 0x40]
add rax, 4
je 0x140014adc
mov dword [r14], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
jne 0x140014ac3
mov esi, 0xc0000017
jmp 0x140014ba1
mov qword [r14 + 8], rcx
mov rdx, qword [rbp - 0x40]
mov r8, r13
add rdx, 4
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140014ae3
mov dword [r14], r11d
mov qword [r14 + 8], r11
mov r13, qword [rsp + 0x70]
add r13, 4
je 0x140014b34
mov dword [r14 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140014ab9
mov qword [r14 + 0x18], rax
mov r8, rsi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140014b3c
mov dword [r14 + 0x10], r11d
mov qword [r14 + 0x18], r11
mov rsi, qword [rbp - 0x78]
test rsi, rsi
je 0x140014b8f
mov dword [r14 + 0x20], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x140014ab9
mov qword [r14 + 0x28], rax
mov r8, r15
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140014b97
mov dword [r14 + 0x20], r11d
mov qword [r14 + 0x28], r11
mov qword [rbp - 0x50], r14
mov esi, r11d
mov r14, r11
test r14, r14
je 0x140014c5c
mov r15, qword [r14 + 8]
test r15, r15
je 0x140014bda
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r15, qword [r14 + 0x18]
test r15, r15
je 0x140014c0a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r15, qword [r14 + 0x28]
test r15, r15
je 0x140014c39
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13, qword [rbp - 0x50]
test esi, esi
mov r14, r11
cmovs r14, qword [rbp - 0x50]
cmovs r13, r11
mov qword [rbp + 0x820], r13
test r14, r14
je 0x140014d41
mov r15, qword [r14 + 8]
test r15, r15
je 0x140014cae
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r15, qword [r14 + 0x18]
test r15, r15
je 0x140014cde
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r15, qword [r14 + 0x28]
test r15, r15
je 0x140014d0d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x820], r13
jmp 0x140014d41
mov esi, 0xc0000095
mov r13, r11
or esi, 0x10000000
jl 0x1400143eb
mov qword [rbp + 0x5c8], r11
mov r14, r11
mov qword [rbp - 0x50], r11
mov r15, r11
test r13, r13
jne 0x140014d6d
mov esi, 0xd000000d
jmp 0x1400143eb
mov rax, qword [r13 + 8]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140014d63
cmp dword [r13], r11d
je 0x140014d63
mov esi, dword [r13]
mov dword [rsp + 0x68], r11d
test rsi, rsi
je 0x1400152e6
add rsi, 0xfffffffffffffff8
mov qword [rsp + 0x70], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x78], rax
mov r13, rax
test rax, rax
je 0x1400152df
mov r9, qword [rsp + 0x60]
mov r8, rsi
mov qword [rbp + 0x810], rdi
mov dl, r11b
mov byte [rsp + 0x50], dl
mov r14, rax
and r8d, 7
je 0x140014ef1
mov ecx, r11d
mov eax, r11d
mov dword [rsp + 0x54], ecx
mov dword [rbp - 0x60], eax
test r8d, r8d
je 0x140014e50
lea r10d, [r11 + 0x38]
mov ebx, eax
movzx eax, byte [r9]
inc r9
cmp r11d, 4
jge 0x140014e25
lea ecx, [r10 - 0x20]
shl eax, cl
mov ecx, dword [rsp + 0x54]
or ebx, eax
jmp 0x140014e34
mov ecx, r10d
shl eax, cl
mov ecx, dword [rsp + 0x54]
or ecx, eax
mov dword [rsp + 0x54], ecx
inc r11d
sub r10d, 8
cmp r11d, r8d
jl 0x140014e0a
mov dword [rbp - 0x60], ebx
movabs rbx, 0xc81ecb17b1b54a58
mov eax, dword [rbp - 0x60]
and dword [rsp + 0x58], 0
mov r10d, eax
mov r11d, ecx
xor r10d, 0x92f65a5
xor r11d, 0x699a899c
mov eax, r10d
mov ecx, r11d
test r8d, r8d
je 0x140014ebc
mov ebx, dword [rsp + 0x58]
lea rdi, [r14 + 1]
mov qword [rbp + 0x808], rdi
cmp ebx, 4
jge 0x140014e8f
rol eax, 8
mov edi, eax
jmp 0x140014e94
rol ecx, 8
mov edi, ecx
mov byte [r14], dil
inc ebx
mov rdi, qword [rbp + 0x808]
mov r14, rdi
cmp ebx, r8d
jl 0x140014e78
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
cmp r8d, 4
jbe 0x140014ed5
mov ecx, 8
sub ecx, r8d
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140014eff
xor eax, eax
mov r11d, eax
cmp r8d, 4
jae 0x140014eff
lea ecx, [rax + 4]
sub ecx, r8d
shl ecx, 3
shr r10d, cl
shl r10d, cl
jmp 0x140014eff
or dword [rsp + 0x54], 0xffffffff
xor eax, eax
mov dword [rbp - 0x60], r11d
mov r10d, eax
mov rax, rsi
shr rax, 3
mov qword [rbp + 0x808], rax
test rax, rax
je 0x140015249
mov edx, dword [rbp + 0x814]
lea r12, [r14 + 7]
mov r14, qword [rbp + 0x808]
lea r13, [r9 + 2]
mov ebx, dword [rsp + 0x54]
mov r15d, dword [rbp - 0x60]
movzx eax, dx
mov dword [rsp + 0x58], eax
movzx eax, word [rbp + 0x812]
mov esi, dword [rsp + 0x58]
mov dword [rsp + 0x78], eax
movzx eax, di
mov dword [rbp - 0x30], eax
movzx eax, byte [r13 - 1]
movzx r9d, byte [r13 - 2]
movzx r8d, byte [r13 + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [r13]
lea r13, [r13 + 8]
shl r9d, 8
or r9d, eax
movzx eax, byte [r13 - 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [r13 - 5]
or r8d, eax
xor r10d, r9d
movzx eax, byte [r13 - 4]
shl r8d, 8
or r8d, eax
movzx eax, byte [r13 - 3]
shl r8d, 8
or r8d, eax
mov eax, edx
xor eax, edi
xor r11d, r8d
xor r11d, eax
xor r11d, r10d
mov ecx, r11d
mov eax, r11d
sub ecx, edi
rol eax, 0xa
rol ecx, 5
imul ecx, esi
add ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
lea ecx, [r10 + rdx]
ror ecx, 9
imul ecx, eax
mov eax, r10d
rol eax, 2
sub ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
sub ecx, esi
shr eax, 0xd
imul ecx, dword [rbp - 0x30]
sub ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
movzx ecx, word [rbp + 0x812]
xor ecx, r10d
rol ecx, 6
imul ecx, eax
mov eax, r10d
rol eax, 2
sub ecx, eax
mov eax, edx
xor r11d, ecx
mov ecx, r11d
xor ecx, edi
sub eax, ecx
xor r10d, eax
mov eax, r10d
mov ecx, r10d
ror ecx, 6
xor eax, esi
imul eax, dword [rsp + 0x78]
xor ecx, eax
xor r11d, ecx
mov eax, r11d
rol eax, 2
lea ecx, [r11 + rdx]
ror ecx, 0xf
imul ecx, dword [rbp - 0x30]
add ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, edi
ror ecx, 0xe
movzx eax, word [rbp + 0x816]
imul ecx, eax
mov eax, r10d
rol eax, 8
sub ecx, eax
xor r11d, ecx
mov ecx, edi
xor ecx, r11d
mov eax, r11d
ror eax, 0xa
ror ecx, 0xc
imul ecx, esi
xor ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
xor ecx, r10d
imul ecx, eax
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor r11d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r11d
not eax
ror eax, 5
add eax, dword [rbp - 0x30]
imul eax, ecx
xor r10d, eax
mov eax, r10d
sub eax, ecx
xor eax, edi
xor r11d, eax
xor ecx, r11d
mov eax, r11d
rol ecx, 2
imul ecx, esi
shr eax, 2
add ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
ror ecx, 6
imul ecx, eax
mov eax, r10d
rol eax, 7
add ecx, eax
xor r11d, ecx
mov eax, r11d
mov ecx, r11d
xor eax, esi
ror ecx, 9
imul eax, dword [rbp - 0x30]
add ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
movzx ecx, word [rbp + 0x812]
xor ecx, r10d
rol ecx, 5
imul ecx, eax
mov eax, r10d
rol eax, 7
add ecx, eax
mov eax, edi
xor r11d, ecx
movzx ecx, word [rbp + 0x812]
xor eax, r11d
xor r10d, eax
xor r10d, edx
mov eax, r10d
ror eax, 3
sub eax, ecx
imul eax, esi
xor r11d, eax
mov ecx, r11d
mov eax, r11d
sub ecx, edx
ror ecx, 1
imul ecx, dword [rbp - 0x30]
ror eax, 6
sub ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
lea ecx, [rdi + r10]
rol ecx, 3
imul ecx, eax
mov eax, r10d
rol eax, 0xe
add ecx, eax
xor r11d, ecx
mov eax, r11d
ror eax, 0xe
lea ecx, [rdi + r11]
rol ecx, 0xf
imul ecx, esi
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r10d
xor ecx, dword [rbp - 0x30]
imul ecx, eax
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor r11d, ebx
rol eax, 2
xor ecx, edx
mov ebx, r8d
rol ecx, 4
imul ecx, dword [rbp - 0x30]
xor ecx, eax
xor ecx, r15d
mov r15d, r9d
xor r10d, ecx
mov byte [r12 - 4], r10b
mov byte [r12], r11b
lea r12, [r12 + 8]
ror r10d, 8
mov byte [r12 - 0xd], r10b
ror r11d, 8
mov byte [r12 - 9], r11b
ror r10d, 8
mov byte [r12 - 0xe], r10b
ror r11d, 8
mov byte [r12 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r12 - 0xf], r10b
mov byte [r12 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x140014f4f
mov dl, byte [rsp + 0x50]
movabs rbx, 0xc81ecb17b1b54a58
mov r12d, dword [rbp - 0x80]
mov r15, qword [rbp - 0x50]
mov rsi, qword [rsp + 0x70]
mov r13, qword [rbp - 0x78]
xor r11d, r11d
mov eax, r11d
test rsi, rsi
je 0x140015260
xor dl, byte [rax + r13]
inc rax
cmp rax, rsi
jb 0x140015254
mov rcx, qword [rsp + 0x60]
movzx eax, dl
cmp rax, qword [rsi + rcx]
je 0x14001527c
mov r14, qword [rbp + 0x5c8]
mov esi, 0xc004d501
jmp 0x140015290
mov r14, r13
mov qword [rbp + 0x5c8], r13
mov r15, rsi
mov r13, r11
mov esi, dword [rsp + 0x68]
test r13, r13
je 0x1400152bf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x5c8]
xor r11d, r11d
test esi, esi
js 0x1400152e6
mov qword [rbp - 0x70], r14
mov esi, 0x10000000
mov r14, r11
mov qword [rbp + 0x5c8], r11
mov dword [rbp + 0x18c], r15d
jmp 0x1400152f2
mov r14, qword [rbp + 0x5c8]
mov r15d, dword [rbp + 0x18c]
mov esi, 0xd0000001
test r14, r14
je 0x140015328
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r15d, dword [rbp + 0x18c]
xor r11d, r11d
mov qword [rbp + 0x5c8], r11
test esi, esi
js 0x1400143eb
cmp r15d, 4
jae 0x140015340
mov esi, 0xc000003e
jmp 0x1400154a9
mov r8, qword [rbp - 0x70]
mov r9d, dword [r8]
lea rcx, [r8 + 4]
mov dword [rbp - 0x80], r9d
cmp rcx, r8
jb 0x1400154a4
lea eax, [r15 - 4]
cmp eax, 4
jb 0x140015336
mov r14d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x1400154a4
lea eax, [r15 - 8]
cmp eax, r14d
jb 0x140015336
lea eax, [r14 + 8]
cmp eax, 8
jb 0x1400154a4
mov ecx, r15d
lea rdx, [rsi + r14]
lea rax, [r8 + rcx]
cmp rax, rdx
jb 0x140015336
mov rax, r8
sub rax, r14
sub rax, rsi
add rax, rcx
cmp rax, 8
jae 0x140015336
mov dword [rsp + 0x68], r11d
mov r15, r11
mov r8d, r11d
test rsi, rsi
je 0x140015425
mov rcx, rsi
cmp rdx, rsi
jb 0x1400154a4
jbe 0x140015420
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x1400154a4
cmp rax, rdx
ja 0x14001540f
mov eax, dword [rcx]
add eax, 4
cmp eax, 4
jb 0x140015419
mov dword [rbp + 0x1b0], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x1400154a4
mov rcx, r9
cmp r9, rdx
ja 0x14001540f
inc r8d
mov dword [rsp + 0x68], r8d
cmp rcx, rdx
jae 0x140015423
jmp 0x1400153c7
mov esi, 0xc000000d
jmp 0x1400154a9
mov esi, 0xc0000095
jmp 0x140015490
cmp rcx, rdx
jne 0x14001540f
test r14d, r14d
je 0x14001545f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r15, rax
test rax, rax
jne 0x14001545f
mov esi, 0xc0000017
jmp 0x140015490
test rsi, rsi
je 0x140015475
mov r8, r14
mov rdx, rsi
mov rcx, r15
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov eax, dword [rsp + 0x68]
mov dword [rbp + 0x738], eax
mov qword [rbp + 0x740], r15
mov dword [rbp + 0x73c], r14d
mov esi, r11d
test esi, esi
js 0x1400154a9
mov eax, dword [rbp - 0x80]
cmp eax, dword [rbp + 0x738]
je 0x1400154a9
jmp 0x140015336
mov esi, 0xc0000095
bts esi, 0x1c
jmp 0x1400143eb
xor r15d, r15d
mov esi, dword [rbp - 0x28]
lea rcx, [rbp + 0x480]
call fcn.14000b280
test r12d, r12d
jns 0x140015519
cmp r12d, 0xd0000034
jne 0x1400154db
mov eax, 0xc004f012
mov esi, eax
jmp 0x140015530
cmp r12d, 0xd00000e5
je 0x140015502
cmp r12d, 0xc004d501
je 0x140015502
cmp r12d, 0xd000003e
jne 0x1400154fd
mov eax, 0xc004f028
jmp 0x1400154d7
mov eax, r12d
jmp 0x140015507
mov eax, 0xc004f027
test eax, eax
jns 0x140015519
cmp eax, 0x8007007a
jne 0x1400154d7
mov esi, 0xc004f01e
jmp 0x140015530
cmp esi, 4
jne 0x140015512
mov rax, qword [rbp + 0x478]
mov esi, dword [rbp - 0x58]
mov ecx, dword [rax]
mov dword [rbp + 0x1c4], ecx
lea rcx, [rbp + 0x478]
call fcn.14000b280
movabs r12, 0x800000000000
test esi, esi
jns 0x1400155c8
cmp dword [section..data], 5
mov dword [rbp + 0x1c4], r15d
jbe 0x1400155d6
test qword [0x14002c010], r12
je 0x1400155d6
mov rax, qword [0x14002c018]
and rax, r12
cmp rax, qword [0x14002c018]
jne 0x1400155d6
lea rax, [rbp + 0x1c8]
mov dword [rbp + 0x1c8], esi
mov qword [rbp + 0x888], rax
lea rdx, [0x140029247]
lea rax, [rbp + 0x868]
mov dword [rbp + 0x890], 4
mov qword [rsp + 0x28], rax
lea rcx, [section..data]
xor r9d, r9d
mov dword [rsp + 0x20], 3
xor r8d, r8d
mov dword [rbp + 0x894], r15d
call fcn.140001090
cmp dword [rbp + 0x1c4], r15d
je 0x1400155d6
call fcn.14000b5a4
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x1cc]
lea rcx, [rbp + 0x1d0]
call fcn.14000b2b0
mov edx, dword [rbp + 0x1d0]
mov r14d, eax
test edx, edx
js 0x140015601
test eax, eax
jns 0x140015673
cmp dword [section..data], 5
jbe 0x14001566a
test qword [0x14002c010], r12
je 0x14001566a
mov rax, qword [0x14002c018]
and rax, r12
cmp rax, qword [0x14002c018]
jne 0x14001566a
lea rax, [rbp + 0x1d4]
mov dword [rbp + 0x1d8], edx
mov qword [rsp + 0x28], rax
lea rdx, [0x140029059]
lea rax, [rbp + 0x1d8]
mov dword [rbp + 0x1d4], r14d
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rcx, [section..data]
call fcn.1400012c0
mov edx, dword [rbp + 0x1d0]
test r14d, r14d
js 0x140010712
test edx, edx
jne 0x140018585
mov rsi, qword [rbp + 0x310]
test rsi, rsi
je 0x140018585
cmp dword [rbp + 0x1cc], r15d
jl 0x1400183fc
xorps xmm0, xmm0
mov qword [rbp - 0x48], r15
lea rax, [0x14002c240]
mov qword [rbp - 0x68], r15
movups xmmword [rbp + 0x828], xmm0
mov qword [rbp + 0x5e8], rax
mov r13d, r15d
movups xmmword [rbp + 0x758], xmm0
mov r12d, r15d
mov dword [rbp + 0x1dc], r15d
mov qword [rbp + 0x750], r15
mov dword [rbp + 0x1e0], r15d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r14d, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
jne 0x140015717
mov r14d, 0xc0000017
jmp 0x1400157fb
mov rax, qword [rbp + 0x5e8]
mov r8d, 0x80
mov qword [rbp - 0x48], rdx
movups xmm0, xmmword [rax]
lea r13d, [r8 + 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx + r8 - 0x10], xmm1
movups xmm0, xmmword [rax + r8]
movups xmmword [rdx + r8], xmm0
movups xmm1, xmmword [rax + r8 + 0x10]
movups xmmword [rdx + r8 + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x5f0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
je 0x14001570c
mov rax, qword [rbp + 0x5f0]
mov r12d, r14d
mov qword [rbp - 0x68], rdx
mov rcx, qword [rax]
mov qword [rdx], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x5f8], rax
mov dword [rbp + 0x1e4], 0xc
mov r14d, 0x10000000
mov dword [rbp + 0x1dc], 0xc4
test r14d, r14d
js 0x140015a16
mov r8d, 8
mov dword [rbp + 0x1e8], r8d
mov ecx, dword [rbp + 0x1dc]
or edx, 0xffffffff
mov r10d, 0xc0000095
lea eax, [rcx + 8]
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, r10d
mov dword [rbp + 0x1dc], edx
add r14d, 0x10000000
cmp eax, ecx
jb 0x14001812e
xor r9d, r9d
lea r15, [0x14002805c]
test rsi, rsi
cmovne r15, rsi
test r15, r15
je 0x140015885
lea r8, [rbp + 0x600]
mov edx, 0x7fffffff
mov rcx, r15
call fcn.140025640
mov edx, dword [rbp + 0x1dc]
xor r9d, r9d
mov r8d, dword [rbp + 0x1e8]
mov r10d, 0xc0000095
jmp 0x14001588a
mov eax, 0x80070057
test eax, eax
jns 0x1400158a3
xor r15d, r15d
mov qword [rbp + 0x600], r15
mov r14d, 0xc000003e
jmp 0x140015a16
mov rax, qword [rbp + 0x600]
inc rax
mov qword [rbp + 0x600], rax
lea ecx, [rax*2 + 4]
cmp ecx, 4
jb 0x1400158ce
mov r8d, ecx
mov dword [rbp + 0x1e8], ecx
mov r14d, r9d
jmp 0x1400158d1
mov r14d, r10d
test r14d, r14d
js 0x140015a13
lea ecx, [r8 + rdx]
or esi, 0xffffffff
cmp ecx, edx
mov eax, esi
cmovae eax, ecx
sbb r14d, r14d
and r14d, r10d
mov dword [rbp + 0x1dc], eax
add r14d, 0x10000000
cmp ecx, edx
jb 0x14001812b
lea r8, [rbp + 0x608]
mov edx, 0x7fffffff
lea rcx, [0x14002805c]
call fcn.140025640
xor ecx, ecx
test eax, eax
jns 0x140015930
xor r15d, r15d
mov qword [rbp + 0x608], r15
jmp 0x140015898
mov rax, qword [rbp + 0x608]
mov r8d, 0xc0000095
inc rax
mov qword [rbp + 0x608], rax
lea edx, [rax*2 + 4]
cmp edx, 4
jb 0x14001595e
mov r14d, ecx
mov dword [rbp + 0x1e8], edx
jmp 0x140015967
mov edx, dword [rbp + 0x1e8]
mov r14d, r8d
test r14d, r14d
js 0x140015a13
mov ecx, dword [rbp + 0x1dc]
mov r9d, 0x10000000
lea eax, [rdx + rcx]
mov edx, esi
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, r8d
add r14d, r9d
cmp eax, ecx
jb 0x14001812b
lea eax, [rdx + 4]
mov ecx, esi
cmp eax, edx
cmovae ecx, eax
sbb r14d, r14d
and r14d, r8d
add r14d, r9d
cmp eax, edx
jb 0x14001812b
lea eax, [rcx + 8]
mov edx, esi
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, r8d
mov dword [rbp + 0x1dc], edx
add r14d, r9d
cmp eax, ecx
jb 0x14001812b
mov dword [rbp + 0x74c], edx
mov esi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r14d, r14d
mov rdx, rax
test rax, rax
jne 0x140015b79
mov r14d, 0xc0000017
xor r15d, r15d
mov rsi, qword [rbp - 0x48]
mov rbx, qword [rbp + 0x750]
mov dword [rbp + 0x74c], r15d
mov dword [rbp + 0x748], r15d
test rbx, rbx
je 0x140015a5b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x750], r15
mov rbx, qword [rbp + 0x760]
mov dword [rbp + 0x75c], r15d
mov dword [rbp + 0x758], r15d
test rbx, rbx
je 0x140015a9c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x760], r15
test rsi, rsi
je 0x140015ac1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140015aea
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r14d, r14d
jns 0x14001814c
cmp dword [section..data], 5
jbe 0x140010712
movabs rdx, 0x800000000000
test qword [0x14002c010], rdx
je 0x140010712
mov rax, qword [0x14002c018]
and rax, rdx
cmp rax, qword [0x14002c018]
jne 0x140010712
mov rax, qword [rbp + 0x310]
lea rdx, [0x14002926d]
mov qword [rbp + 0x6a8], rax
lea rcx, [section..data]
lea rax, [rbp + 0x6a8]
mov dword [rbp + 0x268], r14d
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rbp + 0x268]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.140001344
jmp 0x140010712
mov qword [rbp + 0x750], rdx
mov dword [rbp + 0x748], r14d
mov dword [rbp + 0x1f0], 0x6d
lea r8, [rax + 4]
cmp r8, rdx
jb 0x140018120
mov ecx, dword [rbp + 0x74c]
add rcx, rdx
add rax, 8
mov rsi, qword [rbp - 0x48]
cmp rax, rcx
jbe 0x140015bc2
mov r14d, 0xc0000023
xor r15d, r15d
jmp 0x140015a1a
mov dword [rdx], 4
mov eax, dword [rbp + 0x1f0]
mov dword [r8], eax
mov edx, dword [rbp + 0x748]
inc edx
mov dword [rbp + 0x748], edx
test rsi, rsi
jne 0x140015c7d
test r13d, r13d
je 0x140015c86
mov r14d, 0xc000000d
mov r13d, 1
test r14d, r14d
js 0x140015bba
mov r8d, dword [rbp + 0x74c]
xor r14d, r14d
mov r11, qword [rbp - 0x68]
test r11, r11
jne 0x140015d66
test r12d, r12d
je 0x140015d6f
mov r14d, 0xc000000d
mov r11d, 0xc0000095
test r14d, r14d
js 0x140015bba
mov rax, qword [rbp + 0x5f8]
xor r14d, r14d
mov qword [rbp + 0x610], rax
cmp qword [rbp + 0x750], r14
jne 0x140015e4a
mov dword [rbp + 0x200], 0xc
lea eax, [r8 + 0xc]
cmp eax, r8d
jb 0x140018115
mov r8d, eax
mov dword [rbp + 0x208], 3
add edx, r13d
jmp 0x140015ef0
test r13d, r13d
je 0x140015bf1
cmp qword [rbp + 0x750], r14
jne 0x140015cc7
lea ecx, [r13 + 4]
mov dword [rbp + 0x1f8], ecx
mov eax, dword [rbp + 0x74c]
lea r8d, [rcx + rax]
cmp r8d, eax
jb 0x140018115
mov r13d, 1
mov dword [rbp + 0x74c], r8d
add edx, r13d
mov dword [rbp + 0x748], edx
jmp 0x140015c0c
mov r8, qword [rbp + 0x750]
mov ecx, r14d
test edx, edx
je 0x140015cfe
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x140015d5b
mov dword [rbp + 0x1f8], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x140018115
inc ecx
mov r8, r9
cmp ecx, edx
jb 0x140015cd5
lea r9, [r8 + 4]
cmp r9, r8
jb 0x140018115
mov ecx, dword [rbp + 0x74c]
lea rax, [r8 + 4]
add rcx, qword [rbp + 0x750]
mov edx, r13d
add rax, rdx
cmp rax, rcx
ja 0x140015bb4
mov dword [r8], r13d
test rsi, rsi
je 0x140015d41
mov r8d, edx
mov rcx, r9
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov edx, dword [rbp + 0x748]
mov r13d, 1
add edx, r13d
mov dword [rbp + 0x748], edx
jmp 0x140015bfd
mov r14d, 0xc0000095
jmp 0x140015bf7
test r12d, r12d
je 0x140015c22
cmp qword [rbp + 0x750], r14
jne 0x140015da9
lea eax, [r12 + 4]
mov dword [rbp + 0x1fc], eax
lea ecx, [rax + r8]
cmp ecx, r8d
jb 0x140018115
mov rax, qword [rbp + 0x5f8]
mov r8d, ecx
mov qword [rbp + 0x610], rax
add edx, r13d
jmp 0x140015c51
mov r9, qword [rbp + 0x750]
mov ecx, r14d
test edx, edx
je 0x140015de1
mov eax, dword [r9]
add eax, 4
cmp eax, 4
jb 0x140015e3c
mov dword [rbp + 0x1fc], eax
mov r10d, eax
add r10, r9
cmp r10, r9
jb 0x140018115
add ecx, r13d
mov r9, r10
cmp ecx, edx
jb 0x140015db7
lea r10, [r9 + 4]
cmp r10, r9
jb 0x140018115
mov edx, r12d
lea rax, [r9 + 4]
mov ecx, r8d
add rax, rdx
add rcx, qword [rbp + 0x750]
cmp rax, rcx
ja 0x140015bb4
mov dword [r9], r12d
test r11, r11
je 0x140015e21
mov r8d, edx
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memcpy
mov edx, dword [rbp + 0x748]
mov r8d, dword [rbp + 0x74c]
add edx, r13d
mov dword [rbp + 0x748], edx
jmp 0x140015c28
mov r11d, 0xc0000095
mov r14d, r11d
jmp 0x140015c2e
mov r9, qword [rbp + 0x750]
mov ecx, r14d
test edx, edx
je 0x140015e86
mov eax, dword [r9]
add eax, 4
cmp eax, 4
jb 0x140015f26
mov dword [rbp + 0x200], eax
mov r10d, eax
add r10, r9
cmp r10, r9
jb 0x140015f1e
add ecx, r13d
mov r9, r10
cmp ecx, edx
jb 0x140015e58
lea rdx, [r9 + 4]
cmp rdx, r9
jb 0x140015f1e
mov ecx, r8d
lea rax, [r9 + 0xc]
add rcx, qword [rbp + 0x750]
cmp rax, rcx
ja 0x140015bb4
mov dword [r9], 8
mov rax, qword [rbp + 0x610]
mov qword [rdx], rax
mov edx, dword [rbp + 0x748]
mov r8d, dword [rbp + 0x74c]
add edx, r13d
mov dword [rbp + 0x748], edx
test r14d, r14d
js 0x140015bba
xor r14d, r14d
mov dword [rbp + 0x208], 3
cmp qword [rbp + 0x750], r14
jne 0x140015f2b
mov dword [rbp + 0x210], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140018115
add edx, r13d
mov dword [rbp + 0x74c], eax
mov dword [rbp + 0x748], edx
mov r8d, eax
jmp 0x140015fb4
mov r14d, r11d
jmp 0x140015bba
mov r14d, r11d
jmp 0x140015ed1
mov r9, qword [rbp + 0x750]
mov ecx, r14d
test edx, edx
je 0x140015f63
mov eax, dword [r9]
add eax, 4
cmp eax, 4
jb 0x140015fdc
mov dword [rbp + 0x210], eax
mov r10d, eax
add r10, r9
cmp r10, r9
jb 0x140015f1e
add ecx, r13d
mov r9, r10
cmp ecx, edx
jb 0x140015f39
lea rdx, [r9 + 4]
cmp rdx, r9
jb 0x140015f1e
mov ecx, r8d
lea rax, [r9 + 8]
add rcx, qword [rbp + 0x750]
cmp rax, rcx
ja 0x140015bb4
mov dword [r9], 4
mov eax, dword [rbp + 0x208]
mov dword [rdx], eax
mov edx, dword [rbp + 0x748]
mov r8d, dword [rbp + 0x74c]
add edx, r13d
mov dword [rbp + 0x748], edx
test r14d, r14d
js 0x140015bba
xor r14d, r14d
test r15, r15
je 0x140015fe1
lea r8, [rbp + 0x618]
mov edx, 0x7fffffff
mov rcx, r15
call fcn.140025640
mov r8d, dword [rbp + 0x74c]
mov edx, dword [rbp + 0x748]
jmp 0x140015fe6
mov r14d, r11d
jmp 0x140015fa8
mov eax, 0x80070057
test eax, eax
jns 0x140015fff
xor r15d, r15d
mov qword [rbp + 0x618], r15
mov r14d, 0xc000003e
jmp 0x140015a1a
mov rax, qword [rbp + 0x618]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x14001810d
mov qword [rbp + 0x618], rcx
lea r10d, [rcx + rcx]
test r15, r15
jne 0x140016069
test r10d, r10d
je 0x14001606e
mov r14d, 0xc000000d
mov r12d, 0xc0000095
xor r15d, r15d
test r14d, r14d
js 0x140015a1a
lea r8, [rbp + 0x620]
mov edx, 0x7fffffff
lea rcx, [0x14002805c]
call fcn.140025640
test eax, eax
jns 0x140016148
mov qword [rbp + 0x620], r15
jmp 0x140015ff4
test r10d, r10d
je 0x140016028
cmp qword [rbp + 0x750], r14
jne 0x1400160bd
add r10d, 4
mov r12d, 0xc0000095
cmp r10d, 4
jb 0x1400160b5
mov dword [rbp + 0x214], r10d
lea eax, [r10 + r8]
cmp eax, r8d
jb 0x1400160ae
add edx, r13d
mov dword [rbp + 0x74c], eax
xor r15d, r15d
mov dword [rbp + 0x748], edx
mov r14d, r15d
jmp 0x140016037
or dword [rbp + 0x74c], 0xffffffff
mov r14d, r12d
jmp 0x140016034
mov r9, qword [rbp + 0x750]
mov ecx, r14d
test edx, edx
je 0x1400160f1
mov eax, dword [r9]
add eax, 4
cmp eax, 4
jb 0x14001611e
mov dword [rbp + 0x214], eax
mov r11d, eax
add r11, r9
cmp r11, r9
jb 0x14001611e
add ecx, r13d
mov r9, r11
cmp ecx, edx
jb 0x1400160cb
lea r11, [r9 + 4]
cmp r11, r9
jb 0x14001611e
mov ecx, r8d
lea rax, [r10 + 4]
add rcx, qword [rbp + 0x750]
add rax, r9
mov edx, r10d
cmp rax, rcx
jbe 0x140016126
mov r14d, 0xc0000023
jmp 0x14001602e
mov r12d, 0xc0000095
jmp 0x1400160b5
mov dword [r9], r10d
test r15, r15
je 0x14001613c
mov r8, rdx
mov rcx, r11
mov rdx, r15
call sub.msvcrt.dll_memcpy
add dword [rbp + 0x748], r13d
jmp 0x14001602e
mov rax, qword [rbp + 0x620]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x1400180fd
lea r9d, [rcx + rcx]
mov qword [rbp + 0x620], rcx
test r9d, r9d
je 0x140016258
cmp qword [rbp + 0x750], r15
jne 0x1400161ca
add r9d, 4
cmp r9d, 4
jb 0x1400161c2
mov dword [rbp + 0x218], r9d
mov eax, dword [rbp + 0x74c]
lea r8d, [r9 + rax]
cmp r8d, eax
jb 0x1400161af
add dword [rbp + 0x748], r13d
mov r14d, r15d
mov dword [rbp + 0x74c], r8d
jmp 0x140016265
or r8d, 0xffffffff
mov r14d, r12d
mov dword [rbp + 0x74c], r8d
jmp 0x140016265
mov r14d, r12d
jmp 0x14001625e
mov ecx, r15d
mov rdx, qword [rbp + 0x750]
cmp dword [rbp + 0x748], r15d
jbe 0x140016206
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400161c2
mov dword [rbp + 0x218], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x1400161c2
add ecx, r13d
mov rdx, r8
cmp ecx, dword [rbp + 0x748]
jb 0x1400161dd
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x1400161c2
mov r8d, dword [rbp + 0x74c]
lea rax, [r9 + 4]
mov ecx, r8d
mov r11d, r9d
add rcx, qword [rbp + 0x750]
add rax, rdx
mov r14d, r15d
cmp rax, rcx
jbe 0x14001623a
mov r14d, 0xc0000023
jmp 0x140016265
mov dword [rdx], r9d
mov r8, r11
lea rdx, [0x14002805c]
mov rcx, r10
call sub.msvcrt.dll_memcpy
add dword [rbp + 0x748], r13d
jmp 0x14001625e
mov r14d, 0xc000000d
mov r8d, dword [rbp + 0x74c]
test r14d, r14d
js 0x140015a1a
cmp qword [rbp + 0x750], r15
jne 0x1400162a7
mov dword [rbp + 0x21c], 4
lea eax, [r8 + 4]
cmp eax, r8d
jb 0x140018105
add dword [rbp + 0x748], r13d
mov r8d, eax
mov dword [rbp + 0x220], 0xa
jmp 0x140016343
mov edx, r15d
mov rcx, qword [rbp + 0x750]
cmp dword [rbp + 0x748], r15d
jbe 0x1400162e7
mov eax, dword [rcx]
add eax, 4
cmp eax, 4
jb 0x140016311
mov dword [rbp + 0x21c], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x140018105
add edx, r13d
mov rcx, r9
cmp edx, dword [rbp + 0x748]
jb 0x1400162ba
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x140018105
mov eax, r8d
mov r14d, r15d
add rax, qword [rbp + 0x750]
cmp rdx, rax
jbe 0x140016316
mov r14d, 0xc0000023
jmp 0x140015a1a
mov r14d, r12d
jmp 0x140016327
mov dword [rcx], r15d
add dword [rbp + 0x748], r13d
mov r8d, dword [rbp + 0x74c]
test r14d, r14d
js 0x140015a1a
mov dword [rbp + 0x220], 0xa
cmp qword [rbp + 0x750], r15
jne 0x14001636f
mov dword [rbp + 0x228], 8
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140018105
add dword [rbp + 0x748], r13d
mov r8d, eax
mov dword [rbp + 0x74c], eax
jmp 0x140016400
mov ecx, r15d
mov rdx, qword [rbp + 0x750]
cmp dword [rbp + 0x748], r15d
jbe 0x1400163b3
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x140016499
mov dword [rbp + 0x228], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140018105
add ecx, r13d
mov rdx, r9
cmp ecx, dword [rbp + 0x748]
jb 0x140016382
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x140018105
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rbp + 0x750]
mov r14d, r15d
cmp rax, rcx
ja 0x140016306
mov dword [rdx], 4
mov eax, dword [rbp + 0x220]
mov dword [r9], eax
add dword [rbp + 0x748], r13d
mov r8d, dword [rbp + 0x74c]
test r14d, r14d
js 0x140015a1a
mov dword [rbp + 0x22c], 0xc
mov dword [rbp + 0x1e8], 0x14
xor r10d, r10d
mov qword [rbp + 0x818], r15
mov qword [rbp - 0x70], r10
mov r9, r15
mov dword [rbp + 0x234], r10d
mov r12d, r15d
mov qword [rbp + 0x628], r15
mov r13d, r15d
mov qword [rbp - 0x38], r15
mov dword [rbp - 0x58], r15d
mov qword [rbp - 0x40], r15
mov dword [rbp + 0x230], r15d
mov qword [rbp + 0x820], r15
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x630], rax
lea eax, [r8 + 8]
or ecx, 0xffffffff
cmp eax, 8
mov edx, 0xc0000095
cmovae ecx, eax
sbb r14d, r14d
and r14d, edx
cmp eax, 8
jb 0x140016580
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x1400164a1
mov r14d, edx
jmp 0x140016580
mov r14d, r12d
jmp 0x1400163f7
mov dword [rbp + 0x238], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r10d, r10d
mov rsi, rax
test rax, rax
jne 0x1400164e5
mov r14d, 0xc0000017
mov r9, r15
jmp 0x140016580
mov eax, dword [rbp + 0x748]
lea rdx, [rsi + 4]
mov dword [rsi], eax
cmp rdx, rsi
jb 0x140016548
mov eax, dword [rbp + 0x74c]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x140016548
mov edx, dword [rbp + 0x238]
mov r14d, r10d
mov rax, qword [rbp + 0x630]
mov qword [rdx + rsi - 8], rax
mov r8d, dword [rbp + 0x74c]
mov rdx, qword [rbp + 0x750]
call sub.msvcrt.dll_memcpy
mov r12d, dword [rbp + 0x238]
xor r10d, r10d
mov r9, rsi
mov qword [rbp + 0x818], rsi
mov esi, r10d
jmp 0x140016551
mov r9, r15
mov r14d, 0xc0000095
test rsi, rsi
je 0x140016580
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9, qword [rbp + 0x818]
xor r10d, r10d
or r14d, 0x10000000
jl 0x140017d32
mov qword [rbp + 0x638], r10
mov rsi, r10
mov qword [rbp - 0x50], r10
test r9, r9
jne 0x1400165ae
mov r14d, 0xc000000d
xor r12d, r12d
jmp 0x140016e28
mov r14d, r12d
xor r12d, r12d
mov qword [rsp + 0x60], r14
test r14, r14
je 0x140016d3b
lea r12, [r14 + 8]
mov qword [rsp + 0x70], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r12d, r12d
mov qword [rbp - 0x78], rax
mov r13, rax
test rax, rax
je 0x140016d3b
mov r9, qword [rbp + 0x818]
mov dl, r12b
mov byte [rsp + 0x50], dl
mov ecx, r12d
test r14, r14
je 0x140016624
xor dl, byte [rcx + r9]
inc rcx
cmp rcx, r14
jb 0x140016614
mov byte [rsp + 0x50], dl
xor r8d, r8d
mov qword [rbp + 0x810], rbx
mov r12, rax
mov dword [rbp - 0x80], r8d
mov rax, r14
mov dword [rsp + 0x68], r8d
or r11d, 0xffffffff
mov r10d, r8d
and eax, 7
je 0x14001673a
mov dword [rbp - 0x80], r8d
mov ecx, r8d
mov dword [rsp + 0x68], ecx
mov r13d, r8d
mov r11d, r8d
test eax, eax
je 0x1400166a4
lea r10d, [r8 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, 4
jge 0x140016687
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x68]
or ecx, r8d
mov dword [rsp + 0x68], ecx
jmp 0x140016694
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x68]
or r13d, r8d
inc r11d
sub r10d, 8
cmp r11d, eax
jl 0x140016666
mov dword [rbp - 0x80], r13d
mov r10d, ecx
mov r11d, r13d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r13d, r13d
mov ecx, r10d
mov r8d, r11d
test eax, eax
je 0x140016705
lea rdi, [r12 + 1]
mov qword [rbp + 0x808], rdi
cmp r13d, 4
jge 0x1400166de
rol ecx, 8
mov edi, ecx
jmp 0x1400166e5
rol r8d, 8
mov edi, r8d
mov byte [r12], dil
inc r13d
mov rdi, qword [rbp + 0x808]
mov r12, rdi
cmp r13d, eax
jl 0x1400166c5
movabs rdi, 0x7f1137fab69605e
cmp eax, 4
jbe 0x14001671c
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140016736
xor r8d, r8d
mov r11d, r8d
cmp eax, 4
jae 0x140016736
lea ecx, [r8 + 4]
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r13, qword [rbp - 0x78]
mov rax, r14
shr rax, 3
mov qword [rbp + 0x808], rax
test rax, rax
je 0x140016ab2
movzx eax, word [rbp + 0x816]
lea rdx, [r12 + 7]
mov r12, qword [rbp + 0x808]
lea rcx, [r9 + 2]
mov edi, dword [rbp - 0x80]
mov r13d, dword [rsp + 0x68]
movzx r14d, word [rbp + 0x814]
mov dword [rsp + 0x54], eax
movzx eax, word [rbp + 0x812]
mov dword [rbp - 0x60], eax
mov eax, dword [rbp + 0x814]
xor eax, ebx
movzx esi, bx
mov r15d, eax
movzx eax, byte [rcx - 1]
movzx r9d, byte [rcx - 2]
movzx r8d, byte [rcx + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [rcx]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx + 1]
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx + 3]
or r8d, eax
movzx eax, byte [rcx + 4]
shl r8d, 8
or r8d, eax
movzx eax, byte [rcx + 5]
add rcx, 8
shl r8d, 8
or r8d, eax
mov qword [rbp + 0x808], rcx
mov ecx, dword [rbp + 0x814]
xor r11d, r8d
mov eax, r11d
sub eax, esi
xor eax, r9d
xor r10d, eax
movzx eax, word [rbp + 0x812]
xor r10d, dword [rbp + 0x814]
xor ecx, r10d
ror ecx, 0xf
imul ecx, eax
mov eax, r10d
ror eax, 7
add ecx, eax
xor r11d, ecx
mov eax, r11d
ror eax, 0xa
lea ecx, [r11 + rbx]
ror ecx, 9
imul ecx, r14d
sub ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
mov ecx, r10d
xor ecx, r14d
rol ecx, 4
imul ecx, eax
mov eax, r10d
rol eax, 5
add ecx, eax
mov eax, dword [rbp + 0x814]
xor r11d, ecx
mov ecx, r11d
xor ecx, ebx
sub eax, ecx
xor r10d, eax
movzx eax, word [rbp + 0x812]
mov ecx, r10d
sub ecx, esi
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r11d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r11d
ror eax, 0xf
xor eax, r14d
imul eax, esi
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, ecx
imul eax, r14d
xor r11d, eax
mov eax, r11d
sub eax, dword [rbp + 0x814]
sub eax, esi
xor r10d, eax
mov eax, r10d
mov ecx, r10d
xor eax, dword [rsp + 0x54]
imul eax, dword [rbp - 0x60]
ror ecx, 0xa
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor ecx, esi
ror eax, 3
rol ecx, 6
imul ecx, r14d
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
ror eax, 0xf
sub eax, ecx
imul eax, esi
xor r11d, eax
movzx eax, word [rbp + 0x816]
mov ecx, r11d
xor ecx, eax
mov eax, r11d
imul ecx, esi
shr eax, 1
xor ecx, eax
mov eax, r11d
xor r10d, ecx
shr eax, 0xf
mov ecx, r11d
sub ecx, r14d
rol ecx, 3
imul ecx, esi
xor ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, r10d
sub ecx, r14d
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 9
ror eax, 0xb
imul ecx, r14d
xor ecx, eax
xor r10d, ecx
movzx ecx, word [rbp + 0x816]
mov eax, r10d
sub eax, ebx
sub eax, ecx
xor r11d, eax
mov eax, r11d
mov ecx, r11d
xor eax, dword [rbp - 0x60]
ror ecx, 7
imul eax, esi
sub eax, ecx
xor r10d, eax
movzx eax, word [rbp + 0x816]
mov ecx, r10d
xor ecx, eax
movzx eax, word [rbp + 0x812]
rol ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 0x10
sub ecx, eax
xor r11d, ecx
mov ecx, ebx
sub ecx, r11d
mov eax, r11d
ror ecx, 0xa
imul ecx, r14d
ror eax, 4
add ecx, eax
movzx eax, word [rbp + 0x816]
xor r10d, ecx
mov ecx, r10d
sub ecx, ebx
ror ecx, 4
imul ecx, eax
mov eax, r10d
ror eax, 9
xor ecx, eax
xor r11d, ecx
mov ecx, r11d
mov eax, r11d
xor ecx, dword [rbp + 0x814]
rol ecx, 8
imul ecx, esi
rol eax, 2
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r10d, ecx
mov ecx, dword [rbp + 0x814]
sub ecx, r10d
ror ecx, 0xb
imul ecx, eax
mov eax, r10d
ror eax, 0xc
sub ecx, eax
movzx eax, word [rbp + 0x812]
xor r11d, ecx
mov ecx, r11d
xor ecx, eax
mov eax, r11d
imul ecx, r14d
shr eax, 8
xor ecx, eax
xor r10d, ecx
mov rcx, qword [rbp + 0x808]
xor r11d, r10d
xor r10d, r13d
mov byte [rdx - 4], r10b
xor r11d, r15d
xor r11d, edi
ror r10d, 8
mov byte [rdx], r11b
mov r13d, r9d
mov byte [rdx - 5], r10b
lea rdx, [rdx + 8]
ror r11d, 8
mov edi, r8d
mov byte [rdx - 9], r11b
ror r10d, 8
mov byte [rdx - 0xe], r10b
ror r11d, 8
mov byte [rdx - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rdx - 0xf], r10b
mov byte [rdx - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r12, 1
jne 0x140016794
mov dl, byte [rsp + 0x50]
movabs rdi, 0x7f1137fab69605e
mov r15, qword [rbp + 0x820]
mov rsi, qword [rbp - 0x50]
mov r14, qword [rsp + 0x60]
mov r13, qword [rbp - 0x78]
movzx eax, dl
mov qword [r14 + r13], rax
mov r14, qword [rsp + 0x70]
mov qword [rbp + 0x640], r14
mov qword [rbp + 0x638], r13
lea rax, [0x14002c230]
mov ebx, 8
mov qword [rbp + 0x648], rax
mov qword [rbp + 0x650], rbx
lea r12, [0x14002c190]
mov qword [rbp + 0x660], 0xa0
mov qword [rbp + 0x658], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [rbx + 0x28]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
jne 0x140016b36
mov r14d, 0xc0000017
xor r12d, r12d
jmp 0x140016d2a
mov r14d, r14d
mov dword [rbx], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x140016b72
mov r14d, 0xc0000017
xor r12d, r12d
jmp 0x140016c74
mov qword [rbx + 8], rax
mov r8, r14
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r14d, 0xa0
mov dword [rbx + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov r14d, 8
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x140016b64
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [r12]
lea ecx, [r14 + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r12 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r12 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r12 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r12 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r12 + 0x70]
movups xmmword [rax + rcx - 0x10], xmm1
movups xmm0, xmmword [r12 + rcx]
movups xmmword [rax + rcx], xmm0
movups xmm1, xmmword [r12 + rcx + 0x10]
movups xmmword [rax + rcx + 0x10], xmm1
mov dword [rbx + 0x20], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r12d, r12d
mov rcx, rax
test rax, rax
jne 0x140016c5d
mov r14d, 0xc0000017
jmp 0x140016c74
mov qword [rbx + 0x28], rcx
mov rax, qword [0x14002c230]
mov rsi, rbx
mov qword [rcx], rax
mov r14d, r12d
mov rbx, r12
test rbx, rbx
je 0x140016d2a
mov r12, qword [rbx + 8]
xor r13d, r13d
test r12, r12
je 0x140016cad
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 8], r13
mov r12, qword [rbx + 0x18]
test r12, r12
je 0x140016cda
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 0x18], r13
mov r12, qword [rbx + 0x28]
test r12, r12
je 0x140016d0a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r12d, r12d
mov qword [rbx + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r14d, r14d
js 0x140016d41
mov qword [rbp + 0x628], rsi
mov rsi, r12
jmp 0x140016d41
mov r14d, 0xc0000001
mov rbx, qword [rbp + 0x638]
test rbx, rbx
je 0x140016d74
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x638], r12
test rsi, rsi
je 0x140016e24
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140016daa
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 8], r12
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x140016dd7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 0x18], r12
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x140016e04
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r13d, dword [rbp - 0x58]
or r14d, 0x10000000
jl 0x140017d32
mov rsi, qword [rbp + 0x628]
mov ecx, dword [rsi]
mov r8d, dword [rsi + 0x20]
add ecx, 4
mov edx, dword [rsi + 0x10]
cmp ecx, 4
jb 0x140016f7c
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x140016f7c
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x140016f7c
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x140016f7c
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x140016f7c
mov dword [rbp + 0x23c], ecx
mov ebx, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
jne 0x140016ebf
mov esi, 0xc0000095
lea r14d, [rsi - 0x7e]
jmp 0x140016f84
mov eax, dword [rsi]
lea r14, [rbx + 4]
mov dword [rbx], eax
cmp r14, rbx
jb 0x140016f4a
mov r8d, dword [rsi]
mov rcx, r14
mov rdx, qword [rsi + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsi]
add rcx, r14
cmp rcx, r14
jb 0x140016f4a
mov eax, dword [rsi + 0x10]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x140016f4a
mov r8d, dword [rsi + 0x10]
mov rcx, r14
mov rdx, qword [rsi + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [rsi + 0x10]
add rcx, r14
cmp rcx, r14
jb 0x140016f4a
mov eax, dword [rsi + 0x20]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x140016f4a
mov r8d, dword [rsi + 0x20]
mov rcx, r14
mov rdx, qword [rsi + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [rsi + 0x20]
add rax, r14
cmp rax, r14
jb 0x140016f4a
mov r13d, dword [rbp + 0x23c]
mov r14d, r12d
mov qword [rbp - 0x38], rbx
mov rbx, r12
jmp 0x140016f50
mov r14d, 0xc0000095
test rbx, rbx
je 0x140016f75
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov esi, 0xc0000095
jmp 0x140016f84
mov esi, 0xc0000095
mov r14d, esi
or r14d, 0x10000000
jl 0x140017d32
mov dword [rbp + 0x240], r12d
mov dword [rbp + 0x244], 0x30
mov eax, 0x38
mov dword [rbp + 0x248], eax
mov dword [rbp + 0x24c], eax
cmp qword [rbp + 0x750], r12
jne 0x140016fc7
mov r14d, 0xc000000d
jmp 0x1400170af
cmp dword [rbp + 0x748], 1
jbe 0x140016fbc
mov rax, qword [rbp + 0x750]
mov edx, r12d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400170ac
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400170ac
inc edx
cmp edx, 1
jb 0x140016fda
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400170ac
test r8d, r8d
mov dword [rbp + 0x240], r8d
mov rax, r12
cmovne rax, rcx
mov qword [rbp + 0x668], rax
cmp dword [rbp + 0x748], 2
jbe 0x140016fbc
mov rax, qword [rbp + 0x750]
mov edx, r12d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400170ac
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x1400170ac
inc edx
cmp edx, 2
jb 0x140017037
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x1400170ac
test edx, edx
mov dword [rbp + 0x250], edx
mov rax, r12
cmovne rax, rcx
mov qword [rbp + 0x670], rax
lea eax, [r8 + 0x40]
cmp eax, 0x40
jb 0x1400170ac
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x1400170ac
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x1400170ac
mov dword [rbp + 0x254], eax
mov r14d, r12d
cmp eax, 0x400000
jbe 0x1400170a4
mov r14d, 0x8000ffff
jmp 0x140017d32
mov dword [rbp + 0x230], eax
jmp 0x1400170af
mov r14d, esi
test r14d, r14d
js 0x140017d32
mov ebx, dword [rbp + 0x230]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x1400170f2
mov rbx, qword [rbp - 0x40]
mov r14d, 0xd0000017
jmp 0x1400170ff
mov rbx, rax
mov qword [rbp - 0x40], rax
mov r14d, 0x10000000
test r14d, r14d
js 0x140017d32
mov rax, qword [rbp - 0x38]
test rax, rax
jne 0x14001711c
mov r14d, 0x80070057
jmp 0x140017d32
test rbx, rbx
je 0x140017111
mov qword [rbp + 0x7e8], rax
lea r8, [rbp + 0x678]
mov eax, dword [rbp + 0x230]
lea rdx, [0x140027fe0]
mov ecx, 1
mov dword [rbp + 0x7fc], eax
mov dword [rbp + 0x7f8], r13d
mov qword [rbp + 0x7f0], rbx
mov dword [rbp + 0x800], r12d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14001719c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x140017194
mov r14d, 0x80004005
mov edx, dword [rbp + 0x230]
jmp 0x1400171f0
mov rcx, qword [rbp + 0x678]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001716c
xor r9d, r9d
lea rdx, [rbp + 0x7e8]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp + 0x230]
mov r14d, eax
or r14d, 0x10000000
cmovge edx, dword [rbp + 0x7fc]
mov dword [rbp + 0x230], edx
cmp r14d, 0xd0000023
jne 0x140017204
mov r14d, 0x8007007a
jmp 0x140017d32
test r14d, r14d
js 0x140017d32
mov qword [rbp - 0x50], r12
cmp edx, 4
jae 0x140017221
mov r14d, 0xc000003e
jmp 0x1400175ef
mov r13d, dword [rbx]
lea r12, [rbx + 4]
cmp r12, rbx
jb 0x1400175e9
lea eax, [rdx - 4]
cmp eax, r13d
jae 0x140017244
mov r14d, 0xc000003e
jmp 0x1400175ec
lea r9, [r12 + r13]
cmp r9, r12
jb 0x1400175e9
mov r14d, esi
xor r12d, r12d
or r14d, 0x10000000
jl 0x140017d32
mov qword [rbp - 0x50], r12
mov rbx, r12
mov qword [rbp + 0x680], rbx
mov rsi, r12
test r15, r15
jne 0x14001761d
mov rbx, qword [rbp + 0x818]
xor edi, edi
test rbx, rbx
je 0x140017d60
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp + 0x628]
test rsi, rsi
je 0x140017e1e
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140017d9d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 8], rdi
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x140017dca
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 0x18], rdi
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x140017df7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rsi + 0x28], rdi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x628], rdi
mov rbx, qword [rbp - 0x38]
test rbx, rbx
je 0x140017e47
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x140017e70
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r15, r15
je 0x140017f20
mov rbx, qword [r15 + 8]
test rbx, rbx
je 0x140017ea6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [r15 + 8], rdi
mov rbx, qword [r15 + 0x18]
test rbx, rbx
je 0x140017ed3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [r15 + 0x18], rdi
mov rbx, qword [r15 + 0x28]
test rbx, rbx
je 0x140017f00
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [r15 + 0x28], rdi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rbx, qword [rbp - 0x70]
xor r15d, r15d
test rbx, rbx
je 0x140017f4c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r14d, r14d
js 0x140015a16
cmp dword [rbp + 0x758], 3
je 0x140017f69
mov r14d, 0xc004d501
jmp 0x140015a16
cmp qword [rbp + 0x760], r15
jne 0x140017f80
mov r14d, 0xc000000d
mov r9d, 0xc0000095
jmp 0x140017fd4
mov rbx, qword [rbp + 0x760]
mov ecx, dword [rbx]
lea rdx, [rbx + 4]
cmp rdx, rbx
jb 0x140017fcb
test ecx, ecx
mov dword [rbp + 0x25c], ecx
mov rax, r15
cmovne rax, rdx
mov qword [rbp + 0x688], rax
mov r14d, r15d
cmp ecx, 4
je 0x140017fbb
mov r14d, 0xc0000023
jmp 0x140015a16
mov ecx, dword [rax]
mov r9d, 0xc0000095
mov dword [rbp + 0x1e0], ecx
jmp 0x140017fda
mov r9d, 0xc0000095
mov r14d, r9d
mov ecx, dword [rbp + 0x1e0]
test r14d, r14d
js 0x140015a16
mov r14d, ecx
test ecx, ecx
js 0x140015a16
cmp qword [rbp + 0x760], r15
jne 0x140017fff
mov r14d, 0xc000000d
jmp 0x14001805f
mov rax, qword [rbp + 0x760]
mov edx, r15d
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001805c
mov eax, dword [rax]
add rax, r8
cmp rax, r8
jb 0x14001805c
inc edx
cmp edx, 1
jb 0x140018009
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001805c
test edx, edx
mov dword [rbp + 0x260], edx
mov rax, r15
cmovne rax, r8
mov qword [rbp + 0x690], rax
mov r14d, r15d
cmp edx, 8
jne 0x140017fb0
mov rax, qword [rax]
mov qword [rbp + 0x698], rax
jmp 0x14001805f
mov r14d, r9d
test r14d, r14d
js 0x140015a16
mov rax, qword [rbp + 0x698]
cmp qword [rbp + 0x5f8], rax
jne 0x140017f5e
cmp qword [rbp + 0x760], r15
jne 0x140018090
mov r14d, 0xc000000d
jmp 0x140015a16
mov rax, qword [rbp + 0x760]
mov edx, r15d
lea r8, [rax + 4]
cmp r8, rax
jb 0x1400180f5
mov eax, dword [rax]
add rax, r8
cmp rax, r8
jb 0x1400180f5
inc edx
cmp edx, 2
jb 0x14001809a
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x1400180f5
test edx, edx
mov dword [rbp + 0x264], edx
mov rax, r15
cmovne rax, r8
mov qword [rbp + 0x6a0], rax
mov r14d, r15d
cmp edx, 0x10
je 0x1400180e8
mov r14d, 0x8007000d
jmp 0x140015a16
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x828], xmm0
jmp 0x140018134
mov r14d, r9d
jmp 0x140015a16
or qword [rbp + 0x620], 0xffffffffffffffff
mov r14d, r12d
jmp 0x140015a1a
or qword [rbp + 0x618], 0xffffffffffffffff
mov r14d, 0xc0000095
jmp 0x140015bba
mov r14d, 0xc0000095
jmp 0x140015a13
xor r15d, r15d
mov ecx, dword [rbp + 0x1e0]
mov rsi, qword [rbp - 0x48]
test r14d, r14d
js 0x140015a1a
test ecx, ecx
cmovne r14d, ecx
jmp 0x140015a1a
lea rcx, [rbp + 0x2f8]
call qword [sym.imp.ext_ms_win_security_slc_l1_1_0.dll_SLOpen]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jns 0x1400181fd
cmp dword [section..data], 5
jbe 0x140010712
movabs rdx, 0x800000000000
test qword [0x14002c010], rdx
je 0x140010712
mov rax, qword [0x14002c018]
and rax, rdx
cmp rax, qword [0x14002c018]
jne 0x140010712
lea rax, [rbp + 0x26c]
mov dword [rbp + 0x26c], r14d
mov qword [rbp + 0x8b8], rax
lea rdx, [0x1400292a5]
lea rax, [rbp + 0x898]
mov dword [rbp + 0x8c0], 4
mov dword [rbp + 0x8c4], r15d
mov qword [rsp + 0x28], rax
lea rcx, [section..data]
xor r9d, r9d
mov dword [rsp + 0x20], 3
xor r8d, r8d
call fcn.140001090
jmp 0x140010712
xor ecx, ecx
call qword [sym.imp.ext_ms_win_security_slc_l1_1_0.dll_SLConsumeWindowsRight]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jns 0x14001827a
cmp dword [section..data], 5
jbe 0x140010712
movabs rdx, 0x800000000000
test qword [0x14002c010], rdx
je 0x140010712
mov rax, qword [0x14002c018]
and rax, rdx
cmp rax, qword [0x14002c018]
jne 0x140010712
lea rdx, [rbp + 0x8e8]
mov dword [rbp + 0x270], r14d
lea rcx, [rbp + 0x270]
call fcn.1400015c4
lea rax, [rbp + 0x8c8]
lea rdx, [0x140029106]
jmp 0x1400181d9
movsxd rax, dword [rbp + 0x830]
movabs rbx, 0x2b6109100
add rax, rbx
mov dword [rbp + 0x6b4], r15d
imul rdx, rax, 0x989680
movabs rdi, 0x19db1ded53e8000
mov dword [rbp + 0x6b0], r15d
cmp rdx, rdi
jae 0x1400182c8
mov ecx, 0x8007000d
call fcn.140001c64
mov ecx, 0x8007000d
call fcn.140001c84
jmp 0x1400182d4
lea rcx, [rbp + 0x328]
call fcn.140022324
movsxd rax, dword [rbp + 0x834]
add rax, rbx
imul rdx, rax, 0x989680
cmp rdx, rdi
jae 0x140018300
mov ecx, 0x8007000d
call fcn.140001c64
mov ecx, 0x8007000d
call fcn.140001c84
jmp 0x14001830c
lea rcx, [rbp + 0x6b0]
call fcn.140022324
cmp dword [section..data], 5
jbe 0x140018585
movabs rdx, 0x800000000000
lea rcx, [section..data]
call fcn.14000112c
test al, al
je 0x140018585
lea rdx, [rbp + 0x6b0]
mov qword [rbp + 0x6b8], 0x1000000
lea rcx, [rbp + 0x6c0]
call fcn.1400015b0
lea rdx, [rbp + 0x328]
lea rcx, [rbp + 0x2e8]
call fcn.1400015b0
lea rdx, [rbp + 0x1cc]
lea rcx, [rbp + 0x274]
call fcn.1400015a0
lea rdx, [rbp + 0x6b8]
lea rcx, [rbp + 0x330]
call fcn.1400015b0
lea rcx, [rbp + 0x310]
call fcn.140018734
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.140001150
lea rcx, [rbp + 0x6c0]
xor r9d, r9d
mov qword [rsp + 0x40], rcx
lea rdx, [0x140029134]
lea rcx, [rbp + 0x2e8]
xor r8d, r8d
mov qword [rsp + 0x38], rcx
lea rcx, [section..data]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x274]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x330]
mov qword [rsp + 0x20], rax
call fcn.1400013f4
jmp 0x140018585
lea rcx, [rbp + 0x300]
call fcn.140018740
mov rcx, rax
call qword [sym.imp.CLIPC.dll_ClipGetSubscriptionStatus]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jns 0x14001848d
cmp dword [section..data], 5
jbe 0x140010712
movabs rdx, 0x400000000000
lea rcx, [section..data]
call fcn.14000112c
test al, al
je 0x140010712
lea rdx, [rbp + 0x278]
mov dword [rbp + 0x278], r14d
lea rcx, [rbp + 0x27c]
call fcn.1400015a0
lea rax, [rbp + 0x27c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1400290cd]
lea rcx, [section..data]
call fcn.140001260
jmp 0x140010712
lea rcx, [rbp + 0x300]
mov ebx, r15d
call fcn.140018734
cmp dword [rax], r15d
jbe 0x140018585
lea rcx, [rbp + 0x300]
mov edi, ebx
call fcn.140018734
cmp dword [rax + rdi*8 + 8], 1
jne 0x14001856f
cmp dword [section..data], 5
jbe 0x14001856f
mov rdx, r12
lea rcx, [section..data]
call fcn.14000112c
test al, al
je 0x14001856f
lea rcx, [rbp + 0x300]
call fcn.140018734
lea rdx, [rbp + 0x1cc]
mov ecx, dword [rax + rdi*8 + 4]
mov dword [rbp + 0x280], ecx
lea rcx, [rbp + 0x284]
call fcn.1400015a0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x288]
call fcn.1400015a0
lea rcx, [rbp + 0x310]
call fcn.140018734
mov rdx, rax
lea rcx, [rbp + 0x350]
call fcn.140001150
mov qword [rsp + 0x30], rax
lea rdx, [0x1400291c2]
lea rax, [rbp + 0x284]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rcx, [section..data]
lea rax, [rbp + 0x288]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.1400014d0
lea rcx, [rbp + 0x300]
inc ebx
call fcn.140018734
cmp ebx, dword [rax]
jb 0x1400184a5
call fcn.14000af3c
jmp 0x14001866a
mov edi, 2
mov ecx, edi
call fcn.14001870c
lea ecx, [rdi + 2]
mov rbx, rax
call fcn.14001870c
mov rcx, rax
lea r8, [rbp + 0x28c]
mov rdx, rbx
call fcn.140022024
cmp eax, 1
je 0x140010723
cmp dword [rbp + 0x28c], r15d
je 0x140010723
mov ecx, edi
call fcn.14001870c
lea ecx, [rdi + 1]
mov rbx, rax
call fcn.14001870c
mov rdx, rax
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call fcn.1400220cc
mov r14d, eax
test eax, eax
jns 0x14001866a
cmp dword [section..data], 5
jbe 0x14001866a
movabs rdx, 0x400000000000
lea rcx, [section..data]
call fcn.14000112c
test al, al
je 0x14001866a
lea rdx, [rbp + 0x290]
mov dword [rbp + 0x290], r14d
lea rcx, [rbp + 0x294]
call fcn.1400015a0
lea rax, [rbp + 0x294]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [0x1400292cb]
lea rcx, [section..data]
call fcn.140001260
jmp 0x14001866a
mov eax, 0x80004005
mov r14d, eax
mov ecx, eax
call fcn.140001c64
mov ecx, r14d
call fcn.140001c84
lea rcx, [rbp + 0x310]
call fcn.14000b280
lea rcx, [rbp + 0x308]
call fcn.14000ad14
lea rcx, [rbp + 0x300]
call fcn.14000b280
lea rcx, [rbp + 0x2f8]
call fcn.1400186dc
mov eax, r14d
mov rcx, qword [rbp + 0x8f8]
xor rcx, rsp
call fcn.140025bf0
lea r11, [rsp + 0xa00]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret