Function at 0x1400187f0
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f8]
sub rsp, 0x6d0
mov rax, qword [0x14002c168]
xor rax, rsp
mov qword [rbp + 0x5c8], rax
mov rax, rcx
mov qword [rbp + 0x3a0], rcx
xor ecx, ecx
mov qword [rbp + 0x130], rcx
test rax, rax
jne 0x14001884b
mov ebx, 0x80070057
mov ecx, ebx
jmp 0x140021c63
xorps xmm0, xmm0
mov qword [rbp + 0xf8], rcx
lea rax, [0x14002c240]
mov dword [rbp + 0x140], ecx
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x2f8], rax
mov r13, rcx
mov dword [rbp + 0x98], ecx
mov dword [rbp + 0x1c], ecx
mov qword [rbp + 0x70], rcx
mov dword [rbp + 0xc], ecx
mov qword [rbp - 0x20], rcx
mov qword [rsp + 0x70], rcx
mov dword [rbp + 0xbc], ecx
mov dword [rbp + 0x40], ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r14d, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
or r10d, 0xffffffff
lea edx, [r14 + 0x78]
xor r11d, r11d
mov dword [rbp + 8], r10d
lea r8, [0x14002c188]
mov r12, rax
lea r15d, [r14 - 4]
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
mov esi, 0xc0000095
test rax, rax
jne 0x140018900
lea r14d, [rsi - 0x7e]
jmp 0x1400189ae
mov rax, qword [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r12 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r12 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r12 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r12 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r12 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r12 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r12 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r12 + rdx + 0x10], xmm1
mov qword [rbp + 0x300], r8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r13, rax
test rax, rax
jne 0x140018c67
mov r14d, 0xc0000017
mov r13, r12
mov rsi, qword [rsp + 0x70]
mov dword [rsp + 0x6c], r11d
mov dword [rsp + 0x68], r11d
test rsi, rsi
je 0x1400189ea
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x70], r11
mov rsi, qword [rbp + 0x38]
mov dword [rbp + 0x34], r11d
mov dword [rbp + 0x30], r11d
test rsi, rsi
je 0x140018a22
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x38], r11
test r13, r13
je 0x140018a4a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x140018a76
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x140021b62
cmp dword [rbp + 0xc], r11d
je 0x14001d087
xorps xmm0, xmm0
mov qword [rbp - 0x50], r11
lea rax, [0x14002c240]
mov r12, r11
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0x328], rax
mov r13, r11
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r14d, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
je 0x14001cfbb
mov rax, qword [rbp + 0x328]
lea edx, [r14 + 0x78]
mov r12, rsi
mov qword [rsp + 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rsi + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rsi + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rsi + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rsi + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rsi + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rsi + rdx + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x330], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
je 0x14001cfbb
mov rax, qword [rbp + 0x330]
mov r13, r14
mov qword [rsp + 0x78], r14
mov rcx, qword [rax]
mov qword [r14], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x240], rax
mov dword [rbp + 0x29c], 0xc
mov dword [rbp - 0x54], 0xc4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xc4
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
je 0x14001cfbb
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x58], r11d
mov dword [rbp + 0x1f8], r15d
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001cfbb
mov ecx, dword [rbp - 0x54]
add rcx, rax
add rax, 8
cmp rax, rcx
ja 0x14001cfbb
mov dword [rdx], r15d
mov eax, dword [rbp + 0x1f8]
mov dword [r8], eax
mov edx, dword [rbp - 0x58]
inc edx
mov dword [rbp - 0x58], edx
cmp qword [rbp - 0x50], r11
jne 0x14001b1fa
mov dword [rbp + 0x200], 0xa4
mov eax, dword [rbp - 0x54]
lea ecx, [rax + 0xa4]
cmp ecx, eax
jb 0x14001cfbb
lea eax, [rdx + 1]
mov dword [rbp - 0x54], ecx
mov dword [rbp - 0x58], eax
jmp 0x14001b2b9
mov rax, qword [rbp + 0x300]
mov qword [rbp - 0x20], r13
mov rcx, qword [rax]
mov qword [r13], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x1c0], rax
mov dword [rbp + 0x60], 0xc
lea r8, [rbp + 0x1a8]
mov edx, 0x7fffffff
lea rcx, str.Clip_SubscriptionPFN
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x140018cc1
mov qword [rbp + 0x1a8], r11
mov r14d, 0xc000003e
jmp 0x1400189ab
mov rax, qword [rbp + 0x1a8]
inc rax
mov qword [rbp + 0x1a8], rax
lea eax, [rax*2 + 4]
cmp eax, r15d
jb 0x140018ce6
mov r14d, r11d
mov dword [rbp + 0x60], eax
jmp 0x140018cec
mov eax, dword [rbp + 0x60]
mov r14d, esi
test r14d, r14d
js 0x1400189ab
add eax, 0xc4
or r10d, 0xffffffff
mov r9d, 0xc4
mov edx, r10d
cmp eax, r9d
mov r8d, 0x10000000
cmovae edx, eax
sbb r14d, r14d
and r14d, esi
add r14d, r8d
cmp eax, r9d
jb 0x14001b1de
lea eax, [rdx + 8]
mov ecx, r10d
cmp eax, edx
cmovae ecx, eax
sbb r14d, r14d
and r14d, esi
add r14d, r8d
cmp eax, edx
jb 0x14001b1de
mov dword [rbp + 0x60], 8
lea eax, [rcx + 8]
mov edx, r10d
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, esi
add r14d, r8d
cmp eax, ecx
jb 0x14001b1de
mov dword [rsp + 0x6c], edx
mov esi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
je 0x1400189a5
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x68], r11d
mov dword [rbp + 0x230], r11d
lea r8, [rax + 4]
cmp r8, rax
jb 0x140018e16
mov ecx, dword [rsp + 0x6c]
add rcx, rax
add rax, rsi
cmp rax, rcx
jbe 0x140018dd2
mov r14d, 0xc0000023
jmp 0x1400189ab
mov dword [rdx], r15d
mov eax, dword [rbp + 0x230]
mov dword [r8], eax
mov ecx, dword [rsp + 0x68]
inc ecx
mov dword [rsp + 0x68], ecx
cmp qword [rsp + 0x70], r11
jne 0x140018e21
mov dword [rbp + 0x22c], 0xa4
mov eax, dword [rsp + 0x6c]
lea edx, [rax + 0xa4]
cmp edx, eax
jb 0x140018e16
inc ecx
mov dword [rsp + 0x6c], edx
mov dword [rsp + 0x68], ecx
jmp 0x140018f01
mov r14d, 0xc0000095
jmp 0x1400189ab
mov r8, qword [rsp + 0x70]
mov edx, r11d
test ecx, ecx
je 0x140018e56
mov eax, dword [r8]
add eax, r15d
cmp eax, r15d
jb 0x140018f34
mov dword [rbp + 0x22c], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x140018e16
inc edx
mov r8, r9
cmp edx, ecx
jb 0x140018e2d
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x140018e16
mov ecx, dword [rsp + 0x6c]
lea rax, [r8 + 0xa4]
add rcx, qword [rsp + 0x70]
mov r14d, r11d
cmp rax, rcx
ja 0x140018dc7
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [r12]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [r12 + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [r12 + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [r12 + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [r12 + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [r12 + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [r12 + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [r12 + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
mov ecx, dword [rsp + 0x68]
inc ecx
mov dword [rsp + 0x68], ecx
test r14d, r14d
js 0x14001a241
mov edx, dword [rsp + 0x6c]
cmp qword [rsp + 0x70], r11
jne 0x140018f3c
mov dword [rbp + 0x228], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x140018e16
mov edx, eax
inc ecx
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x248], rax
jmp 0x140018fd7
mov r14d, 0xc0000095
jmp 0x140018ef4
mov r8, qword [rsp + 0x70]
mov r9d, r11d
test ecx, ecx
je 0x140018f77
mov eax, dword [r8]
add eax, r15d
cmp eax, r15d
jb 0x140018ffb
mov dword [rbp + 0x228], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x140018e16
inc r9d
mov r8, r10
cmp r9d, ecx
jb 0x140018f48
lea r9, [r8 + 4]
cmp r9, r8
jb 0x140018e16
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rsp + 0x70]
mov r14d, r11d
cmp rax, rcx
ja 0x140018dc7
mov dword [r8], esi
mov r12d, 0xc0000095
mov rax, qword [r13]
mov qword [r9], rax
mov ecx, dword [rsp + 0x68]
mov edx, dword [rsp + 0x6c]
inc ecx
mov dword [rsp + 0x68], ecx
test r14d, r14d
js 0x14001a241
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x248], rax
cmp qword [rsp + 0x70], r11
jne 0x140019006
mov dword [rbp + 0x224], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x14001b1d3
inc ecx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x68], ecx
jmp 0x140019087
mov r12d, 0xc0000095
mov r14d, r12d
jmp 0x140018fb9
mov r8, qword [rsp + 0x70]
mov r9d, r11d
test ecx, ecx
je 0x140019039
mov eax, dword [r8]
add eax, r15d
cmp eax, r15d
jb 0x140019068
mov dword [rbp + 0x224], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x140019060
inc r9d
mov r8, r10
cmp r9d, ecx
jb 0x140019012
lea r9, [r8 + 4]
cmp r9, r8
jb 0x140019060
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rsp + 0x70]
mov r14d, r11d
cmp rax, rcx
jbe 0x14001906d
mov r14d, 0xc0000023
jmp 0x14001a241
mov r14d, r12d
jmp 0x14001a241
mov r14d, r12d
jmp 0x14001907e
mov dword [r8], esi
mov rax, qword [rbp + 0x248]
mov qword [r9], rax
inc dword [rsp + 0x68]
test r14d, r14d
js 0x14001a241
lea r8, [rbp + 0x108]
mov edx, 0x7fffffff
lea rcx, str.Clip_SubscriptionPFN
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x1400190b8
mov qword [rbp + 0x108], r11
mov r14d, 0xc000003e
jmp 0x14001a241
mov rax, qword [rbp + 0x108]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x14001b1cb
lea r9d, [rcx + rcx]
mov qword [rbp + 0x108], rcx
test r9d, r9d
je 0x1400191ce
cmp qword [rsp + 0x70], r11
jne 0x14001913c
add r9d, r15d
cmp r9d, r15d
jb 0x14001912e
mov dword [rbp + 0x220], r9d
mov eax, dword [rsp + 0x6c]
mov r12d, 0xc0000095
lea r8d, [r9 + rax]
cmp r8d, eax
jb 0x14001911a
inc dword [rsp + 0x68]
mov r14d, r11d
mov dword [rsp + 0x6c], r8d
jmp 0x1400191df
or r10d, 0xffffffff
mov r14d, r12d
mov r8d, r10d
mov dword [rsp + 0x6c], r10d
jmp 0x1400191e3
mov r12d, 0xc0000095
mov r14d, r12d
jmp 0x1400191da
mov ecx, r11d
mov rdx, qword [rsp + 0x70]
cmp dword [rsp + 0x68], r11d
jbe 0x140019171
mov eax, dword [rdx]
add eax, r15d
cmp eax, r15d
jb 0x14001912e
mov dword [rbp + 0x220], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x14001912e
inc ecx
mov rdx, r8
cmp ecx, dword [rsp + 0x68]
jb 0x14001914b
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x14001912e
mov r8d, dword [rsp + 0x6c]
lea rax, [r9 + 4]
mov ecx, r8d
add rax, rdx
add rcx, qword [rsp + 0x70]
mov r14d, r11d
mov r11d, r9d
cmp rax, rcx
jbe 0x1400191ae
mov r14d, 0xc0000023
or r10d, 0xffffffff
mov r12d, 0xc0000095
xor r11d, r11d
jmp 0x1400191e3
mov dword [rdx], r9d
mov r8, r11
lea rdx, str.Clip_SubscriptionPFN
mov rcx, r10
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x68]
mov r8d, dword [rsp + 0x6c]
jmp 0x14001919f
mov r14d, 0xc000000d
mov r12d, 0xc0000095
mov r8d, dword [rsp + 0x6c]
or r10d, 0xffffffff
test r14d, r14d
js 0x14001a241
mov eax, dword [rbp + 0xc]
mov dword [rbp + 0x218], eax
cmp qword [rsp + 0x70], r11
jne 0x140019222
mov dword [rbp + 0x208], esi
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140019060
inc dword [rsp + 0x68]
mov r8d, eax
mov dword [rbp + 0xc8], r11d
jmp 0x1400192b0
mov ecx, r11d
mov rdx, qword [rsp + 0x70]
cmp dword [rsp + 0x68], r11d
jbe 0x14001925f
mov eax, dword [rdx]
add eax, r15d
cmp eax, r15d
jb 0x1400192d3
mov dword [rbp + 0x208], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140019060
inc ecx
mov rdx, r9
cmp ecx, dword [rsp + 0x68]
jb 0x140019231
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x140019060
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rsp + 0x70]
mov r14d, r11d
cmp rax, rcx
ja 0x140019055
mov dword [rdx], r15d
mov eax, dword [rbp + 0x218]
mov dword [r9], eax
inc dword [rsp + 0x68]
mov r8d, dword [rsp + 0x6c]
test r14d, r14d
js 0x14001a241
mov dword [rbp + 0xc8], r11d
cmp qword [rsp + 0x70], r11
jne 0x1400192d8
mov dword [rbp + 0x214], esi
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x140019060
inc dword [rsp + 0x68]
mov r8d, eax
mov dword [rsp + 0x6c], eax
jmp 0x140019358
mov r14d, r12d
jmp 0x140019299
mov ecx, r11d
mov rdx, qword [rsp + 0x70]
cmp dword [rsp + 0x68], r11d
jbe 0x140019315
mov eax, dword [rdx]
add eax, r15d
cmp eax, r15d
jb 0x1400193d3
mov dword [rbp + 0x214], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140019060
inc ecx
mov rdx, r9
cmp ecx, dword [rsp + 0x68]
jb 0x1400192e7
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x140019060
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rsp + 0x70]
mov r14d, r11d
cmp rax, rcx
ja 0x140019055
mov dword [rdx], r15d
mov eax, dword [rbp + 0xc8]
mov dword [r9], eax
inc dword [rsp + 0x68]
mov r8d, dword [rsp + 0x6c]
test r14d, r14d
js 0x14001a241
mov dword [rbp + 0x3c4], esi
mov r9, r11
mov qword [rbp - 0x80], r11
mov r12d, r11d
mov qword [rbp + 0x100], r11
mov qword [rbp - 0x28], r11
mov r13, r11
mov dword [rbp - 0x70], r11d
mov qword [rbp - 0x60], r11
mov dword [rbp - 0x10], r11d
mov qword [rsp + 0x48], r11
mov qword [rbp], r11
mov dword [rbp + 0x64], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x308], rax
lea eax, [r8 + 8]
mov ecx, r10d
cmp eax, esi
mov edx, 0xc0000095
cmovae ecx, eax
sbb r14d, r14d
and r14d, edx
cmp eax, esi
jb 0x1400194ac
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x1400193db
mov r14d, edx
jmp 0x1400194ac
mov r14d, r12d
jmp 0x14001934f
mov dword [rbp + 0xc0], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001941f
mov r14d, 0xc0000017
mov r9, r13
jmp 0x1400194ac
mov eax, dword [rsp + 0x68]
lea rdx, [rsi + 4]
mov dword [rsi], eax
cmp rdx, rsi
jb 0x140019477
mov eax, dword [rsp + 0x6c]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x140019477
mov edx, dword [rbp + 0xc0]
mov r14d, r11d
mov rax, qword [rbp + 0x308]
mov qword [rdx + rsi - 8], rax
mov r8d, dword [rsp + 0x6c]
mov rdx, qword [rsp + 0x70]
call sub.msvcrt.dll_memcpy
mov r12d, dword [rbp + 0xc0]
xor r11d, r11d
mov r9, rsi
mov qword [rbp - 0x80], rsi
mov esi, r11d
jmp 0x140019480
mov r9, r13
mov r14d, 0xc0000095
test rsi, rsi
je 0x1400194ac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9, qword [rbp - 0x80]
xor r11d, r11d
or r14d, 0x10000000
jl 0x140019ff2
mov qword [rbp + 0x1b0], r11
mov r13, r11
mov qword [rbp - 0x68], r11
test r9, r9
jne 0x1400194d7
mov r14d, 0xc000000d
jmp 0x140019d38
mov esi, r12d
mov qword [rbp - 0x30], rsi
test r12d, r12d
je 0x140019c41
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8, [rsi + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x5b8], rax
mov r12, rax
test rax, rax
je 0x140019c41
mov r9, qword [rbp - 0x80]
mov al, r11b
mov byte [rsp + 0x34], al
mov ecx, r11d
test rsi, rsi
je 0x140019541
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x140019531
mov byte [rsp + 0x34], al
xor ecx, ecx
mov qword [rbp + 0x5c0], rbx
mov r10d, r11d
mov dword [rsp + 0x78], ecx
or r11d, 0xffffffff
mov dword [rsp + 0x40], ecx
mov rdx, rsi
mov r14, r12
and edx, 7
je 0x14001964d
xor r8d, r8d
mov dword [rsp + 0x78], ecx
mov dword [rsp + 0x40], ecx
mov r12d, ecx
mov r11d, r8d
test edx, edx
je 0x1400195bf
lea r10d, [rcx + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x1400195a1
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or ecx, r8d
mov dword [rsp + 0x40], ecx
jmp 0x1400195ae
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or r12d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x140019581
mov dword [rsp + 0x78], r12d
mov r10d, ecx
mov r11d, r12d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r12d, r12d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x140019617
lea rdi, [r14 + 1]
mov qword [rbp - 0x78], rdi
cmp r12d, r15d
jge 0x1400195f4
rol ecx, 8
mov edi, ecx
jmp 0x1400195fb
rol r8d, 8
mov edi, r8d
mov byte [r14], dil
inc r12d
mov rdi, qword [rbp - 0x78]
mov r14, rdi
cmp r12d, edx
jl 0x1400195e0
movabs rdi, 0x7f1137fab69605e
cmp edx, r15d
jbe 0x14001962e
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140019646
xor ecx, ecx
mov r11d, ecx
cmp edx, r15d
jae 0x140019646
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r12, qword [rbp + 0x5b8]
mov rcx, rsi
shr rcx, 3
mov qword [rbp - 0x78], rcx
test rcx, rcx
je 0x1400199bb
movzx eax, word [rbp + 0x5c6]
lea rdx, [r9 + 2]
mov ecx, dword [rbp + 0x5c4]
mov edi, dword [rsp + 0x78]
xor ecx, ebx
mov r12d, dword [rsp + 0x40]
mov r15d, ecx
movzx esi, word [rbp + 0x5c4]
mov dword [rbp + 0x10], eax
movzx eax, word [rbp + 0x5c2]
mov dword [rsp + 0x54], eax
lea rax, [r14 + 7]
mov r14, qword [rbp - 0x78]
movzx r13d, bx
movzx ecx, byte [rdx - 1]
movzx r9d, byte [rdx - 2]
movzx r8d, byte [rdx + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rdx]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 1]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 3]
or r8d, ecx
movzx ecx, byte [rdx + 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rdx + 5]
add rdx, 8
shl r8d, 8
or r8d, ecx
mov qword [rbp - 0x78], rdx
xor r11d, r8d
mov ecx, r11d
sub ecx, r13d
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, dword [rbp + 0x5c4]
mov edx, r10d
xor edx, dword [rbp + 0x5c4]
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [r11 + rbx]
ror edx, 9
imul edx, esi
sub edx, ecx
movzx ecx, word [rbp + 0x5c6]
xor r10d, edx
mov edx, r10d
xor edx, esi
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x5c4]
xor r11d, edx
mov edx, r11d
xor edx, ebx
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5c2]
mov edx, r10d
sub edx, r13d
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r11d
ror ecx, 0xf
xor ecx, esi
imul ecx, r13d
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, esi
xor r11d, ecx
mov ecx, r11d
sub ecx, r13d
sub ecx, dword [rbp + 0x5c4]
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
xor ecx, dword [rbp + 0x10]
imul ecx, dword [rsp + 0x54]
ror edx, 0xa
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, r13d
ror ecx, 3
rol edx, 6
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, r13d
xor r11d, ecx
movzx ecx, word [rbp + 0x5c6]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, r13d
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, esi
rol edx, 3
imul edx, r13d
xor edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, edx
mov edx, r10d
sub edx, esi
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
ror ecx, 0xb
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r10d
sub ecx, edx
sub ecx, ebx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
xor ecx, dword [rsp + 0x54]
ror edx, 7
imul ecx, r13d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5c6]
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x5c2]
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, esi
ror ecx, 4
add edx, ecx
movzx ecx, word [rbp + 0x5c6]
xor r10d, edx
mov edx, r10d
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, dword [rbp + 0x5c4]
rol edx, 8
imul edx, r13d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, edx
mov edx, dword [rbp + 0x5c4]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r11d, edx
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, esi
shr ecx, 8
xor edx, ecx
xor r10d, edx
mov rdx, qword [rbp - 0x78]
xor r11d, r10d
xor r10d, r12d
mov byte [rax - 4], r10b
xor r11d, r15d
xor r11d, edi
ror r10d, 8
mov byte [rax], r11b
mov r12d, r9d
mov byte [rax - 5], r10b
lea rax, [rax + 8]
ror r11d, 8
mov edi, r8d
mov byte [rax - 9], r11b
ror r10d, 8
mov byte [rax - 0xe], r10b
ror r11d, 8
mov byte [rax - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 0xf], r10b
mov byte [rax - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x1400196a1
mov al, byte [rsp + 0x34]
movabs rdi, 0x7f1137fab69605e
mov r13, qword [rbp - 0x68]
mov r15d, 4
mov rsi, qword [rbp - 0x30]
mov r12, qword [rbp + 0x5b8]
movzx ecx, al
lea r14, [rsi + 8]
mov qword [r12 + rsi], rcx
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x568], r14
lea rax, [0x14002c230]
mov qword [rbp + 0x578], 8
mov qword [rbp + 0x570], rax
lea rax, [0x14002c190]
mov qword [rbp + 0x588], 0xa0
mov qword [rbp + 0x580], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x140019a40
mov r14d, 0xc0000017
jmp 0x140019c30
mov r14d, r14d
mov dword [rax], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x140019a7c
mov r14d, 0xc0000017
jmp 0x140019b75
mov qword [rsi + 8], rax
mov r8, r14
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r14d, 0xa0
mov dword [rsi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov r14d, 8
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x140019a71
mov qword [rsi + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [r14 + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [rsi + 0x20], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x140019a71
mov qword [rsi + 0x28], rax
mov rax, qword [0x14002c230]
mov r13, rsi
mov qword [rcx], rax
mov r14d, r11d
mov esi, r11d
test rsi, rsi
je 0x140019c30
mov r12, qword [rsi + 8]
test r12, r12
je 0x140019bae
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x140019bde
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x140019c0d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x140019c47
mov qword [rbp + 0x100], r13
mov r13, r11
jmp 0x140019c47
mov r14d, 0xc0000001
mov rsi, qword [rbp + 0x1b0]
test rsi, rsi
je 0x140019c7d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x1b0], r11
test r13, r13
je 0x140019d38
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x140019cb6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x140019ce6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x140019d15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or r14d, 0x10000000
jl 0x140019fed
mov r12, qword [rbp + 0x100]
mov ecx, dword [r12]
mov r8d, dword [r12 + 0x20]
add ecx, 4
mov edx, dword [r12 + 0x10]
cmp ecx, r15d
jb 0x140019eb1
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x140019eb1
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x140019eb1
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x140019eb1
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x140019eb1
mov dword [rbp + 0x210], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r13d, r13d
mov rsi, rax
test rax, rax
jne 0x140019dda
mov r14d, 0xc0000017
mov r9d, 0xc0000095
jmp 0x140019ebd
mov eax, dword [r12]
lea r14, [rsi + 4]
mov dword [rsi], eax
cmp r14, rsi
jb 0x140019e7d
mov r8d, dword [r12]
mov rcx, r14
mov rdx, qword [r12 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12]
add rcx, r14
cmp rcx, r14
jb 0x140019e7d
mov eax, dword [r12 + 0x10]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x140019e7d
mov r8d, dword [r12 + 0x10]
mov rcx, r14
mov rdx, qword [r12 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12 + 0x10]
add rcx, r14
cmp rcx, r14
jb 0x140019e7d
mov eax, dword [r12 + 0x20]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x140019e7d
mov r8d, dword [r12 + 0x20]
mov rcx, r14
mov rdx, qword [r12 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r12 + 0x20]
add rax, r14
cmp rax, r14
jb 0x140019e7d
mov eax, dword [rbp + 0x210]
mov r14d, r13d
mov qword [rbp - 0x28], rsi
mov rsi, r13
mov dword [rbp - 0x70], eax
jmp 0x140019e83
mov r14d, 0xc0000095
test rsi, rsi
je 0x140019dcf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x140019dcf
mov r9d, 0xc0000095
xor r13d, r13d
mov r14d, r9d
or r14d, 0x10000000
jl 0x140019fea
mov dword [rbp + 0x20c], r13d
mov dword [rbp + 0x268], 0x38
mov eax, 0x40
mov dword [rbp + 0x26c], eax
mov dword [rbp + 0x270], eax
cmp qword [rsp + 0x70], r13
jne 0x140019efe
mov r14d, 0xc000000d
jmp 0x14001a253
cmp dword [rsp + 0x68], 1
jbe 0x140019ef3
mov rax, qword [rsp + 0x70]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001a250
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001a250
inc edx
cmp edx, 1
jb 0x140019f0d
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001a250
test r8d, r8d
mov dword [rbp + 0x20c], r8d
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x590], rax
cmp dword [rsp + 0x68], 2
jbe 0x140019ef3
mov rax, qword [rsp + 0x70]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001a250
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001a250
inc edx
cmp edx, 2
jb 0x140019f66
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001a250
test edx, edx
mov dword [rbp + 0x274], edx
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x598], rax
lea eax, [r8 + 0x48]
cmp eax, 0x48
jb 0x14001a250
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14001a250
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14001a250
mov dword [rbp + 0x278], eax
mov r14d, r13d
cmp eax, 0x400000
jbe 0x14001a24b
mov r14d, 0x8000ffff
xor r11d, r11d
mov r13, qword [rsp + 0x48]
mov rsi, qword [rbp - 0x80]
test rsi, rsi
je 0x14001a01e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r12, qword [rbp + 0x100]
test r12, r12
je 0x14001a0ed
mov rsi, qword [r12 + 8]
test rsi, rsi
je 0x14001a060
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 8], r11
mov rsi, qword [r12 + 0x18]
test rsi, rsi
je 0x14001a092
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 0x18], r11
mov rsi, qword [r12 + 0x28]
test rsi, rsi
je 0x14001a0c3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r12 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x100], r11
mov rsi, qword [rbp - 0x28]
test rsi, rsi
je 0x14001a119
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x60]
test rsi, rsi
je 0x14001a145
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x14001a200
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14001a17e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14001a1ae
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14001a1dd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp]
test rsi, rsi
je 0x14001a22c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x14001a241
cmp dword [rbp + 0x30], 1
jae 0x14001aef9
mov r14d, 0xc004d501
mov r13, qword [rsp + 0x38]
jmp 0x1400189ae
mov dword [rbp - 0x10], eax
jmp 0x14001a253
mov r14d, r9d
test r14d, r14d
js 0x140019fea
mov esi, dword [rbp - 0x10]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001a296
mov rsi, qword [rbp - 0x60]
mov r14d, 0xd0000017
jmp 0x14001a2a3
mov rsi, rax
mov qword [rbp - 0x60], rax
mov r14d, 0x10000000
test r14d, r14d
js 0x140019fed
mov rax, qword [rbp - 0x28]
test rax, rax
jne 0x14001a2c0
mov r14d, 0x80070057
jmp 0x140019fed
test rsi, rsi
je 0x14001a2b5
mov qword [rbp + 0x3e8], rax
lea r8, [rbp + 0x310]
mov eax, dword [rbp - 0x70]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x3f8], eax
mov ecx, 1
mov eax, dword [rbp - 0x10]
mov dword [rbp + 0x3fc], eax
mov qword [rbp + 0x3f0], rsi
mov dword [rbp + 0x400], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a33c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
test r14d, r14d
js 0x14001a337
mov r14d, 0x80004005
mov edx, dword [rbp - 0x10]
jmp 0x14001a38a
mov rcx, qword [rbp + 0x310]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001a30f
xor r9d, r9d
lea rdx, [rbp + 0x3e8]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp - 0x10]
mov r14d, eax
or r14d, 0x10000000
cmovge edx, dword [rbp + 0x3fc]
mov dword [rbp - 0x10], edx
xor r11d, r11d
cmp r14d, 0xd0000023
jne 0x14001a3a1
mov r14d, 0x8007007a
jmp 0x140019fed
test r14d, r14d
js 0x140019fed
mov qword [rbp - 0x68], r11
cmp edx, r15d
jae 0x14001a3be
mov r14d, 0xc000003e
jmp 0x14001a7a5
mov r13d, dword [rsi]
lea rcx, [rsi + 4]
cmp rcx, rsi
jb 0x14001a79f
lea eax, [rdx - 4]
cmp eax, r13d
jb 0x14001a3b3
lea r9, [rcx + r13]
mov qword [rbp - 0x30], r9
cmp r9, rcx
jb 0x14001a79f
lea r8d, [r13 + 4]
cmp r8d, r15d
jb 0x14001a79f
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001a3b3
mov r14d, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x14001a79f
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x14001a79f
mov eax, edx
sub eax, r9d
cmp eax, r14d
jb 0x14001a3b3
lea r10, [rcx + r14]
cmp r10, rcx
jb 0x14001a79f
lea r8d, [r14 + r9]
cmp r8d, r9d
jb 0x14001a79f
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001a3b3
mov r12d, dword [r10]
lea rax, [r10 + 4]
mov qword [rbp + 0x5b8], rax
cmp rax, r10
jb 0x14001a79f
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001a79f
mov eax, edx
sub eax, ecx
cmp eax, r12d
jb 0x14001a3b3
lea r8d, [r12 + rcx]
cmp r8d, ecx
jb 0x14001a79f
cmp edx, r8d
jne 0x14001a3b3
lea ecx, [r12 + r14]
mov eax, edx
add ecx, r13d
add rcx, 0xc
cmp rcx, rax
jne 0x14001a3b3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001a4e4
mov r14d, 0xc0000017
jmp 0x14001a6c5
mov rax, qword [rbp - 0x60]
add rax, 4
je 0x14001a543
mov dword [rsi], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
jne 0x14001a52a
mov r14d, 0xc0000017
jmp 0x14001a60a
mov qword [rsi + 8], rcx
mov rdx, qword [rbp - 0x60]
mov r8, r13
add rdx, 4
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001a54a
mov dword [rsi], r11d
mov qword [rsi + 8], r11
mov r13, qword [rbp - 0x30]
add r13, 4
je 0x14001a59a
mov dword [rsi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001a51f
mov qword [rsi + 0x18], rax
mov r8, r14
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001a5a2
mov dword [rsi + 0x10], r11d
mov qword [rsi + 0x18], r11
mov r14, qword [rbp + 0x5b8]
test r14, r14
je 0x14001a5f8
mov dword [rsi + 0x20], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001a51f
mov qword [rsi + 0x28], rax
mov r8, r12
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001a600
mov dword [rsi + 0x20], r11d
mov qword [rsi + 0x28], r11
mov qword [rbp - 0x68], rsi
mov r14d, r11d
mov rsi, r11
test rsi, rsi
je 0x14001a6c5
mov r12, qword [rsi + 8]
test r12, r12
je 0x14001a643
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x14001a673
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x14001a6a2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13, qword [rbp - 0x68]
test r14d, r14d
mov rsi, r11
cmovs rsi, qword [rbp - 0x68]
cmovs r13, r11
mov qword [rsp + 0x48], r13
test rsi, rsi
je 0x14001a7aa
mov r12, qword [rsi + 8]
test r12, r12
je 0x14001a716
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x14001a746
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x14001a775
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x48], r13
jmp 0x14001a7aa
mov r14d, 0xc0000095
mov r13, qword [rsp + 0x48]
or r14d, 0x10000000
jl 0x140019ff2
mov qword [rbp + 0x88], r11
mov rsi, r11
mov qword [rbp - 0x30], r11
mov r12, r11
test r13, r13
jne 0x14001a7d8
mov r14d, 0xd000000d
jmp 0x140019ff2
mov rax, qword [r13 + 8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14001a7cd
cmp dword [r13], r11d
je 0x14001a7cd
mov r14d, dword [r13]
mov dword [rsp + 0x54], r11d
test r14, r14
je 0x14001ad33
add r14, 0xfffffffffffffff8
mov qword [rbp + 0x5c0], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x38], rax
mov r13, rax
test rax, rax
je 0x14001ad2c
mov r9, qword [rbp - 0x68]
mov rdx, r14
mov qword [rbp + 0x5b8], rdi
mov al, r11b
mov byte [rsp + 0x34], al
mov r10, r13
mov esi, r11d
and edx, 7
je 0x14001a943
mov dword [rsp + 0x78], r11d
mov ecx, r11d
mov dword [rsp + 0x30], ecx
test edx, edx
je 0x14001a8b3
lea r10d, [r11 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x14001a893
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x30]
or ecx, r8d
mov dword [rsp + 0x30], ecx
jmp 0x14001a8a0
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x30]
or esi, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14001a873
mov dword [rsp + 0x78], esi
mov r10, r13
and dword [rsp + 0x50], 0
mov r11d, ecx
xor r11d, 0x92f65a5
xor esi, 0x699a899c
mov ecx, r11d
mov r8d, esi
test edx, edx
je 0x14001a915
mov ebx, dword [rsp + 0x50]
lea rdi, [r10 + 1]
mov qword [rbp - 0x78], rdi
cmp ebx, r15d
jge 0x14001a8ea
rol ecx, 8
mov edi, ecx
jmp 0x14001a8f1
rol r8d, 8
mov edi, r8d
mov byte [r10], dil
inc ebx
mov rdi, qword [rbp - 0x78]
mov r10, rdi
cmp ebx, edx
jl 0x14001a8d6
movabs rbx, 0xc81ecb17b1b54a58
movabs rdi, 0x7f1137fab69605e
cmp edx, r15d
jbe 0x14001a92a
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x14001a94d
xor ecx, ecx
mov esi, ecx
cmp edx, r15d
jae 0x14001a94d
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001a94d
or dword [rsp + 0x78], 0xffffffff
mov dword [rsp + 0x30], r11d
mov rcx, r14
shr rcx, 3
test rcx, rcx
je 0x14001ac96
mov r15d, dword [rbp + 0x5bc]
lea r14, [r10 + 7]
mov r12d, dword [rsp + 0x78]
lea rdx, [r9 + 2]
movzx eax, r15w
mov rbx, rcx
mov dword [rbp - 0x70], eax
mov eax, r15d
xor eax, edi
mov dword [rsp + 0x50], eax
movzx eax, word [rbp + 0x5ba]
mov r13d, dword [rsp + 0x50]
mov dword [rbp + 0x10], eax
movzx eax, di
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x30]
movzx ecx, byte [rdx - 1]
movzx r10d, byte [rdx - 2]
movzx r9d, byte [rdx + 2]
shl r10d, 8
or r10d, ecx
shl r9d, 8
movzx ecx, byte [rdx]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [rdx + 1]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [rdx + 3]
or r9d, ecx
xor r11d, r10d
movzx ecx, byte [rdx + 4]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 5]
add rdx, 8
shl r9d, 8
or r9d, ecx
mov qword [rbp - 0x78], rdx
xor esi, r9d
xor esi, r11d
xor esi, r15d
xor esi, edi
mov ecx, esi
mov r8d, esi
sub ecx, edi
rol esi, 0xa
rol ecx, 5
imul ecx, dword [rbp - 0x70]
add ecx, esi
mov esi, dword [rbp - 0x70]
xor r11d, ecx
movzx ecx, word [rbp + 0x5ba]
lea edx, [r15 + r11]
ror edx, 9
imul edx, ecx
mov ecx, r11d
rol ecx, 2
sub edx, ecx
xor r8d, edx
mov edx, r8d
mov ecx, r8d
sub edx, esi
shr ecx, 0xd
imul edx, dword [rsp + 0x40]
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, ecx
movzx ecx, word [rbp + 0x5be]
rol edx, 6
imul edx, ecx
mov ecx, r11d
rol ecx, 2
sub edx, ecx
mov ecx, r15d
xor r8d, edx
mov edx, r8d
xor edx, edi
sub ecx, edx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
ror edx, 6
xor ecx, esi
imul ecx, dword [rbp + 0x10]
xor edx, ecx
xor r8d, edx
mov ecx, r8d
rol ecx, 2
lea edx, [r8 + r15]
ror edx, 0xf
imul edx, dword [rsp + 0x40]
add edx, ecx
xor r11d, edx
mov edx, r11d
movzx ecx, word [rbp + 0x5be]
sub edx, edi
ror edx, 0xe
imul edx, ecx
mov ecx, r11d
rol ecx, 8
sub edx, ecx
xor r8d, edx
mov edx, r8d
mov ecx, r8d
xor edx, edi
ror ecx, 0xa
ror edx, 0xc
imul edx, esi
movzx esi, word [rbp + 0x5be]
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, esi
imul edx, ecx
mov ecx, r11d
shr ecx, 0xa
xor edx, ecx
xor r8d, edx
mov ecx, r8d
not ecx
ror ecx, 5
add ecx, dword [rsp + 0x40]
imul ecx, esi
xor r11d, ecx
movzx ecx, word [rbp + 0x5be]
mov esi, r11d
sub esi, ecx
xor esi, r8d
mov r8d, dword [rbp - 0x70]
xor esi, edi
mov edx, esi
xor edx, ecx
mov ecx, esi
rol edx, 2
imul edx, r8d
shr ecx, 2
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
sub edx, r15d
ror edx, 6
imul edx, ecx
mov ecx, r11d
rol ecx, 7
add edx, ecx
xor esi, edx
mov ecx, esi
mov edx, esi
xor ecx, r8d
ror edx, 9
imul ecx, dword [rsp + 0x40]
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, ecx
movzx ecx, word [rbp + 0x5be]
rol edx, 5
imul edx, ecx
mov ecx, r11d
rol ecx, 7
add edx, ecx
xor esi, edx
movzx edx, word [rbp + 0x5ba]
xor r11d, esi
xor r11d, r13d
mov ecx, r11d
ror ecx, 3
sub ecx, edx
imul ecx, r8d
xor esi, ecx
mov edx, esi
sub edx, r15d
ror edx, 1
mov ecx, esi
imul edx, dword [rsp + 0x40]
ror ecx, 6
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r11d, edx
lea edx, [r11 + rdi]
rol edx, 3
imul edx, ecx
mov ecx, r11d
rol ecx, 0xe
add edx, ecx
xor esi, edx
mov ecx, esi
ror ecx, 0xe
lea edx, [rsi + rdi]
rol edx, 0xf
imul edx, r8d
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, dword [rsp + 0x40]
imul edx, ecx
mov ecx, r11d
shr ecx, 3
xor edx, ecx
xor esi, edx
mov edx, r15d
xor edx, esi
mov ecx, esi
xor esi, r12d
rol edx, 4
imul edx, dword [rsp + 0x40]
mov r12d, r9d
rol ecx, 2
xor edx, ecx
xor edx, eax
mov eax, r10d
xor r11d, edx
mov rdx, qword [rbp - 0x78]
mov byte [r14 - 4], r11b
mov byte [r14], sil
lea r14, [r14 + 8]
ror r11d, 8
mov byte [r14 - 0xd], r11b
ror esi, 8
mov byte [r14 - 9], sil
ror r11d, 8
mov byte [r14 - 0xe], r11b
ror esi, 8
mov byte [r14 - 0xa], sil
ror r11d, 8
ror esi, 8
mov byte [r14 - 0xf], r11b
mov byte [r14 - 0xb], sil
ror esi, 8
ror r11d, 8
sub rbx, 1
jne 0x14001a99e
mov al, byte [rsp + 0x34]
movabs rbx, 0xc81ecb17b1b54a58
mov r12, qword [rbp - 0x30]
mov r15d, 4
mov r14, qword [rbp + 0x5c0]
mov r13, qword [rbp - 0x38]
xor r11d, r11d
mov ecx, r11d
test r14, r14
je 0x14001acad
xor al, byte [rcx + r13]
inc rcx
cmp rcx, r14
jb 0x14001aca1
movzx ecx, al
mov rax, qword [rbp - 0x68]
cmp rcx, qword [r14 + rax]
je 0x14001acc9
mov rsi, qword [rbp + 0x88]
mov r14d, 0xc004d501
jmp 0x14001acde
mov rsi, r13
mov qword [rbp + 0x88], r13
mov r12, r14
mov r13, r11
mov r14d, dword [rsp + 0x54]
test r13, r13
je 0x14001ad0d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp + 0x88]
xor r11d, r11d
test r14d, r14d
js 0x14001ad33
mov qword [rbp], rsi
mov r14d, 0x10000000
mov rsi, r11
mov qword [rbp + 0x88], r11
mov dword [rbp + 0x64], r12d
jmp 0x14001ad3d
mov rsi, qword [rbp + 0x88]
mov r12d, dword [rbp + 0x64]
mov r14d, 0xd0000001
test rsi, rsi
je 0x14001ad70
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, dword [rbp + 0x64]
xor r11d, r11d
mov qword [rbp + 0x88], r11
test r14d, r14d
js 0x140019fed
cmp r12d, r15d
jae 0x14001ad89
mov r14d, 0xc000003e
jmp 0x14001aeef
mov r8, qword [rbp]
mov r9d, dword [r8]
lea rcx, [r8 + 4]
mov dword [rsp + 0x50], r9d
cmp rcx, r8
jb 0x14001aee9
lea eax, [r12 - 4]
cmp eax, r15d
jb 0x14001ad7e
mov r14d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x14001aee9
lea eax, [r12 - 8]
cmp eax, r14d
jb 0x14001ad7e
lea eax, [r14 + 8]
cmp eax, 8
jb 0x14001aee9
mov ecx, r12d
lea rdx, [rsi + r14]
lea rax, [r8 + rcx]
cmp rax, rdx
jb 0x14001ad7e
mov rax, r8
sub rax, rsi
sub rax, r14
add rax, rcx
cmp rax, 8
jae 0x14001ad7e
mov dword [rsp + 0x54], r11d
mov r12, r11
mov r8d, r11d
test rsi, rsi
je 0x14001ae73
mov rcx, rsi
cmp rdx, rsi
jb 0x14001aee9
jbe 0x14001ae6e
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14001aee9
cmp rax, rdx
ja 0x14001ae5b
mov eax, dword [rcx]
add eax, 4
cmp eax, r15d
jb 0x14001ae66
mov dword [rbp + 0x27c], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x14001aee9
mov rcx, r9
cmp r9, rdx
ja 0x14001ae5b
inc r8d
mov dword [rsp + 0x54], r8d
cmp rcx, rdx
jae 0x14001ae71
jmp 0x14001ae13
mov r14d, 0xc000000d
jmp 0x14001aeef
mov r14d, 0xc0000095
jmp 0x14001aed6
cmp rcx, rdx
jne 0x14001ae5b
test r14d, r14d
je 0x14001aeae
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
jne 0x14001aeae
mov r14d, 0xc0000017
jmp 0x14001aed6
test rsi, rsi
je 0x14001aec4
mov r8, r14
mov rdx, rsi
mov rcx, r12
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov eax, dword [rsp + 0x54]
mov dword [rbp + 0x30], eax
mov qword [rbp + 0x38], r12
mov dword [rbp + 0x34], r14d
mov r14d, r11d
test r14d, r14d
js 0x14001aeef
mov eax, dword [rsp + 0x50]
cmp eax, dword [rbp + 0x30]
je 0x14001aeef
jmp 0x14001ad7e
mov r14d, 0xc0000095
bts r14d, 0x1c
jmp 0x140019fed
cmp qword [rbp + 0x38], r11
jne 0x14001af0d
mov r14d, 0xc000000d
mov r12d, 0xc0000095
jmp 0x14001af54
cmp dword [rbp + 0x30], r11d
jbe 0x14001aeff
mov rsi, qword [rbp + 0x38]
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x14001af4b
test ecx, ecx
mov dword [rbp + 0x280], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x5a0], rax
mov r14d, r11d
cmp ecx, r15d
jne 0x140019055
mov eax, dword [rax]
mov dword [rbp + 0x40], eax
jmp 0x14001af05
mov r12d, 0xc0000095
mov r14d, r12d
test r14d, r14d
js 0x14001a241
mov ecx, dword [rbp + 0x40]
mov eax, 0x8007007a
cmp ecx, 0xd0000023
cmove ecx, eax
mov dword [rbp + 0x40], ecx
cmp ecx, eax
je 0x14001af80
mov r14d, ecx
test ecx, ecx
js 0x14001a241
cmp dword [rbp + 0x30], 6
jne 0x14001a23b
cmp qword [rbp + 0x38], r11
jne 0x14001af98
mov r14d, 0xc000000d
jmp 0x14001aff7
mov rax, qword [rbp + 0x38]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001aff4
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001aff4
inc r8d
cmp r8d, 1
jb 0x14001af9f
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001aff4
test edx, edx
mov dword [rbp + 0x284], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x5a8], rax
mov r14d, r11d
cmp edx, 8
jne 0x140019055
mov rax, qword [rax]
mov qword [rbp + 0x320], rax
jmp 0x14001aff7
mov r14d, r12d
test r14d, r14d
js 0x14001a241
cmp qword [rbp + 0x38], r11
jne 0x14001b00e
mov r14d, 0xc000000d
jmp 0x14001b06b
mov rax, qword [rbp + 0x38]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001b068
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001b068
inc r8d
cmp r8d, 2
jb 0x14001b015
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001b068
test edx, edx
mov dword [rbp + 0x288], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x448], rax
mov r14d, r11d
cmp edx, r15d
jne 0x140019055
mov eax, dword [rax]
mov dword [rbp + 0x28c], eax
jmp 0x14001b06b
mov r14d, r12d
test r14d, r14d
js 0x14001a241
cmp qword [rbp + 0x38], r11
jne 0x14001b085
mov r14d, 0xc000000d
jmp 0x14001a241
mov rax, qword [rbp + 0x38]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x140019060
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x140019060
inc r8d
cmp r8d, 3
jb 0x14001b08c
mov r8d, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x140019060
test r8d, r8d
mov dword [rbp + 0x290], r8d
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x450], rax
mov rax, qword [rbp + 0x38]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001b131
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001b131
inc r8d
cmp r8d, r15d
jb 0x14001b0df
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001b131
test edx, edx
mov dword [rbp + 0x294], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x458], rax
mov r14d, r11d
cmp edx, r15d
jne 0x140019055
mov eax, dword [rax]
mov dword [rbp + 0x204], eax
jmp 0x14001b134
mov r14d, r12d
test r14d, r14d
js 0x14001a241
mov rax, qword [rbp + 0x38]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001b197
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001b197
inc r8d
cmp r8d, 5
jb 0x14001b144
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001b197
test edx, edx
mov dword [rbp + 0x298], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x460], rax
mov r14d, r11d
cmp edx, r15d
jne 0x140019055
mov eax, dword [rax]
mov dword [rbp + 0xbc], eax
jmp 0x14001b19a
mov r14d, r12d
test r14d, r14d
js 0x14001a241
mov rax, qword [rbp + 0x320]
cmp qword [rbp + 0x1c0], rax
jne 0x14001a23b
mov eax, dword [rbp + 0x204]
mov dword [rbp + 0x1c], eax
mov eax, dword [rbp + 0xbc]
mov dword [rbp + 0xc], eax
jmp 0x14001b1e1
or qword [rbp + 0x108], 0xffffffffffffffff
mov r14d, 0xc0000095
jmp 0x14001a241
mov ecx, dword [rbp + 0x40]
mov r13, qword [rsp + 0x38]
test r14d, r14d
js 0x1400189ae
test ecx, ecx
cmovne r14d, ecx
jmp 0x1400189ae
mov r8, qword [rbp - 0x50]
mov ecx, r11d
test edx, edx
je 0x14001b232
mov eax, dword [r8]
add eax, 4
cmp eax, r15d
jb 0x14001cfbb
mov dword [rbp + 0x200], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x14001cfbb
inc ecx
mov r8, r9
cmp ecx, edx
jb 0x14001b205
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x14001cfbb
mov ecx, dword [rbp - 0x54]
lea rax, [r8 + 0xa4]
add rcx, qword [rbp - 0x50]
cmp rax, rcx
ja 0x14001cfbb
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [rsi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [rsi + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [rsi + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
inc dword [rbp - 0x58]
mov ecx, dword [rbp - 0x54]
cmp qword [rbp - 0x50], r11
jne 0x14001b2ea
mov dword [rbp + 0x1d0], 0xc
lea edx, [rcx + 0xc]
cmp edx, ecx
jb 0x14001cfbb
mov rax, qword [rbp + 0x240]
inc dword [rbp - 0x58]
mov qword [rbp + 0x260], rax
jmp 0x14001b36a
mov r8d, r11d
mov rdx, qword [rbp - 0x50]
cmp dword [rbp - 0x58], r11d
jbe 0x14001b326
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x14001cfbb
mov dword [rbp + 0x1d0], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x14001cfbb
inc r8d
mov rdx, r9
cmp r8d, dword [rbp - 0x58]
jb 0x14001b2f7
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x14001cfbb
add rcx, qword [rbp - 0x50]
lea rax, [rdx + 0xc]
cmp rax, rcx
ja 0x14001cfbb
mov dword [rdx], 8
mov rax, qword [r14]
mov qword [r8], rax
inc dword [rbp - 0x58]
mov rax, qword [rbp + 0x240]
mov qword [rbp + 0x260], rax
cmp qword [rbp - 0x50], r11
jne 0x14001b384
mov edx, dword [rbp - 0x54]
mov dword [rbp + 0x1b8], 0xc
lea ecx, [rdx + 0xc]
cmp ecx, edx
jb 0x14001cfbb
mov dword [rbp - 0x54], ecx
jmp 0x14001b3f2
mov ecx, r11d
mov rdx, qword [rbp - 0x50]
cmp dword [rbp - 0x58], r11d
jbe 0x14001b3be
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x14001cfbb
mov dword [rbp + 0x1b8], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x14001cfbb
inc ecx
mov rdx, r8
cmp ecx, dword [rbp - 0x58]
jb 0x14001b391
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x14001cfbb
mov ecx, dword [rbp - 0x54]
lea rax, [rdx + 0xc]
add rcx, qword [rbp - 0x50]
cmp rax, rcx
ja 0x14001cfbb
mov dword [rdx], 8
mov rax, qword [rbp + 0x260]
mov qword [r8], rax
mov ecx, dword [rbp - 0x54]
inc dword [rbp - 0x58]
mov dword [rbp + 0x2a0], 0xc
mov r8, r11
mov qword [rbp - 0x80], r11
mov r12d, r11d
mov qword [rbp + 0x110], r11
mov qword [rbp - 0x28], r11
mov r13, r11
mov dword [rsp + 0x54], r11d
mov qword [rbp - 0x60], r11
mov dword [rbp - 0xc], r11d
mov qword [rsp + 0x38], r11
mov qword [rbp - 0x30], r11
mov dword [rbp + 0x68], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x338], rax
lea eax, [rcx + 8]
mov edx, 0xc0000095
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb esi, esi
and esi, edx
cmp eax, 8
jb 0x14001b53f
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14001b473
mov esi, edx
jmp 0x14001b53f
mov dword [rbp + 0xb8], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x14001b4b6
mov esi, 0xc0000017
mov r8d, r11d
jmp 0x14001b53f
mov eax, dword [rbp - 0x58]
lea rdx, [r14 + 4]
mov dword [r14], eax
cmp rdx, r14
jb 0x14001b50b
mov eax, dword [rbp - 0x54]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14001b50b
mov edx, dword [rbp + 0xb8]
mov esi, r11d
mov rax, qword [rbp + 0x338]
mov qword [rdx + r14 - 8], rax
mov r8d, dword [rbp - 0x54]
mov rdx, qword [rbp - 0x50]
call sub.msvcrt.dll_memcpy
mov r12d, dword [rbp + 0xb8]
xor r11d, r11d
mov r8, r14
mov qword [rbp - 0x80], r14
mov r14d, r11d
jmp 0x14001b513
mov r8, r11
mov esi, 0xc0000095
test r14, r14
je 0x14001b53f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r8, qword [rbp - 0x80]
xor r11d, r11d
or esi, 0x10000000
jl 0x14001ccca
mov qword [rbp + 0x1c8], r11
mov r13, r11
mov qword [rbp - 0x78], r11
test r8, r8
jne 0x14001b568
mov esi, 0xc000000d
jmp 0x14001bdab
mov esi, r12d
mov qword [rbp - 0x68], rsi
test r12d, r12d
je 0x14001bcb5
lea r14, [rsi + 8]
mov qword [rbp - 0x20], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x5b8], rax
mov r12, rax
test rax, rax
je 0x14001bcb5
mov r9, qword [rbp - 0x80]
mov al, r11b
mov byte [rsp + 0x34], al
mov ecx, r11d
test rsi, rsi
je 0x14001b5d9
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x14001b5c9
mov byte [rsp + 0x34], al
xor ecx, ecx
mov qword [rbp + 0x5c0], rbx
mov r10d, r11d
mov dword [rbp - 0x70], ecx
or r11d, 0xffffffff
mov dword [rsp + 0x40], ecx
mov rdx, rsi
mov r14, r12
and edx, 7
je 0x14001b6e2
xor r8d, r8d
mov dword [rbp - 0x70], ecx
mov dword [rsp + 0x40], ecx
mov r12d, ecx
mov r11d, r8d
test edx, edx
je 0x14001b654
lea r10d, [rcx + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x14001b637
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or ecx, r8d
mov dword [rsp + 0x40], ecx
jmp 0x14001b644
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or r12d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14001b617
mov dword [rbp - 0x70], r12d
mov r10d, ecx
mov r11d, r12d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r12d, r12d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14001b6ac
lea rdi, [r14 + 1]
mov qword [rbp - 0x38], rdi
cmp r12d, r15d
jge 0x14001b689
rol ecx, 8
mov edi, ecx
jmp 0x14001b690
rol r8d, 8
mov edi, r8d
mov byte [r14], dil
inc r12d
mov rdi, qword [rbp - 0x38]
mov r14, rdi
cmp r12d, edx
jl 0x14001b675
movabs rdi, 0x7f1137fab69605e
cmp edx, r15d
jbe 0x14001b6c3
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001b6db
xor ecx, ecx
mov r11d, ecx
cmp edx, r15d
jae 0x14001b6db
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r12, qword [rbp + 0x5b8]
mov rcx, rsi
shr rcx, 3
test rcx, rcx
je 0x14001ba39
movzx eax, word [rbp + 0x5c2]
lea rsi, [r14 + 7]
mov edi, dword [rbp - 0x70]
mov r14, rcx
mov r12d, dword [rsp + 0x40]
movzx r13d, word [rbp + 0x5c4]
mov dword [rsp + 0x50], eax
lea rax, [r9 + 2]
movzx r15d, bx
movzx ecx, byte [rax - 1]
movzx r9d, byte [rax - 2]
movzx r8d, byte [rax + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rax]
lea rax, [rax + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rax - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rax - 5]
or r8d, ecx
movzx ecx, byte [rax - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rax - 3]
shl r8d, 8
or r8d, ecx
xor r11d, r8d
mov ecx, r11d
sub ecx, r15d
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, dword [rbp + 0x5c4]
mov edx, r10d
xor edx, dword [rbp + 0x5c4]
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [r11 + rbx]
ror edx, 9
imul edx, r13d
sub edx, ecx
movzx ecx, word [rbp + 0x5c6]
xor r10d, edx
mov edx, r13d
xor edx, r10d
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x5c4]
xor r11d, edx
mov edx, r11d
xor edx, ebx
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5c2]
mov edx, r10d
sub edx, r15d
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r11d
ror ecx, 0xf
xor ecx, r13d
imul ecx, r15d
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, r13d
xor r11d, ecx
mov ecx, r11d
sub ecx, r15d
sub ecx, dword [rbp + 0x5c4]
xor r10d, ecx
movzx ecx, word [rbp + 0x5c6]
mov edx, r10d
ror edx, 0xa
xor ecx, r10d
imul ecx, dword [rsp + 0x50]
xor edx, ecx
xor r11d, edx
mov edx, r15d
xor edx, r11d
mov ecx, r11d
rol edx, 6
imul edx, r13d
ror ecx, 3
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, r15d
xor r11d, ecx
xor edx, r11d
mov ecx, r11d
imul edx, r15d
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, r13d
rol edx, 3
imul edx, r15d
xor edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, edx
mov edx, r10d
sub edx, r13d
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
imul edx, r13d
ror ecx, 0xb
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5c6]
mov ecx, r10d
sub ecx, edx
sub ecx, ebx
xor r11d, ecx
movzx ecx, word [rbp + 0x5c2]
xor ecx, r11d
mov edx, r11d
ror edx, 7
imul ecx, r15d
sub ecx, edx
movzx edx, word [rbp + 0x5c6]
xor r10d, ecx
movzx ecx, word [rbp + 0x5c2]
xor edx, r10d
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, r13d
ror ecx, 4
add edx, ecx
xor r10d, edx
mov edx, r10d
movzx ecx, word [rbp + 0x5c6]
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, dword [rbp + 0x5c4]
rol edx, 8
imul edx, r15d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r10d, edx
mov edx, dword [rbp + 0x5c4]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
movzx ecx, word [rbp + 0x5c2]
xor r11d, edx
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, r13d
shr ecx, 8
xor edx, ecx
xor r10d, edx
xor r11d, r10d
xor r10d, r12d
xor r11d, dword [rbp + 0x5c4]
mov r12d, r9d
mov byte [rsi - 4], r10b
xor r11d, ebx
xor r11d, edi
ror r10d, 8
mov byte [rsi], r11b
mov edi, r8d
mov byte [rsi - 5], r10b
lea rsi, [rsi + 8]
ror r11d, 8
mov byte [rsi - 9], r11b
ror r10d, 8
mov byte [rsi - 0xe], r10b
ror r11d, 8
mov byte [rsi - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rsi - 0xf], r10b
mov byte [rsi - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x14001b71c
mov al, byte [rsp + 0x34]
lea r15d, [r14 + 4]
mov r13, qword [rbp - 0x78]
movabs rdi, 0x7f1137fab69605e
mov rsi, qword [rbp - 0x68]
mov r12, qword [rbp + 0x5b8]
movzx ecx, al
mov qword [r12 + rsi], rcx
mov rsi, qword [rbp - 0x20]
mov qword [rbp + 0x468], rsi
mov qword [rbp + 0x1c8], r12
lea rax, [0x14002c230]
mov qword [rbp + 0x478], 8
mov qword [rbp + 0x470], rax
lea rax, [0x14002c190]
mov qword [rbp + 0x488], 0xa0
mov qword [rbp + 0x480], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x14001babd
mov esi, 0xc0000017
jmp 0x14001bca5
mov esi, esi
mov dword [rax], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001baf6
mov esi, 0xc0000017
jmp 0x14001bbea
mov qword [r14 + 8], rax
mov r8, rsi
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov esi, 0xa0
mov dword [r14 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x14001baec
mov qword [r14 + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [rsi + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [r14 + 0x20], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x14001baec
mov qword [r14 + 0x28], rax
mov rax, qword [0x14002c230]
mov r13, r14
mov qword [rcx], rax
mov esi, r11d
mov r14d, r11d
test r14, r14
je 0x14001bca5
mov r12, qword [r14 + 8]
test r12, r12
je 0x14001bc23
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r12, qword [r14 + 0x18]
test r12, r12
je 0x14001bc53
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r12, qword [r14 + 0x28]
test r12, r12
je 0x14001bc82
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x14001bcba
mov qword [rbp + 0x110], r13
mov r13, r11
jmp 0x14001bcba
mov esi, 0xc0000001
mov r14, qword [rbp + 0x1c8]
test r14, r14
je 0x14001bcf0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x1c8], r11
test r13, r13
je 0x14001bdab
mov r14, qword [r13 + 8]
test r14, r14
je 0x14001bd29
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov r14, qword [r13 + 0x18]
test r14, r14
je 0x14001bd59
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov r14, qword [r13 + 0x28]
test r14, r14
je 0x14001bd88
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or esi, 0x10000000
jl 0x14001ccc5
mov r14, qword [rbp + 0x110]
mov ecx, dword [r14]
mov r8d, dword [r14 + 0x20]
add ecx, 4
mov edx, dword [r14 + 0x10]
cmp ecx, r15d
jb 0x14001bf16
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14001bf16
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x14001bf16
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14001bf16
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x14001bf16
mov dword [rbp + 0x1a0], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r13d, r13d
mov r12, rax
test rax, rax
jne 0x14001be48
mov esi, 0xc0000017
mov r9d, 0xc0000095
jmp 0x14001bf22
mov eax, dword [r14]
lea rsi, [r12 + 4]
mov dword [r12], eax
cmp rsi, r12
jb 0x14001bee3
mov r8d, dword [r14]
mov rcx, rsi
mov rdx, qword [r14 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14]
add rcx, rsi
cmp rcx, rsi
jb 0x14001bee3
mov eax, dword [r14 + 0x10]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x14001bee3
mov r8d, dword [r14 + 0x10]
mov rcx, rsi
mov rdx, qword [r14 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r14 + 0x10]
add rcx, rsi
cmp rcx, rsi
jb 0x14001bee3
mov eax, dword [r14 + 0x20]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x14001bee3
mov r8d, dword [r14 + 0x20]
mov rcx, rsi
mov rdx, qword [r14 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r14 + 0x20]
add rax, rsi
cmp rax, rsi
jb 0x14001bee3
mov eax, dword [rbp + 0x1a0]
mov esi, r13d
mov qword [rbp - 0x28], r12
mov r12, r13
mov dword [rsp + 0x54], eax
jmp 0x14001bee8
mov esi, 0xc0000095
test r12, r12
je 0x14001be3d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x14001be3d
mov r9d, 0xc0000095
xor r13d, r13d
mov esi, r9d
or esi, 0x10000000
jl 0x14001c02b
mov dword [rbp + 0x18c], r13d
mov dword [rbp + 0x3bc], 0x1c
mov eax, 0x28
mov dword [rbp + 0x2a4], eax
mov dword [rbp + 0x2a8], eax
cmp qword [rbp - 0x50], r13
jne 0x14001bf60
mov esi, 0xc000000d
jmp 0x14001c03b
cmp dword [rbp - 0x58], 1
jbe 0x14001bf56
mov rax, qword [rbp - 0x50]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001c038
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001c038
inc edx
cmp edx, 1
jb 0x14001bf6d
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001c038
test r8d, r8d
mov dword [rbp + 0x18c], r8d
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x490], rax
cmp dword [rbp - 0x58], 2
jbe 0x14001bf56
mov rax, qword [rbp - 0x50]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001c038
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001c038
inc edx
cmp edx, 2
jb 0x14001bfc4
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001c038
test edx, edx
mov dword [rbp + 0x2ac], edx
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x498], rax
lea eax, [r8 + 0x30]
cmp eax, 0x30
jb 0x14001c038
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14001c038
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14001c038
mov dword [rbp + 0x2b0], eax
mov esi, r13d
cmp eax, 0x400000
jbe 0x14001c033
mov esi, 0x8000ffff
xor r11d, r11d
jmp 0x14001ccc5
mov dword [rbp - 0xc], eax
jmp 0x14001c03b
mov esi, r9d
test esi, esi
js 0x14001c02b
mov esi, dword [rbp - 0xc]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001c077
mov esi, 0xd0000017
mov r14d, r11d
jmp 0x14001c083
mov r14, rax
mov qword [rbp - 0x60], rax
mov esi, 0x10000000
test esi, esi
js 0x14001c095
mov rax, qword [rbp - 0x28]
test rax, rax
jne 0x14001c09d
mov esi, 0x80070057
mov r13, r11
jmp 0x14001ccca
test r14, r14
je 0x14001c090
mov qword [rbp + 0x408], rax
lea r8, [rbp + 0x340]
mov eax, dword [rsp + 0x54]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x418], eax
mov ecx, 1
mov eax, dword [rbp - 0xc]
mov dword [rbp + 0x41c], eax
mov qword [rbp + 0x410], r14
mov dword [rbp + 0x420], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
xor r12d, r12d
test eax, eax
jne 0x14001c118
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x14001c113
mov esi, 0x80004005
mov edx, dword [rbp - 0xc]
jmp 0x14001c164
mov rcx, qword [rbp + 0x340]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001c0f0
xor r9d, r9d
lea rdx, [rbp + 0x408]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp - 0xc]
mov esi, eax
or esi, 0x10000000
cmovge edx, dword [rbp + 0x41c]
mov dword [rbp - 0xc], edx
xor r11d, r11d
cmp esi, 0xd0000023
jne 0x14001c17c
mov esi, 0x8007007a
mov r13, r12
jmp 0x14001ccca
test esi, esi
js 0x14001c095
mov qword [rbp - 0x68], r11
cmp edx, r15d
jae 0x14001c197
mov esi, 0xc000003e
jmp 0x14001c573
mov r13d, dword [r14]
lea rcx, [r14 + 4]
cmp rcx, r14
jb 0x14001c56e
lea eax, [rdx - 4]
cmp eax, r13d
jb 0x14001c18d
lea r9, [rcx + r13]
mov qword [rbp - 0x78], r9
cmp r9, rcx
jb 0x14001c56e
lea r8d, [r13 + 4]
cmp r8d, r15d
jb 0x14001c56e
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001c18d
mov esi, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x14001c56e
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x14001c56e
mov eax, edx
sub eax, r9d
cmp eax, esi
jb 0x14001c18d
lea r10, [rcx + rsi]
cmp r10, rcx
jb 0x14001c56e
lea r8d, [rsi + r9]
cmp r8d, r9d
jb 0x14001c56e
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001c18d
mov r12d, dword [r10]
lea rax, [r10 + 4]
mov qword [rbp - 0x20], rax
cmp rax, r10
jb 0x14001c56e
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001c56e
mov eax, edx
sub eax, ecx
cmp eax, r12d
jb 0x14001c18d
lea r8d, [r12 + rcx]
cmp r8d, ecx
jb 0x14001c56e
cmp edx, r8d
jne 0x14001c18d
lea ecx, [r12 + rsi]
mov eax, edx
add ecx, r13d
add rcx, 0xc
cmp rcx, rax
jne 0x14001c18d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r14, rax
test rax, rax
jne 0x14001c2b8
mov esi, 0xc0000017
jmp 0x14001c495
mov rax, qword [rbp - 0x60]
add rax, 4
je 0x14001c316
mov dword [r14], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
jne 0x14001c2fd
mov esi, 0xc0000017
jmp 0x14001c3da
mov qword [r14 + 8], rcx
mov rdx, qword [rbp - 0x60]
mov r8, r13
add rdx, 4
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001c31d
mov dword [r14], r11d
mov qword [r14 + 8], r11
mov r13, qword [rbp - 0x78]
add r13, 4
je 0x14001c36d
mov dword [r14 + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001c2f3
mov qword [r14 + 0x18], rax
mov r8, rsi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001c375
mov dword [r14 + 0x10], r11d
mov qword [r14 + 0x18], r11
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x14001c3c8
mov dword [r14 + 0x20], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001c2f3
mov qword [r14 + 0x28], rax
mov r8, r12
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001c3d0
mov dword [r14 + 0x20], r11d
mov qword [r14 + 0x28], r11
mov qword [rbp - 0x68], r14
mov esi, r11d
mov r14, r11
test r14, r14
je 0x14001c495
mov r12, qword [r14 + 8]
test r12, r12
je 0x14001c413
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r12, qword [r14 + 0x18]
test r12, r12
je 0x14001c443
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r12, qword [r14 + 0x28]
test r12, r12
je 0x14001c472
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13, qword [rbp - 0x68]
test esi, esi
mov r14, r11
cmovs r14, qword [rbp - 0x68]
cmovs r13, r11
mov qword [rsp + 0x38], r13
test r14, r14
je 0x14001c576
mov r12, qword [r14 + 8]
test r12, r12
je 0x14001c4e5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r12, qword [r14 + 0x18]
test r12, r12
je 0x14001c515
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r12, qword [r14 + 0x28]
test r12, r12
je 0x14001c544
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x38], r13
jmp 0x14001c576
mov esi, 0xc0000095
mov r13, r11
or esi, 0x10000000
jl 0x14001ccca
mov qword [rbp + 0x80], r11
mov r14, r11
mov qword [rbp - 0x78], r11
mov r12, r11
test r13, r13
jne 0x14001c5a2
mov esi, 0xd000000d
jmp 0x14001ccca
mov rax, qword [r13 + 8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14001c598
cmp dword [r13], r11d
je 0x14001c598
mov esi, dword [r13]
mov dword [rsp + 0x54], r11d
test rsi, rsi
je 0x14001cb04
add rsi, 0xfffffffffffffff8
mov qword [rbp - 0x20], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x5c0], rax
mov r13, rax
test rax, rax
je 0x14001cafd
mov r9, qword [rbp - 0x68]
mov rdx, rsi
mov qword [rbp + 0x5b8], rdi
mov al, r11b
mov byte [rsp + 0x34], al
mov rcx, r13
mov qword [rbp], rcx
and edx, 7
je 0x14001c724
mov dword [rbp - 0x70], r11d
mov ecx, r11d
mov dword [rsp + 0x40], ecx
mov r14d, r11d
test edx, edx
je 0x14001c67d
lea r10d, [r11 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x14001c660
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or ecx, r8d
mov dword [rsp + 0x40], ecx
jmp 0x14001c66d
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or r14d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14001c640
mov dword [rbp - 0x70], r14d
mov r10d, ecx
mov r11d, r14d
xor r10d, 0x92f65a5
xor r11d, 0x699a899c
xor r14d, r14d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14001c6eb
mov rbx, r13
lea rdi, [rbx + 1]
mov qword [rbp - 0x38], rdi
cmp r14d, r15d
jge 0x14001c6b5
rol ecx, 8
mov edi, ecx
jmp 0x14001c6bc
rol r8d, 8
mov edi, r8d
mov byte [rbx], dil
inc r14d
mov rdi, qword [rbp - 0x38]
mov rbx, rdi
cmp r14d, edx
jl 0x14001c6a1
mov rcx, rdi
movabs rbx, 0xc81ecb17b1b54a58
mov qword [rbp], rcx
movabs rdi, 0x7f1137fab69605e
jmp 0x14001c6ee
mov rcx, r13
cmp edx, r15d
jbe 0x14001c705
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001c71e
xor r8d, r8d
mov r11d, r8d
cmp edx, r15d
jae 0x14001c730
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp]
jmp 0x14001c730
or dword [rbp - 0x70], 0xffffffff
xor r10d, r10d
mov dword [rsp + 0x40], r11d
mov r14, rsi
shr r14, 3
test r14, r14
je 0x14001ca6b
mov eax, dword [rbp + 0x5bc]
lea r15, [rcx + 7]
mov ebx, dword [rbp - 0x70]
lea r13, [r9 + 2]
mov r12d, dword [rsp + 0x40]
movzx edx, ax
mov dword [rsp + 0x50], edx
movzx edx, word [rbp + 0x5ba]
mov esi, dword [rsp + 0x50]
mov dword [rbp + 0x10], edx
movzx edx, di
mov dword [rsp + 0x30], edx
movzx ecx, byte [r13 - 1]
movzx r9d, byte [r13 - 2]
movzx r8d, byte [r13 + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [r13]
lea r13, [r13 + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r13 - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r13 - 5]
or r8d, ecx
xor r10d, r9d
movzx ecx, byte [r13 - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r13 - 3]
shl r8d, 8
or r8d, ecx
mov ecx, eax
xor ecx, edi
xor r11d, r8d
xor r11d, ecx
xor r11d, r10d
mov edx, r11d
mov ecx, r11d
sub edx, edi
rol ecx, 0xa
rol edx, 5
imul edx, esi
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
lea edx, [r10 + rax]
ror edx, 9
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
sub edx, esi
shr ecx, 0xd
imul edx, dword [rsp + 0x30]
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
movzx edx, word [rbp + 0x5ba]
xor edx, r10d
rol edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
mov ecx, eax
xor r11d, edx
mov edx, edi
xor edx, r11d
sub ecx, edx
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
ror edx, 6
xor ecx, esi
imul ecx, dword [rbp + 0x10]
xor edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 2
lea edx, [r11 + rax]
ror edx, 0xf
imul edx, dword [rsp + 0x30]
add edx, ecx
xor r10d, edx
mov edx, r10d
sub edx, edi
ror edx, 0xe
movzx ecx, word [rbp + 0x5be]
imul edx, ecx
mov ecx, r10d
rol ecx, 8
sub edx, ecx
xor r11d, edx
mov edx, edi
xor edx, r11d
mov ecx, r11d
ror ecx, 0xa
ror edx, 0xc
imul edx, esi
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
movzx edx, word [rbp + 0x5be]
xor edx, r10d
imul edx, ecx
mov ecx, r10d
shr ecx, 0xa
xor edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r11d
not ecx
ror ecx, 5
add ecx, dword [rsp + 0x30]
imul ecx, edx
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
xor ecx, edi
xor r11d, ecx
xor edx, r11d
mov ecx, r11d
rol edx, 2
imul edx, esi
shr ecx, 2
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
sub edx, eax
ror edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
mov edx, r11d
xor ecx, esi
ror edx, 9
imul ecx, dword [rsp + 0x30]
add edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
movzx edx, word [rbp + 0x5ba]
xor edx, r10d
rol edx, 5
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
mov ecx, edi
xor r11d, edx
movzx edx, word [rbp + 0x5ba]
xor ecx, r11d
xor r10d, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 3
sub ecx, edx
imul ecx, esi
xor r11d, ecx
mov edx, r11d
mov ecx, r11d
sub edx, eax
ror edx, 1
imul edx, dword [rsp + 0x30]
ror ecx, 6
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
lea edx, [rdi + r10]
rol edx, 3
imul edx, ecx
mov ecx, r10d
rol ecx, 0xe
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xe
lea edx, [rdi + r11]
rol edx, 0xf
imul edx, esi
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, dword [rsp + 0x30]
xor edx, r10d
imul edx, ecx
mov ecx, r10d
shr ecx, 3
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor r11d, ebx
rol ecx, 2
xor edx, eax
mov ebx, r8d
rol edx, 4
imul edx, dword [rsp + 0x30]
xor edx, ecx
xor edx, r12d
mov r12d, r9d
xor r10d, edx
mov byte [r15 - 4], r10b
mov byte [r15], r11b
lea r15, [r15 + 8]
ror r10d, 8
mov byte [r15 - 0xd], r10b
ror r11d, 8
mov byte [r15 - 9], r11b
ror r10d, 8
mov byte [r15 - 0xe], r10b
ror r11d, 8
mov byte [r15 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r15 - 0xf], r10b
mov byte [r15 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x14001c772
mov al, byte [rsp + 0x34]
lea r15d, [r14 + 4]
mov r12, qword [rbp - 0x78]
movabs rbx, 0xc81ecb17b1b54a58
mov rsi, qword [rbp - 0x20]
mov r13, qword [rbp + 0x5c0]
xor r11d, r11d
mov ecx, r11d
test rsi, rsi
je 0x14001ca82
xor al, byte [rcx + r13]
inc rcx
cmp rcx, rsi
jb 0x14001ca76
movzx ecx, al
mov rax, qword [rbp - 0x68]
cmp rcx, qword [rsi + rax]
je 0x14001ca9d
mov r14, qword [rbp + 0x80]
mov esi, 0xc004d501
jmp 0x14001cab1
mov r14, r13
mov qword [rbp + 0x80], r13
mov r12, rsi
mov r13, r11
mov esi, dword [rsp + 0x54]
test r13, r13
je 0x14001cae0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x80]
xor r11d, r11d
test esi, esi
js 0x14001cb04
mov qword [rbp - 0x30], r14
mov esi, 0x10000000
mov r14, r11
mov qword [rbp + 0x80], r11
mov dword [rbp + 0x68], r12d
jmp 0x14001cb0d
mov r14, qword [rbp + 0x80]
mov r12d, dword [rbp + 0x68]
mov esi, 0xd0000001
test r14, r14
je 0x14001cb40
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, dword [rbp + 0x68]
xor r11d, r11d
mov qword [rbp + 0x80], r11
test esi, esi
js 0x14001ccc5
cmp r12d, r15d
jae 0x14001cb57
mov esi, 0xc000003e
jmp 0x14001ccc1
mov r8, qword [rbp - 0x30]
mov r9d, dword [r8]
lea rcx, [r8 + 4]
mov dword [rsp + 0x50], r9d
cmp rcx, r8
jb 0x14001ccbc
lea eax, [r12 - 4]
cmp eax, r15d
jb 0x14001cb4d
mov r14d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x14001ccbc
lea eax, [r12 - 8]
cmp eax, r14d
jb 0x14001cb4d
lea eax, [r14 + 8]
cmp eax, 8
jb 0x14001ccbc
mov ecx, r12d
lea rdx, [rsi + r14]
lea rax, [rcx + r8]
cmp rax, rdx
jb 0x14001cb4d
sub rcx, r14
sub rcx, rsi
add rcx, r8
cmp rcx, 8
jae 0x14001cb4d
mov dword [rsp + 0x54], r11d
mov r12, r11
mov r8d, r11d
test rsi, rsi
je 0x14001cc3c
mov rcx, rsi
cmp rdx, rsi
jb 0x14001ccbc
jbe 0x14001cc37
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14001ccbc
cmp rax, rdx
ja 0x14001cc26
mov eax, dword [rcx]
add eax, 4
cmp eax, r15d
jb 0x14001cc30
mov dword [rbp + 0x2b4], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x14001ccbc
mov rcx, r9
cmp r9, rdx
ja 0x14001cc26
inc r8d
mov dword [rsp + 0x54], r8d
cmp rcx, rdx
jae 0x14001cc3a
jmp 0x14001cbde
mov esi, 0xc000000d
jmp 0x14001ccc1
mov esi, 0xc0000095
jmp 0x14001cca7
cmp rcx, rdx
jne 0x14001cc26
test r14d, r14d
je 0x14001cc76
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
jne 0x14001cc76
mov esi, 0xc0000017
jmp 0x14001cca7
test rsi, rsi
je 0x14001cc8c
mov r8, r14
mov rdx, rsi
mov rcx, r12
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov eax, dword [rsp + 0x54]
mov dword [rbp + 0xd8], eax
mov qword [rbp + 0xe0], r12
mov dword [rbp + 0xdc], r14d
mov esi, r11d
test esi, esi
js 0x14001ccc1
mov eax, dword [rsp + 0x50]
cmp eax, dword [rbp + 0xd8]
je 0x14001ccc1
jmp 0x14001cb4d
mov esi, 0xc0000095
bts esi, 0x1c
mov r13, qword [rsp + 0x38]
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x14001ccf6
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp + 0x110]
test r14, r14
je 0x14001cdbf
mov r12, qword [r14 + 8]
test r12, r12
je 0x14001cd36
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 8], r11
mov r12, qword [r14 + 0x18]
test r12, r12
je 0x14001cd66
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r14 + 0x18], r11
mov r12, qword [r14 + 0x28]
test r12, r12
je 0x14001cd95
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x110], r11
mov r14, qword [rbp - 0x28]
test r14, r14
je 0x14001cdeb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp - 0x60]
test r14, r14
je 0x14001ce17
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x14001ced2
mov r14, qword [r13 + 8]
test r14, r14
je 0x14001ce50
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov r14, qword [r13 + 0x18]
test r14, r14
je 0x14001ce80
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov r14, qword [r13 + 0x28]
test r14, r14
je 0x14001ceaf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r14, qword [rbp - 0x30]
test r14, r14
je 0x14001cefe
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x14001cfb1
mov edx, dword [rbp + 0xd8]
cmp edx, 1
jb 0x14001cfb1
mov rsi, qword [rbp + 0xe0]
test rsi, rsi
je 0x14001cfb1
test edx, edx
je 0x14001cfb1
mov ecx, dword [rsi]
lea r8, [rsi + 4]
cmp r8, rsi
jb 0x14001cfb1
test ecx, ecx
mov dword [rbp + 0x2b8], ecx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x4a0], rax
cmp ecx, r15d
jne 0x14001cfb1
mov eax, dword [rax]
mov dword [rbp + 0x2bc], eax
test eax, eax
js 0x14001cfb1
cmp edx, 1
jbe 0x14001cfb1
mov edx, r11d
lea rcx, [rsi + 4]
cmp rcx, rsi
jb 0x14001cfb1
mov esi, dword [rsi]
add rsi, rcx
cmp rsi, rcx
jb 0x14001cfb1
inc edx
cmp edx, 1
jb 0x14001cf67
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x14001cfb1
test ecx, ecx
mov dword [rbp + 0x2c0], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x4a8], rax
cmp ecx, 8
jne 0x14001cfb1
mov rax, qword [rax]
mov qword [rbp + 0x4b0], rax
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rbp - 0x50]
mov dword [rbp - 0x54], r11d
mov dword [rbp - 0x58], r11d
test rsi, rsi
je 0x14001cff3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x50], r11
mov rsi, qword [rbp + 0xe0]
mov dword [rbp + 0xdc], r11d
mov dword [rbp + 0xd8], r11d
test rsi, rsi
je 0x14001d037
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0xe0], r11
test r12, r12
je 0x14001d05f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x14001d087
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov eax, dword [rbp + 0x1c]
mov ecx, 0x40
mov edx, eax
mov dword [rsp + 0x54], eax
mov dword [rbp + 0x1c], r11d
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x70]
mov qword [rbp - 0x18], rax
mov rsi, rax
call fcn.14000b280
xor r12d, r12d
test rsi, rsi
jne 0x14001d0cc
mov qword [rbp + 0x70], r12
mov r14d, 0x8007000e
jmp 0x140021b65
xorps xmm0, xmm0
mov qword [rbp + 0x70], rsi
lea rax, [0x14002c240]
mov qword [rbp - 0x78], r12
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x348], rax
mov r13, r12
mov qword [rsp + 0x60], r12
mov dword [rbp + 0xa8], r12d
mov dword [rbp + 0x18], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov esi, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
jne 0x14001d13f
mov r14d, 0xc0000017
mov dword [rsp + 0x30], r14d
jmp 0x14001d1fd
mov rax, qword [rbp + 0x348]
mov edx, 0x80
mov qword [rsp + 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r12 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r12 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r12 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r12 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r12 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r12 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r12 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r12 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r12 + rdx + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x350], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r13, rax
test rax, rax
jne 0x14001d4b7
mov r14d, 0xc0000017
mov dword [rsp + 0x30], r14d
mov r13, r12
mov rsi, qword [rsp + 0x60]
mov dword [rsp + 0x5c], r11d
mov dword [rsp + 0x58], r11d
test rsi, rsi
je 0x14001d239
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsp + 0x60], r11
mov rsi, qword [rbp + 0x28]
mov dword [rbp + 0x24], r11d
mov dword [rbp + 0x20], r11d
test rsi, rsi
je 0x14001d271
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x28], r11
test r13, r13
je 0x14001d299
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x78]
test rsi, rsi
je 0x14001d2c5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x140021b62
cmp dword [rbp + 0xc], r11d
je 0x140021b3f
xorps xmm0, xmm0
mov qword [rbp - 0x40], r11
lea rax, [0x14002c240]
mov r12, r11
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0x380], rax
mov r13, r11
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
je 0x140021a73
mov rax, qword [rbp + 0x380]
mov edx, 0x80
mov qword [rbp + 0x5c0], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rsi + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rsi + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rsi + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rsi + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rsi + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rsi + rdx + 0x10], xmm1
lea rax, [0x14002c188]
mov qword [rbp + 0x388], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov eax, 8
mov r8d, eax
mov edx, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
je 0x140021a70
mov rax, qword [rbp + 0x388]
mov r13, r12
mov qword [rsp + 0x38], r12
mov rcx, qword [rax]
mov qword [r12], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x258], rax
mov dword [rbp + 0x2f0], 0xc
mov dword [rbp - 0x44], 0xc4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xc4
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
je 0x140021a70
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x48], r11d
mov dword [rbp + 0x190], r15d
lea r8, [rax + 4]
cmp r8, rax
jb 0x140021a70
mov ecx, dword [rbp - 0x44]
add rcx, rax
add rax, 8
cmp rax, rcx
ja 0x140021a70
mov dword [rdx], r15d
mov eax, dword [rbp + 0x190]
mov dword [r8], eax
mov edx, dword [rbp - 0x48]
inc edx
mov dword [rbp - 0x48], edx
cmp qword [rbp - 0x40], r11
jne 0x14001fc65
mov dword [rbp + 0x198], 0xa4
mov eax, dword [rbp - 0x44]
lea ecx, [rax + 0xa4]
cmp ecx, eax
jb 0x140021a70
lea eax, [rdx + 1]
mov dword [rbp - 0x44], ecx
mov dword [rbp - 0x48], eax
jmp 0x14001fd24
mov rax, qword [rbp + 0x350]
mov qword [rbp - 0x78], r13
mov rcx, qword [rax]
mov qword [r13], rcx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x1e8], rax
mov dword [rbp + 0x44], 0xc
lea r8, [rbp + 0x1d8]
mov edx, 0x7fffffff
lea rcx, str.Clip_SubscriptionPFN
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x14001d511
mov qword [rbp + 0x1d8], r11
mov r14d, 0xc000003e
jmp 0x14001d1f5
mov rax, qword [rbp + 0x1d8]
mov r9d, 0xc0000095
inc rax
mov qword [rbp + 0x1d8], rax
lea eax, [rax*2 + 4]
cmp eax, r15d
jb 0x14001d53c
mov r14d, r11d
mov dword [rbp + 0x44], eax
jmp 0x14001d542
mov eax, dword [rbp + 0x44]
mov r14d, r9d
mov dword [rsp + 0x30], r14d
test r14d, r14d
js 0x14001d1fa
add eax, 0xc4
or r8d, 0xffffffff
mov ecx, 0xc4
mov edx, r8d
cmp eax, ecx
mov r10d, 0x10000000
cmovae edx, eax
sbb r14d, r14d
and r14d, r9d
add r14d, r10d
mov dword [rsp + 0x30], r14d
cmp eax, ecx
jb 0x14001fc36
lea eax, [rdx + 8]
mov ecx, r8d
cmp eax, edx
cmovae ecx, eax
sbb r14d, r14d
and r14d, r9d
add r14d, r10d
mov dword [rsp + 0x30], r14d
cmp eax, edx
jb 0x14001fc36
mov dword [rbp + 0x44], esi
lea eax, [rcx + 8]
mov edx, r8d
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, r9d
add r14d, r10d
mov dword [rsp + 0x30], r14d
cmp eax, ecx
jb 0x14001fc36
mov dword [rsp + 0x5c], edx
mov esi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rdx, rax
test rax, rax
je 0x14001d1ef
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x58], r11d
mov dword [rbp + 0x178], r11d
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001d7ac
mov ecx, dword [rsp + 0x5c]
add rcx, rax
add rax, rsi
cmp rax, rcx
jbe 0x14001d639
mov r14d, 0xc0000023
jmp 0x14001d1f5
mov dword [rdx], r15d
mov eax, dword [rbp + 0x178]
mov dword [r8], eax
mov ecx, dword [rsp + 0x58]
inc ecx
mov dword [rsp + 0x58], ecx
cmp qword [rsp + 0x60], r11
jne 0x14001d690
mov dword [rbp + 0x170], 0xa4
mov eax, dword [rsp + 0x5c]
lea edx, [rax + 0xa4]
cmp edx, eax
jb 0x14001d67d
inc ecx
mov dword [rsp + 0x5c], edx
mov dword [rsp + 0x58], ecx
jmp 0x14001d77d
mov r12d, 0xc0000095
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001ebfa
mov r8, qword [rsp + 0x60]
mov edx, r11d
test ecx, ecx
je 0x14001d6c9
mov eax, dword [r8]
add eax, 4
cmp eax, r15d
jb 0x14001d7b7
mov dword [rbp + 0x170], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x14001d7ac
inc edx
mov r8, r9
cmp edx, ecx
jb 0x14001d69c
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x14001d7ac
mov ecx, dword [rsp + 0x5c]
lea rax, [r8 + 0xa4]
add rcx, qword [rsp + 0x60]
mov r14d, r11d
mov dword [rsp + 0x30], r11d
cmp rax, rcx
ja 0x14001d62e
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [r12]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [r12 + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [r12 + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [r12 + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [r12 + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [r12 + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [r12 + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [r12 + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [r12 + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
mov ecx, dword [rsp + 0x58]
inc ecx
mov dword [rsp + 0x58], ecx
test r14d, r14d
js 0x14001ebfa
mov edx, dword [rsp + 0x5c]
cmp qword [rsp + 0x60], r11
jne 0x14001d7c4
mov dword [rbp + 0x16c], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x14001d7ac
mov edx, eax
inc ecx
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x238], rax
jmp 0x14001d85c
mov r14d, 0xc0000095
jmp 0x14001d1f5
mov r14d, 0xc0000095
mov dword [rsp + 0x30], r14d
jmp 0x14001d770
mov r8, qword [rsp + 0x60]
mov r9d, r11d
test ecx, ecx
je 0x14001d7fb
mov eax, dword [r8]
add eax, 4
cmp eax, r15d
jb 0x14001d880
mov dword [rbp + 0x16c], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x14001d7ac
inc r9d
mov r8, r10
cmp r9d, ecx
jb 0x14001d7d0
lea r9, [r8 + 4]
cmp r9, r8
jb 0x14001d7ac
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rsp + 0x60]
mov r14d, r11d
mov dword [rsp + 0x30], r11d
cmp rax, rcx
ja 0x14001d62e
mov dword [r8], esi
mov r12d, 0xc0000095
mov rax, qword [r13]
mov qword [r9], rax
mov ecx, dword [rsp + 0x58]
mov edx, dword [rsp + 0x5c]
inc ecx
mov dword [rsp + 0x58], ecx
test r14d, r14d
js 0x14001ebfa
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x238], rax
cmp qword [rsp + 0x60], r11
jne 0x14001d890
mov dword [rbp + 0x168], 0xc
lea eax, [rdx + 0xc]
cmp eax, edx
jb 0x14001fc5a
inc ecx
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x58], ecx
jmp 0x14001d91b
mov r12d, 0xc0000095
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001d83e
mov r8, qword [rsp + 0x60]
mov r9d, r11d
test ecx, ecx
je 0x14001d8c7
mov eax, dword [r8]
add eax, 4
cmp eax, r15d
jb 0x14001d8f7
mov dword [rbp + 0x168], eax
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x14001d683
inc r9d
mov r8, r10
cmp r9d, ecx
jb 0x14001d89c
lea r9, [r8 + 4]
cmp r9, r8
jb 0x14001d683
mov ecx, edx
lea rax, [r8 + 0xc]
add rcx, qword [rsp + 0x60]
mov r14d, r11d
mov dword [rsp + 0x30], r11d
cmp rax, rcx
jbe 0x14001d901
mov r14d, 0xc0000023
jmp 0x14001ebf5
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001d912
mov dword [r8], esi
mov rax, qword [rbp + 0x238]
mov qword [r9], rax
inc dword [rsp + 0x58]
test r14d, r14d
js 0x14001ebfa
lea r8, [rbp + 0x120]
mov edx, 0x7fffffff
lea rcx, str.Clip_SubscriptionPFN
call fcn.140025640
xor r11d, r11d
test eax, eax
jns 0x14001d94c
mov qword [rbp + 0x120], r11
mov r14d, 0xc000003e
jmp 0x14001ebf5
mov rax, qword [rbp + 0x120]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x14001fc52
lea r9d, [rcx + rcx]
mov qword [rbp + 0x120], rcx
test r9d, r9d
je 0x14001da71
cmp qword [rsp + 0x60], r11
jne 0x14001d9dd
add r9d, 4
cmp r9d, r15d
jb 0x14001d9ca
mov dword [rbp + 0x164], r9d
mov eax, dword [rsp + 0x5c]
mov r12d, 0xc0000095
lea r8d, [rax + r9]
cmp r8d, eax
jb 0x14001d9b4
inc dword [rsp + 0x58]
mov r14d, r11d
mov dword [rsp + 0x5c], r8d
mov dword [rsp + 0x30], r11d
jmp 0x14001da87
or r8d, 0xffffffff
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x5c], r8d
mov r14d, r12d
jmp 0x14001da87
mov r12d, 0xc0000095
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001da82
mov ecx, r11d
mov rdx, qword [rsp + 0x60]
cmp dword [rsp + 0x58], r11d
jbe 0x14001da12
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x14001d9ca
mov dword [rbp + 0x164], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x14001d9ca
inc ecx
mov rdx, r8
cmp ecx, dword [rsp + 0x58]
jb 0x14001d9ec
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x14001d9ca
mov r8d, dword [rsp + 0x5c]
lea rax, [r9 + 4]
mov ecx, r8d
mov dword [rsp + 0x30], r11d
add rcx, qword [rsp + 0x60]
add rax, rdx
mov r14d, r11d
mov r11d, r9d
cmp rax, rcx
jbe 0x14001da53
mov r14d, 0xc0000023
xor r11d, r11d
mov dword [rsp + 0x30], r14d
lea r12d, [r14 + 0x72]
jmp 0x14001da87
mov dword [rdx], r9d
mov r8, r11
lea rdx, str.Clip_SubscriptionPFN
mov rcx, r10
call sub.msvcrt.dll_memcpy
inc dword [rsp + 0x58]
xor r11d, r11d
jmp 0x14001da7c
mov r14d, 0xc000000d
mov dword [rsp + 0x30], r14d
mov r12d, 0xc0000095
mov r8d, dword [rsp + 0x5c]
test r14d, r14d
js 0x14001ebfa
mov eax, dword [rbp + 0xc]
mov dword [rbp + 0x158], eax
cmp qword [rsp + 0x60], r11
jne 0x14001dacb
mov dword [rbp + 0x160], esi
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x14001d683
mov r10d, dword [rsp + 0x54]
mov r8d, eax
inc dword [rsp + 0x58]
mov dword [rbp + 0xb0], r10d
jmp 0x14001db63
mov ecx, r11d
mov rdx, qword [rsp + 0x60]
cmp dword [rsp + 0x58], r11d
jbe 0x14001db08
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x14001db86
mov dword [rbp + 0x160], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x14001d683
inc ecx
mov rdx, r9
cmp ecx, dword [rsp + 0x58]
jb 0x14001dada
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x14001d683
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rsp + 0x60]
mov r14d, r11d
mov dword [rsp + 0x30], r11d
cmp rax, rcx
ja 0x14001d8ec
mov dword [rdx], r15d
mov eax, dword [rbp + 0x158]
mov dword [r9], eax
inc dword [rsp + 0x58]
mov r8d, dword [rsp + 0x5c]
test r14d, r14d
js 0x14001ebfa
mov r10d, dword [rsp + 0x54]
mov dword [rbp + 0xb0], r10d
cmp qword [rsp + 0x60], r11
jne 0x14001db90
mov dword [rbp + 0x14c], esi
lea eax, [r8 + 8]
cmp eax, r8d
jb 0x14001d683
inc dword [rsp + 0x58]
mov r8d, eax
mov dword [rsp + 0x5c], eax
jmp 0x14001dc15
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001db47
mov ecx, r11d
mov rdx, qword [rsp + 0x60]
cmp dword [rsp + 0x58], r11d
jbe 0x14001dbcd
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x14001dc53
mov dword [rbp + 0x14c], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x14001d683
inc ecx
mov rdx, r9
cmp ecx, dword [rsp + 0x58]
jb 0x14001db9f
lea r9, [rdx + 4]
cmp r9, rdx
jb 0x14001d683
mov ecx, r8d
lea rax, [rdx + 8]
add rcx, qword [rsp + 0x60]
mov r14d, r11d
mov dword [rsp + 0x30], r11d
cmp rax, rcx
ja 0x14001d8ec
mov dword [rdx], r15d
mov eax, dword [rbp + 0xb0]
mov dword [r9], eax
inc dword [rsp + 0x58]
mov r8d, dword [rsp + 0x5c]
test r14d, r14d
js 0x14001ebfa
lea eax, [r10 + 4]
cmp eax, r15d
jb 0x14001dc5d
add eax, 0x1c
cmp eax, 0x1c
jb 0x14001d683
lea ecx, [rax + 8]
cmp ecx, eax
jb 0x14001d683
mov dword [rbp + 0x150], esi
lea eax, [rcx + 8]
mov dword [rbp + 0x10], eax
cmp eax, ecx
jb 0x14001d683
mov r14d, r11d
mov dword [rsp + 0x30], r11d
jmp 0x14001dc6e
mov r14d, r12d
mov dword [rsp + 0x30], r12d
jmp 0x14001dc0c
mov eax, dword [rbp + 0x150]
mov r14d, r12d
mov dword [rbp + 0x10], eax
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
mov r9, r11
mov qword [rbp - 0x80], r11
mov r12d, r11d
mov qword [rbp + 0x118], r11
mov qword [rbp], r11
mov r13, r11
mov dword [rsp + 0x50], r11d
mov qword [rbp - 0x60], r11
mov dword [rbp - 8], r11d
mov qword [rbp + 0x5c0], r11
mov qword [rbp - 0x20], r11
mov dword [rbp + 0x48], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x358], rax
lea eax, [r8 + 8]
or ecx, 0xffffffff
cmp eax, esi
mov edx, 0xc0000095
cmovae ecx, eax
sbb r14d, r14d
and r14d, edx
cmp eax, esi
jb 0x14001ddc0
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14001dcef
mov r14d, edx
jmp 0x14001ddc0
mov dword [rbp + 0xa4], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001dd33
mov r14d, 0xc0000017
mov r9, r13
jmp 0x14001ddc0
mov eax, dword [rsp + 0x58]
lea rdx, [rsi + 4]
mov dword [rsi], eax
cmp rdx, rsi
jb 0x14001dd8b
mov eax, dword [rsp + 0x5c]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14001dd8b
mov edx, dword [rbp + 0xa4]
mov r14d, r11d
mov rax, qword [rbp + 0x358]
mov qword [rdx + rsi - 8], rax
mov r8d, dword [rsp + 0x5c]
mov rdx, qword [rsp + 0x60]
call sub.msvcrt.dll_memcpy
mov r12d, dword [rbp + 0xa4]
xor r11d, r11d
mov r9, rsi
mov qword [rbp - 0x80], rsi
mov esi, r11d
jmp 0x14001dd94
mov r9, r13
mov r14d, 0xc0000095
test rsi, rsi
je 0x14001ddc0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9, qword [rbp - 0x80]
xor r11d, r11d
or r14d, 0x10000000
mov dword [rsp + 0x30], r14d
jl 0x14001e9a6
mov qword [rbp + 0x1e0], r11
mov r13, r11
mov qword [rbp - 0x68], r11
test r9, r9
jne 0x14001ddf0
mov r14d, 0xc000000d
jmp 0x14001e645
mov esi, r12d
mov qword [rbp - 0x30], rsi
test r12d, r12d
je 0x14001e54e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8, [rsi + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x28], rax
mov r12, rax
test rax, rax
je 0x14001e54e
mov r9, qword [rbp - 0x80]
mov al, r11b
mov byte [rsp + 0x34], al
mov ecx, r11d
test rsi, rsi
je 0x14001de57
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x14001de47
mov byte [rsp + 0x34], al
xor ecx, ecx
mov qword [rbp + 0x5b8], rbx
mov r10d, r11d
mov dword [rbp - 0x70], ecx
or r11d, 0xffffffff
mov dword [rsp + 0x40], ecx
mov rdx, rsi
mov r14, r12
and edx, 7
je 0x14001df5d
xor r8d, r8d
mov dword [rbp - 0x70], ecx
mov dword [rsp + 0x40], ecx
mov r12d, ecx
mov r11d, r8d
test edx, edx
je 0x14001ded2
lea r10d, [rcx + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x14001deb5
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or ecx, r8d
mov dword [rsp + 0x40], ecx
jmp 0x14001dec2
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x40]
or r12d, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14001de95
mov dword [rbp - 0x70], r12d
mov r10d, ecx
mov r11d, r12d
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
xor r12d, r12d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14001df2a
lea rdi, [r14 + 1]
mov qword [rbp - 0x38], rdi
cmp r12d, r15d
jge 0x14001df07
rol ecx, 8
mov edi, ecx
jmp 0x14001df0e
rol r8d, 8
mov edi, r8d
mov byte [r14], dil
inc r12d
mov rdi, qword [rbp - 0x38]
mov r14, rdi
cmp r12d, edx
jl 0x14001def3
movabs rdi, 0x7f1137fab69605e
cmp edx, r15d
jbe 0x14001df41
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001df59
xor ecx, ecx
mov r11d, ecx
cmp edx, r15d
jae 0x14001df59
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r12, qword [rbp - 0x28]
mov rcx, rsi
shr rcx, 3
mov qword [rbp - 0x38], rcx
test rcx, rcx
je 0x14001e2c8
movzx eax, word [rbp + 0x5be]
lea rdx, [r9 + 2]
mov ecx, dword [rbp + 0x5bc]
mov edi, dword [rbp - 0x70]
xor ecx, ebx
mov r12d, dword [rsp + 0x40]
mov r15d, ecx
movzx esi, word [rbp + 0x5bc]
mov dword [rsp + 0x48], eax
movzx eax, word [rbp + 0x5ba]
mov dword [rsp + 0x78], eax
lea rax, [r14 + 7]
mov r14, qword [rbp - 0x38]
movzx r13d, bx
movzx ecx, byte [rdx - 1]
movzx r9d, byte [rdx - 2]
movzx r8d, byte [rdx + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rdx]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 1]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 3]
or r8d, ecx
movzx ecx, byte [rdx + 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rdx + 5]
add rdx, 8
shl r8d, 8
or r8d, ecx
mov qword [rbp - 0x38], rdx
mov edx, dword [rbp + 0x5bc]
xor r11d, r8d
mov ecx, r11d
sub ecx, r13d
xor ecx, dword [rbp + 0x5bc]
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x5ba]
xor edx, r10d
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [rbx + r11]
ror edx, 9
imul edx, esi
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
mov edx, r10d
xor edx, esi
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x5bc]
xor r11d, edx
mov edx, ebx
xor edx, r11d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5ba]
mov edx, r10d
sub edx, r13d
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r11d
ror ecx, 0xf
xor ecx, esi
imul ecx, r13d
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, esi
xor r11d, ecx
mov ecx, r11d
sub ecx, dword [rbp + 0x5bc]
sub ecx, r13d
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
xor ecx, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x78]
ror edx, 0xa
xor edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, r13d
ror ecx, 3
rol edx, 6
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, r13d
xor r11d, ecx
movzx ecx, word [rbp + 0x5be]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, r13d
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, esi
rol edx, 3
imul edx, r13d
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
sub edx, esi
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
ror ecx, 0xb
imul edx, esi
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r10d
sub ecx, ebx
sub ecx, edx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
xor ecx, dword [rsp + 0x78]
ror edx, 7
imul ecx, r13d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5be]
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, esi
ror ecx, 4
add edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
mov edx, r10d
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, dword [rbp + 0x5bc]
xor edx, r11d
mov ecx, r11d
rol edx, 8
imul edx, r13d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, dword [rbp + 0x5bc]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, ecx
mov ecx, r11d
imul edx, esi
shr ecx, 8
xor edx, ecx
xor r10d, edx
mov rdx, qword [rbp - 0x38]
xor r11d, r10d
xor r10d, r12d
mov byte [rax - 4], r10b
xor r11d, r15d
xor r11d, edi
ror r10d, 8
mov byte [rax], r11b
mov r12d, r9d
mov byte [rax - 5], r10b
lea rax, [rax + 8]
ror r11d, 8
mov edi, r8d
mov byte [rax - 9], r11b
ror r10d, 8
mov byte [rax - 0xe], r10b
ror r11d, 8
mov byte [rax - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [rax - 0xf], r10b
mov byte [rax - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub r14, 1
jne 0x14001dfb1
mov al, byte [rsp + 0x34]
movabs rdi, 0x7f1137fab69605e
mov r13, qword [rbp - 0x68]
mov r15d, 4
mov rsi, qword [rbp - 0x30]
mov r12, qword [rbp - 0x28]
movzx ecx, al
lea r14, [rsi + 8]
mov qword [r12 + rsi], rcx
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x4b8], r14
lea rax, [0x14002c230]
mov qword [rbp + 0x4c8], 8
mov qword [rbp + 0x4c0], rax
lea rax, [0x14002c190]
mov qword [rbp + 0x4d8], 0xa0
mov qword [rbp + 0x4d0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001e34d
mov r14d, 0xc0000017
jmp 0x14001e53d
mov r14d, r14d
mov dword [rax], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001e389
mov r14d, 0xc0000017
jmp 0x14001e482
mov qword [rsi + 8], rax
mov r8, r14
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r14d, 0xa0
mov dword [rsi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov r14d, 8
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x14001e37e
mov qword [rsi + 0x18], rax
lea rax, [0x14002c190]
movups xmm0, xmmword [rax]
lea edx, [r14 + 0x78]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [rsi + 0x20], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r14d
mov edx, r14d
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x14001e37e
mov qword [rsi + 0x28], rax
mov rax, qword [0x14002c230]
mov r13, rsi
mov qword [rcx], rax
mov r14d, r11d
mov esi, r11d
test rsi, rsi
je 0x14001e53d
mov r12, qword [rsi + 8]
test r12, r12
je 0x14001e4bb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x14001e4eb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x14001e51a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x14001e554
mov qword [rbp + 0x118], r13
mov r13, r11
jmp 0x14001e554
mov r14d, 0xc0000001
mov rsi, qword [rbp + 0x1e0]
test rsi, rsi
je 0x14001e58a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x1e0], r11
test r13, r13
je 0x14001e645
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14001e5c3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14001e5f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14001e622
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or r14d, 0x10000000
mov dword [rsp + 0x30], r14d
jl 0x14001e99f
mov r12, qword [rbp + 0x118]
mov ecx, dword [r12]
mov r8d, dword [r12 + 0x20]
add ecx, 4
mov edx, dword [r12 + 0x10]
cmp ecx, r15d
jb 0x14001e7c4
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14001e7c4
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x14001e7c4
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x14001e7c4
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x14001e7c4
mov dword [rbp + 0x13c], ecx
mov esi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r13d, r13d
mov rsi, rax
test rax, rax
jne 0x14001e6ec
mov r14d, 0xc0000017
mov r10d, 0xc0000095
jmp 0x14001e7d0
mov eax, dword [r12]
lea r14, [rsi + 4]
mov dword [rsi], eax
cmp r14, rsi
jb 0x14001e790
mov r8d, dword [r12]
mov rcx, r14
mov rdx, qword [r12 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12]
add rcx, r14
cmp rcx, r14
jb 0x14001e790
mov eax, dword [r12 + 0x10]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x14001e790
mov r8d, dword [r12 + 0x10]
mov rcx, r14
mov rdx, qword [r12 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12 + 0x10]
add rcx, r14
cmp rcx, r14
jb 0x14001e790
mov eax, dword [r12 + 0x20]
lea r14, [rcx + 4]
mov dword [rcx], eax
cmp r14, rcx
jb 0x14001e790
mov r8d, dword [r12 + 0x20]
mov rcx, r14
mov rdx, qword [r12 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r12 + 0x20]
add rax, r14
cmp rax, r14
jb 0x14001e790
mov eax, dword [rbp + 0x13c]
mov r14d, r13d
mov qword [rbp], rsi
mov rsi, r13
mov dword [rsp + 0x50], eax
jmp 0x14001e796
mov r14d, 0xc0000095
test rsi, rsi
je 0x14001e6e1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x14001e6e1
mov r10d, 0xc0000095
xor r13d, r13d
mov r14d, r10d
or r14d, 0x10000000
mov dword [rsp + 0x30], r14d
jl 0x14001e99c
mov dword [rbp + 0x154], r13d
mov dword [rbp + 0x180], r13d
mov eax, dword [rbp + 0x10]
or r8d, 0xffffffff
add eax, 8
mov ecx, r8d
cmp eax, 8
cmovae ecx, eax
sbb r14d, r14d
and r14d, r10d
mov dword [rbp + 0x2c4], ecx
add r14d, 0x10000000
mov dword [rsp + 0x30], r14d
cmp eax, 8
jb 0x14001ec11
mov edx, ecx
add rdx, 7
and edx, 0xfffffff8
cmp edx, ecx
jae 0x14001e83d
mov r8d, dword [rbp + 0xa0]
mov r14d, r10d
jmp 0x14001e868
lea ecx, [rdx + 8]
mov eax, r8d
mov r8d, dword [rbp + 0xa0]
cmp ecx, edx
cmovae eax, ecx
sbb r14d, r14d
and r14d, r10d
mov dword [rbp + 0x2cc], eax
cmp ecx, edx
cmovae r8d, eax
mov dword [rbp + 0xa0], r8d
mov dword [rsp + 0x30], r14d
test r14d, r14d
js 0x14001e99c
cmp qword [rsp + 0x60], r13
jne 0x14001e88d
mov r14d, 0xc000000d
mov dword [rsp + 0x30], r14d
jmp 0x14001ec11
cmp dword [rsp + 0x58], 1
jbe 0x14001e87d
mov rax, qword [rsp + 0x60]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001ec09
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001ec09
inc edx
cmp edx, 1
jb 0x14001e89c
mov r9d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001ec09
test r9d, r9d
mov dword [rbp + 0x154], r9d
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x5b0], rax
cmp dword [rsp + 0x58], 2
jbe 0x14001e87d
mov rax, qword [rsp + 0x60]
mov edx, r13d
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001ec09
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x14001ec09
inc edx
cmp edx, 2
jb 0x14001e8f5
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14001ec09
test edx, edx
mov dword [rbp + 0x180], edx
mov rax, r13
cmovne rax, rcx
mov qword [rbp + 0x4e0], rax
add r8d, 4
cmp r8d, r15d
jb 0x14001ec09
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001ec09
lea eax, [rcx + r9]
cmp eax, ecx
jb 0x14001ec09
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x14001ec09
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x14001ec09
mov dword [rbp + 0x2d0], eax
mov dword [rsp + 0x30], r13d
mov r14d, r13d
cmp eax, 0x400000
jbe 0x14001ec04
mov r14d, 0x8000ffff
mov dword [rsp + 0x30], r14d
xor r11d, r11d
mov r13, qword [rbp + 0x5c0]
mov rsi, qword [rbp - 0x80]
test rsi, rsi
je 0x14001e9d2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r12, qword [rbp + 0x118]
test r12, r12
je 0x14001eaa1
mov rsi, qword [r12 + 8]
test rsi, rsi
je 0x14001ea14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 8], r11
mov rsi, qword [r12 + 0x18]
test rsi, rsi
je 0x14001ea46
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 0x18], r11
mov rsi, qword [r12 + 0x28]
test rsi, rsi
je 0x14001ea77
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r12 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x118], r11
mov rsi, qword [rbp]
test rsi, rsi
je 0x14001eacd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x60]
test rsi, rsi
je 0x14001eaf9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x14001ebb4
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x14001eb32
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rsi, qword [r13 + 0x18]
test rsi, rsi
je 0x14001eb62
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rsi, qword [r13 + 0x28]
test rsi, rsi
je 0x14001eb91
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x14001ebe0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r14d, r14d
js 0x14001ebfa
cmp dword [rbp + 0x20], 1
jae 0x14001f8e9
mov r14d, 0xc004d501
mov dword [rsp + 0x30], r14d
mov r13, qword [rsp + 0x38]
jmp 0x14001d1fd
mov dword [rbp - 8], eax
jmp 0x14001ec11
mov r14d, r10d
mov dword [rsp + 0x30], r10d
test r14d, r14d
js 0x14001e99c
mov esi, dword [rbp - 8]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x14001ec54
mov rsi, qword [rbp - 0x60]
mov r14d, 0xd0000017
jmp 0x14001ec61
mov rsi, rax
mov qword [rbp - 0x60], rax
mov r14d, 0x10000000
mov dword [rsp + 0x30], r14d
test r14d, r14d
js 0x14001e99f
mov rax, qword [rbp]
test rax, rax
jne 0x14001ec88
mov r14d, 0x80070057
mov dword [rsp + 0x30], r14d
jmp 0x14001e99f
test rsi, rsi
je 0x14001ec78
mov qword [rbp + 0x428], rax
lea r8, [rbp + 0x360]
mov eax, dword [rsp + 0x50]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x438], eax
mov ecx, 1
mov eax, dword [rbp - 8]
mov dword [rbp + 0x43c], eax
mov qword [rbp + 0x430], rsi
mov dword [rbp + 0x440], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14001ed0a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edx, dword [rbp - 8]
movzx r14d, ax
or r14d, 0x80070000
test eax, eax
cmovle r14d, eax
mov dword [rsp + 0x30], r14d
test r14d, r14d
js 0x14001ed5d
mov r14d, 0x80004005
jmp 0x14001ed58
mov rcx, qword [rbp + 0x360]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001ecd8
xor r9d, r9d
lea rdx, [rbp + 0x428]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp - 8]
mov r14d, eax
or r14d, 0x10000000
cmovge edx, dword [rbp + 0x43c]
mov dword [rbp - 8], edx
mov dword [rsp + 0x30], r14d
xor r11d, r11d
cmp r14d, 0xd0000023
jne 0x14001ed7a
mov eax, 0x8007007a
mov r14d, eax
mov dword [rsp + 0x30], eax
jmp 0x14001e99f
test r14d, r14d
js 0x14001e99f
mov qword [rbp - 0x68], r11
cmp edx, r15d
jae 0x14001ed97
mov r14d, 0xc000003e
jmp 0x14001f17c
mov r13d, dword [rsi]
lea rcx, [rsi + 4]
cmp rcx, rsi
jb 0x14001f176
lea eax, [rdx - 4]
cmp eax, r13d
jb 0x14001ed8c
lea r9, [rcx + r13]
mov qword [rbp - 0x30], r9
cmp r9, rcx
jb 0x14001f176
lea r8d, [r13 + 4]
cmp r8d, r15d
jb 0x14001f176
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001ed8c
mov r14d, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x14001f176
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x14001f176
mov eax, edx
sub eax, r9d
cmp eax, r14d
jb 0x14001ed8c
lea r10, [rcx + r14]
cmp r10, rcx
jb 0x14001f176
lea r8d, [r9 + r14]
cmp r8d, r9d
jb 0x14001f176
mov eax, edx
sub eax, r8d
cmp eax, r15d
jb 0x14001ed8c
mov r12d, dword [r10]
lea rax, [r10 + 4]
mov qword [rbp - 0x28], rax
cmp rax, r10
jb 0x14001f176
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001f176
mov eax, edx
sub eax, ecx
cmp eax, r12d
jb 0x14001ed8c
lea r8d, [rcx + r12]
cmp r8d, ecx
jb 0x14001f176
cmp edx, r8d
jne 0x14001ed8c
lea ecx, [r14 + r13]
mov eax, edx
add ecx, r12d
add rcx, 0xc
cmp rcx, rax
jne 0x14001ed8c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x14001eeba
mov r14d, 0xc0000017
jmp 0x14001f098
mov rax, qword [rbp - 0x60]
add rax, 4
je 0x14001ef19
mov dword [rsi], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
mov r8, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
jne 0x14001ef00
mov r14d, 0xc0000017
jmp 0x14001efdd
mov qword [rsi + 8], rcx
mov rdx, qword [rbp - 0x60]
mov r8, r13
add rdx, 4
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001ef20
mov dword [rsi], r11d
mov qword [rsi + 8], r11
mov r13, qword [rbp - 0x30]
add r13, 4
je 0x14001ef70
mov dword [rsi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001eef5
mov qword [rsi + 0x18], rax
mov r8, r14
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001ef78
mov dword [rsi + 0x10], r11d
mov qword [rsi + 0x18], r11
mov r14, qword [rbp - 0x28]
test r14, r14
je 0x14001efcb
mov dword [rsi + 0x20], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x14001eef5
mov qword [rsi + 0x28], rax
mov r8, r12
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x14001efd3
mov dword [rsi + 0x20], r11d
mov qword [rsi + 0x28], r11
mov qword [rbp - 0x68], rsi
mov r14d, r11d
mov rsi, r11
test rsi, rsi
je 0x14001f098
mov r12, qword [rsi + 8]
test r12, r12
je 0x14001f016
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x14001f046
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x14001f075
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13, qword [rbp - 0x68]
test r14d, r14d
mov rsi, r11
cmovs rsi, qword [rbp - 0x68]
cmovs r13, r11
mov qword [rbp + 0x5c0], r13
test rsi, rsi
je 0x14001f183
mov r12, qword [rsi + 8]
test r12, r12
je 0x14001f0eb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 8], r11
mov r12, qword [rsi + 0x18]
test r12, r12
je 0x14001f11b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rsi + 0x18], r11
mov r12, qword [rsi + 0x28]
test r12, r12
je 0x14001f14a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rsi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x5c0], r13
jmp 0x14001f183
mov r14d, 0xc0000095
mov r13, qword [rbp + 0x5c0]
or r14d, 0x10000000
mov dword [rsp + 0x30], r14d
jl 0x14001e9a6
mov qword [rbp + 0x78], r11
mov rsi, r11
mov qword [rbp - 0x28], r11
mov r12, r11
test r13, r13
jne 0x14001f1b8
mov r14d, 0xd000000d
mov dword [rsp + 0x30], r14d
jmp 0x14001e9a6
mov rax, qword [r13 + 8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14001f1a8
cmp dword [r13], r11d
je 0x14001f1a8
mov r14d, dword [r13]
mov dword [rsp + 0x50], r11d
test r14, r14
je 0x14001f721
add r14, 0xfffffffffffffff8
mov qword [rbp + 0x10], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x58], rax
mov r13, rax
test rax, rax
je 0x14001f71d
mov r9, qword [rbp - 0x68]
mov rdx, r14
mov qword [rbp + 0x5b8], rdi
mov al, r11b
mov byte [rsp + 0x34], al
mov rcx, r13
mov qword [rbp - 0x30], rcx
and edx, 7
je 0x14001f333
mov dword [rbp - 0x70], r11d
mov ecx, r11d
mov dword [rsp + 0x78], ecx
mov esi, r11d
test edx, edx
je 0x14001f28f
lea r10d, [r11 + 0x38]
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x14001f273
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x78]
or ecx, r8d
mov dword [rsp + 0x78], ecx
jmp 0x14001f280
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x78]
or esi, r8d
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x14001f253
mov dword [rbp - 0x70], esi
mov r10d, ecx
mov r11d, esi
xor r10d, 0x92f65a5
xor r11d, 0x699a899c
xor esi, esi
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x14001f2fa
mov rbx, r13
lea rdi, [rbx + 1]
mov qword [rbp - 0x38], rdi
cmp esi, r15d
jge 0x14001f2c6
rol ecx, 8
mov edi, ecx
jmp 0x14001f2cd
rol r8d, 8
mov edi, r8d
mov byte [rbx], dil
inc esi
mov rdi, qword [rbp - 0x38]
mov rbx, rdi
cmp esi, edx
jl 0x14001f2b2
mov rcx, rdi
movabs rbx, 0xc81ecb17b1b54a58
mov qword [rbp - 0x30], rcx
movabs rdi, 0x7f1137fab69605e
jmp 0x14001f2fd
mov rcx, r13
cmp edx, r15d
jbe 0x14001f314
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x14001f32d
xor r8d, r8d
mov r11d, r8d
cmp edx, r15d
jae 0x14001f33f
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x30]
jmp 0x14001f33f
or dword [rbp - 0x70], 0xffffffff
xor r10d, r10d
mov dword [rsp + 0x78], r11d
mov rsi, r14
shr rsi, 3
test rsi, rsi
je 0x14001f693
mov edx, dword [rbp + 0x5bc]
lea r13, [rcx + 7]
mov ebx, dword [rbp - 0x70]
lea r14, [r9 + 2]
mov r12d, dword [rsp + 0x78]
mov r15d, edx
movzx eax, dx
xor r15d, edi
mov dword [rsp + 0x30], eax
movzx eax, word [rbp + 0x5ba]
mov dword [rsp + 0x48], eax
movzx eax, di
mov dword [rsp + 0x40], eax
mov eax, edx
movzx ecx, byte [r14 - 1]
movzx r9d, byte [r14 - 2]
movzx r8d, byte [r14 + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [r14]
lea r14, [r14 + 8]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r14 - 7]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r14 - 5]
or r8d, ecx
xor r10d, r9d
movzx ecx, byte [r14 - 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r14 - 3]
shl r8d, 8
or r8d, ecx
xor r11d, r8d
xor r11d, r10d
xor r11d, r15d
mov edx, r11d
mov ecx, r11d
sub edx, edi
rol ecx, 0xa
rol edx, 5
imul edx, dword [rsp + 0x30]
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
lea edx, [rax + r10]
ror edx, 9
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
sub edx, dword [rsp + 0x30]
imul edx, dword [rsp + 0x40]
shr ecx, 0xd
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x5be]
rol edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 2
sub edx, ecx
mov ecx, eax
xor r11d, edx
mov edx, edi
xor edx, r11d
sub ecx, edx
xor r10d, ecx
mov ecx, r10d
mov edx, r10d
xor ecx, dword [rsp + 0x30]
imul ecx, dword [rsp + 0x48]
ror edx, 6
xor edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 2
lea edx, [rax + r11]
ror edx, 0xf
imul edx, dword [rsp + 0x40]
add edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
mov edx, r10d
sub edx, edi
ror edx, 0xe
imul edx, ecx
mov ecx, r10d
rol ecx, 8
sub edx, ecx
xor r11d, edx
mov edx, edi
xor edx, r11d
mov ecx, r11d
ror ecx, 0xa
ror edx, 0xc
imul edx, dword [rsp + 0x30]
xor edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
imul edx, ecx
mov ecx, r10d
shr ecx, 0xa
xor edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r11d
not ecx
ror ecx, 5
add ecx, dword [rsp + 0x40]
imul ecx, edx
xor r10d, ecx
mov ecx, r10d
sub ecx, edx
xor ecx, edi
xor r11d, ecx
movzx ecx, word [rbp + 0x5be]
mov edx, r11d
xor edx, ecx
mov ecx, r11d
rol edx, 2
imul edx, dword [rsp + 0x30]
shr ecx, 2
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
sub edx, eax
ror edx, 6
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
mov edx, r11d
xor ecx, dword [rsp + 0x30]
imul ecx, dword [rsp + 0x40]
ror edx, 9
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
xor edx, ecx
movzx ecx, word [rbp + 0x5be]
rol edx, 5
imul edx, ecx
mov ecx, r10d
rol ecx, 7
add edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5ba]
xor r10d, r11d
xor r10d, r15d
mov ecx, r10d
ror ecx, 3
sub ecx, edx
imul ecx, dword [rsp + 0x30]
xor r11d, ecx
mov edx, r11d
mov ecx, r11d
sub edx, eax
ror edx, 1
imul edx, dword [rsp + 0x40]
ror ecx, 6
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
lea edx, [rdi + r10]
rol edx, 3
imul edx, ecx
mov ecx, r10d
rol ecx, 0xe
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xe
lea edx, [rdi + r11]
rol edx, 0xf
imul edx, dword [rsp + 0x30]
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, dword [rsp + 0x40]
xor edx, r10d
imul edx, ecx
mov ecx, r10d
shr ecx, 3
xor edx, ecx
xor r11d, edx
mov edx, eax
xor edx, r11d
mov ecx, r11d
xor r11d, ebx
rol edx, 4
imul edx, dword [rsp + 0x40]
mov ebx, r8d
rol ecx, 2
xor edx, ecx
xor edx, r12d
mov r12d, r9d
xor r10d, edx
mov byte [r13 - 4], r10b
mov byte [r13], r11b
lea r13, [r13 + 8]
ror r10d, 8
mov byte [r13 - 0xd], r10b
ror r11d, 8
mov byte [r13 - 9], r11b
ror r10d, 8
mov byte [r13 - 0xe], r10b
ror r11d, 8
mov byte [r13 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r13 - 0xf], r10b
mov byte [r13 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub rsi, 1
jne 0x14001f386
mov al, byte [rsp + 0x34]
lea r15d, [rsi + 4]
mov r12, qword [rbp - 0x28]
movabs rbx, 0xc81ecb17b1b54a58
mov r14, qword [rbp + 0x10]
mov r13, qword [rbp + 0x58]
xor r11d, r11d
mov ecx, r11d
test r14, r14
je 0x14001f6aa
xor al, byte [rcx + r13]
inc rcx
cmp rcx, r14
jb 0x14001f69e
movzx ecx, al
mov rax, qword [rbp - 0x68]
cmp rcx, qword [r14 + rax]
je 0x14001f6c3
mov rsi, qword [rbp + 0x78]
mov r14d, 0xc004d501
jmp 0x14001f6d5
mov rsi, r13
mov qword [rbp + 0x78], r13
mov r12, r14
mov r13, r11
mov r14d, dword [rsp + 0x50]
test r13, r13
je 0x14001f701
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rsi, qword [rbp + 0x78]
xor r11d, r11d
test r14d, r14d
js 0x14001f721
mov qword [rbp - 0x20], rsi
mov r14d, 0x10000000
mov rsi, r11
mov qword [rbp + 0x78], r11
mov dword [rbp + 0x48], r12d
jmp 0x14001f72b
mov rsi, qword [rbp + 0x78]
mov r12d, dword [rbp + 0x48]
mov r14d, 0xd0000001
mov dword [rsp + 0x30], r14d
test rsi, rsi
je 0x14001f760
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, dword [rbp + 0x48]
xor r11d, r11d
mov qword [rbp + 0x78], r11
test r14d, r14d
js 0x14001e99f
cmp r12d, r15d
jae 0x14001f779
mov r14d, 0xc000003e
jmp 0x14001f8df
mov r8, qword [rbp - 0x20]
mov r9d, dword [r8]
lea rcx, [r8 + 4]
mov dword [rsp + 0x48], r9d
cmp rcx, r8
jb 0x14001f8d9
lea eax, [r12 - 4]
cmp eax, r15d
jb 0x14001f76e
mov r14d, dword [rcx]
lea rsi, [rcx + 4]
cmp rsi, rcx
jb 0x14001f8d9
lea eax, [r12 - 8]
cmp eax, r14d
jb 0x14001f76e
lea eax, [r14 + 8]
cmp eax, 8
jb 0x14001f8d9
mov ecx, r12d
lea rdx, [rsi + r14]
lea rax, [r8 + rcx]
cmp rax, rdx
jb 0x14001f76e
mov rax, r8
sub rax, rsi
sub rax, r14
add rax, rcx
cmp rax, 8
jae 0x14001f76e
mov dword [rsp + 0x50], r11d
mov r12, r11
mov r8d, r11d
test rsi, rsi
je 0x14001f863
mov rcx, rsi
cmp rdx, rsi
jb 0x14001f8d9
jbe 0x14001f85e
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14001f8d9
cmp rax, rdx
ja 0x14001f84b
mov eax, dword [rcx]
add eax, 4
cmp eax, r15d
jb 0x14001f856
mov dword [rbp + 0x2d4], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x14001f8d9
mov rcx, r9
cmp r9, rdx
ja 0x14001f84b
inc r8d
mov dword [rsp + 0x50], r8d
cmp rcx, rdx
jae 0x14001f861
jmp 0x14001f803
mov r14d, 0xc000000d
jmp 0x14001f8df
mov r14d, 0xc0000095
jmp 0x14001f8c6
cmp rcx, rdx
jne 0x14001f84b
test r14d, r14d
je 0x14001f89e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r14
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
jne 0x14001f89e
mov r14d, 0xc0000017
jmp 0x14001f8c6
test rsi, rsi
je 0x14001f8b4
mov r8, r14
mov rdx, rsi
mov rcx, r12
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov eax, dword [rsp + 0x50]
mov dword [rbp + 0x20], eax
mov qword [rbp + 0x28], r12
mov dword [rbp + 0x24], r14d
mov r14d, r11d
test r14d, r14d
js 0x14001f8df
mov eax, dword [rsp + 0x48]
cmp eax, dword [rbp + 0x20]
je 0x14001f8df
jmp 0x14001f76e
mov r14d, 0xc0000095
bts r14d, 0x1c
jmp 0x14001ec7e
cmp qword [rbp + 0x28], r11
jne 0x14001f902
mov r14d, 0xc000000d
mov dword [rsp + 0x30], r14d
mov r12d, 0xc0000095
jmp 0x14001f953
cmp dword [rbp + 0x20], r11d
jbe 0x14001f8ef
mov rsi, qword [rbp + 0x28]
mov ecx, dword [rsi]
lea rdx, [rsi + 4]
cmp rdx, rsi
jb 0x14001f945
test ecx, ecx
mov dword [rbp + 0x2d8], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x4e8], rax
mov dword [rsp + 0x30], r11d
mov r14d, r11d
cmp ecx, r15d
jne 0x14001d8ec
mov eax, dword [rax]
mov dword [rbp + 0x18], eax
jmp 0x14001f8fa
mov r12d, 0xc0000095
mov r14d, r12d
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
mov ecx, dword [rbp + 0x18]
mov esi, 0x8007007a
cmp ecx, 0xd0000023
cmove ecx, esi
mov dword [rbp + 0x18], ecx
cmp ecx, esi
je 0x14001f983
mov dword [rsp + 0x30], ecx
mov r14d, ecx
test ecx, ecx
js 0x14001ebfa
cmp dword [rbp + 0x20], 6
jne 0x14001ebef
cmp qword [rbp + 0x28], r11
jne 0x14001f9a0
mov r14d, 0xc000000d
mov dword [rsp + 0x30], r14d
jmp 0x14001fa09
mov rax, qword [rbp + 0x28]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001fa01
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001fa01
inc r8d
cmp r8d, 1
jb 0x14001f9a7
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001fa01
test edx, edx
mov dword [rbp + 0x2dc], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x4f0], rax
mov dword [rsp + 0x30], r11d
mov r14d, r11d
cmp edx, 8
jne 0x14001d8ec
mov rax, qword [rax]
mov qword [rbp + 0x370], rax
jmp 0x14001fa09
mov r14d, r12d
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
cmp qword [rbp + 0x28], r11
jne 0x14001fa25
mov r14d, 0xc000000d
mov dword [rsp + 0x30], r14d
jmp 0x14001fa8c
mov rax, qword [rbp + 0x28]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001fa84
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001fa84
inc r8d
cmp r8d, 2
jb 0x14001fa2c
mov edx, dword [rax]
lea r8, [rax + 4]
cmp r8, rax
jb 0x14001fa84
test edx, edx
mov dword [rbp + 0x2e0], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x4f8], rax
mov dword [rsp + 0x30], r11d
mov r14d, r11d
cmp edx, r15d
jne 0x14001d8ec
mov eax, dword [rax]
mov dword [rbp + 0x188], eax
jmp 0x14001fa8c
mov r14d, r12d
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
cmp qword [rbp + 0x28], r11
jne 0x14001faa6
mov r14d, 0xc000000d
jmp 0x14001ebf5
mov rax, qword [rbp + 0x28]
mov r8d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001d683
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001d683
inc r8d
cmp r8d, 3
jb 0x14001faad
mov r8d, dword [rax]
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001d683
test r8d, r8d
mov dword [rbp + 0x2e4], r8d
mov r10, r11
cmovne r10, rdx
mov qword [rbp + 0x500], r10
mov rax, qword [rbp + 0x28]
mov r9d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001fb57
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001fb57
inc r9d
cmp r9d, r15d
jb 0x14001fb00
mov edx, dword [rax]
lea r9, [rax + 4]
cmp r9, rax
jb 0x14001fb57
test edx, edx
mov dword [rbp + 0x2e8], edx
mov rax, r11
cmovne rax, r9
mov qword [rbp + 0x508], rax
mov dword [rsp + 0x30], r11d
mov r14d, r11d
cmp edx, r15d
jne 0x14001d8ec
mov eax, dword [rax]
mov dword [rbp + 0x184], eax
jmp 0x14001fb5f
mov r14d, r12d
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
mov rax, qword [rbp + 0x28]
mov r9d, r11d
lea rdx, [rax + 4]
cmp rdx, rax
jb 0x14001fbc7
mov eax, dword [rax]
add rax, rdx
cmp rax, rdx
jb 0x14001fbc7
inc r9d
cmp r9d, 5
jb 0x14001fb6f
mov edx, dword [rax]
lea r9, [rax + 4]
cmp r9, rax
jb 0x14001fbc7
test edx, edx
mov dword [rbp + 0x2ec], edx
mov rax, r11
cmovne rax, r9
mov qword [rbp + 0x510], rax
mov dword [rsp + 0x30], r11d
mov r14d, r11d
cmp edx, r15d
jne 0x14001d8ec
mov eax, dword [rax]
mov dword [rbp + 0xa8], eax
jmp 0x14001fbcf
mov r14d, r12d
mov dword [rsp + 0x30], r12d
test r14d, r14d
js 0x14001ebfa
mov rax, qword [rbp + 0x370]
cmp qword [rbp + 0x1e8], rax
jne 0x14001ebef
mov eax, dword [rbp + 0xa8]
mov edx, dword [rbp + 0x184]
mov dword [rbp + 0xc], eax
mov eax, dword [rbp + 0x188]
mov dword [rbp + 0x98], eax
mov eax, dword [rsp + 0x54]
mov dword [rbp + 0x1c], edx
test eax, eax
je 0x14001fc39
cmp eax, edx
jae 0x14001fc22
mov r14d, esi
mov dword [rsp + 0x30], esi
jmp 0x14001ebfa
cmp eax, r8d
jb 0x14001fc16
mov rcx, qword [rbp - 0x18]
mov rdx, r10
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov ecx, dword [rbp + 0x18]
mov r13, qword [rsp + 0x38]
test r14d, r14d
js 0x14001d1fd
test ecx, ecx
cmovne r14d, ecx
jmp 0x14001d135
or qword [rbp + 0x120], 0xffffffffffffffff
mov r14d, 0xc0000095
jmp 0x14001ebf5
mov r8, qword [rbp - 0x40]
mov ecx, r11d
test edx, edx
je 0x14001fc9d
mov eax, dword [r8]
add eax, 4
cmp eax, r15d
jb 0x140021a70
mov dword [rbp + 0x198], eax
mov r9d, eax
add r9, r8
cmp r9, r8
jb 0x140021a70
inc ecx
mov r8, r9
cmp ecx, edx
jb 0x14001fc70
lea rdx, [r8 + 4]
cmp rdx, r8
jb 0x140021a70
mov ecx, dword [rbp - 0x44]
lea rax, [r8 + 0xa4]
add rcx, qword [rbp - 0x40]
cmp rax, rcx
ja 0x140021a70
mov dword [r8], 0xa0
mov eax, 0x80
movups xmm0, xmmword [rsi]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rdx + rax - 0x10], xmm1
movups xmm0, xmmword [rsi + rax]
movups xmmword [rdx + rax], xmm0
movups xmm1, xmmword [rsi + rax + 0x10]
movups xmmword [rdx + rax + 0x10], xmm1
inc dword [rbp - 0x48]
mov ecx, dword [rbp - 0x44]
cmp qword [rbp - 0x40], r11
jne 0x14001fd55
mov dword [rbp + 0x19c], 0xc
lea edx, [rcx + 0xc]
cmp edx, ecx
jb 0x140021a70
mov rax, qword [rbp + 0x258]
inc dword [rbp - 0x48]
mov qword [rbp + 0x250], rax
jmp 0x14001fdd6
mov r8d, r11d
mov rdx, qword [rbp - 0x40]
cmp dword [rbp - 0x48], r11d
jbe 0x14001fd91
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x140021a70
mov dword [rbp + 0x19c], eax
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x140021a70
inc r8d
mov rdx, r9
cmp r8d, dword [rbp - 0x48]
jb 0x14001fd62
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x140021a70
add rcx, qword [rbp - 0x40]
lea rax, [rdx + 0xc]
cmp rax, rcx
ja 0x140021a70
mov dword [rdx], 8
mov rax, qword [r12]
mov qword [r8], rax
inc dword [rbp - 0x48]
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x250], rax
cmp qword [rbp - 0x40], r11
jne 0x14001fdf0
mov edx, dword [rbp - 0x44]
mov dword [rbp + 0x1a4], 0xc
lea ecx, [rdx + 0xc]
cmp ecx, edx
jb 0x140021a70
mov dword [rbp - 0x44], ecx
jmp 0x14001fe5e
mov ecx, r11d
mov rdx, qword [rbp - 0x40]
cmp dword [rbp - 0x48], r11d
jbe 0x14001fe2a
mov eax, dword [rdx]
add eax, 4
cmp eax, r15d
jb 0x140021a70
mov dword [rbp + 0x1a4], eax
mov r8d, eax
add r8, rdx
cmp r8, rdx
jb 0x140021a70
inc ecx
mov rdx, r8
cmp ecx, dword [rbp - 0x48]
jb 0x14001fdfd
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x140021a70
mov ecx, dword [rbp - 0x44]
lea rax, [rdx + 0xc]
add rcx, qword [rbp - 0x40]
cmp rax, rcx
ja 0x140021a70
mov dword [rdx], 8
mov rax, qword [rbp + 0x250]
mov qword [r8], rax
mov ecx, dword [rbp - 0x44]
inc dword [rbp - 0x48]
mov dword [rbp + 0x318], 0xc
mov r9, r11
mov qword [rbp - 0x80], r11
mov r8d, r11d
mov dword [rsp + 0x78], r11d
mov qword [rbp + 0x128], r11
mov r13, r11
mov qword [rbp], r11
mov dword [rsp + 0x50], r11d
mov qword [rbp - 0x28], r11
mov dword [rbp - 4], r11d
mov qword [rbp - 0x70], r11
mov qword [rbp - 0x68], r11
mov dword [rbp + 0x4c], r11d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x390], rax
lea eax, [rcx + 8]
mov edx, 0xc0000095
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
sbb esi, esi
and esi, edx
cmp eax, 8
jb 0x14001ffc1
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x14001fee3
mov esi, edx
jmp 0x14001ffc1
mov dword [rbp + 0xd0], eax
mov esi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov r12, rax
test rax, rax
jne 0x14001ff29
mov r8d, r11d
mov esi, 0xc0000017
mov r9d, r8d
jmp 0x14001ffc1
mov eax, dword [rbp - 0x48]
lea rdx, [r12 + 4]
mov dword [r12], eax
cmp rdx, r12
jb 0x14001ff85
mov eax, dword [rbp - 0x44]
lea rcx, [rdx + 4]
mov dword [rdx], eax
cmp rcx, rdx
jb 0x14001ff85
mov edx, dword [rbp + 0xd0]
mov esi, r11d
mov rax, qword [rbp + 0x390]
mov qword [rdx + r12 - 8], rax
mov r8d, dword [rbp - 0x44]
mov rdx, qword [rbp - 0x40]
call sub.msvcrt.dll_memcpy
mov r8d, dword [rbp + 0xd0]
xor r11d, r11d
mov r9, r12
mov qword [rbp - 0x80], r12
mov r12d, r11d
mov dword [rsp + 0x78], r8d
jmp 0x14001ff90
mov r8d, r11d
mov esi, 0xc0000095
mov r9d, r8d
test r12, r12
je 0x14001ffc1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r8d, dword [rsp + 0x78]
xor r11d, r11d
mov r9, qword [rbp - 0x80]
or esi, 0x10000000
jl 0x140020b17
mov qword [rbp + 0x1f0], r11
mov r12, r11
mov qword [rbp + 0x58], r11
test r9, r9
jne 0x14001ffea
mov esi, 0xc000000d
jmp 0x140020879
mov esi, r8d
mov qword [rbp - 0x38], rsi
test r8d, r8d
je 0x14002077d
lea rax, [rsi + 8]
mov qword [rbp - 0x20], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8, [rsi + 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x78], rax
mov rdx, rax
test rax, rax
je 0x14002077d
mov r9, qword [rbp - 0x80]
mov al, r11b
mov byte [rsp + 0x34], al
mov ecx, r11d
test rsi, rsi
je 0x140020059
xor al, byte [rcx + r9]
inc rcx
cmp rcx, rsi
jb 0x140020049
mov byte [rsp + 0x34], al
mov rcx, rdx
mov qword [rbp - 0x60], rdx
xor edx, edx
mov qword [rbp + 0x5b8], rbx
mov dword [rsp + 0x78], edx
mov r10d, r11d
mov dword [rsp + 0x40], edx
or r11d, 0xffffffff
mov rdx, rsi
and edx, 7
je 0x14002019b
mov dword [rsp + 0x40], r10d
mov ecx, r10d
mov dword [rsp + 0x78], ecx
mov r8d, r10d
mov r11d, r10d
test edx, edx
je 0x1400200ee
mov r10d, 0x38
mov edi, ecx
movzx r8d, byte [r9]
inc r9
cmp r11d, r15d
jge 0x1400200be
lea ecx, [r10 - 0x20]
shl r8d, cl
mov ecx, dword [rsp + 0x78]
or edi, r8d
jmp 0x1400200cf
mov ecx, r10d
shl r8d, cl
mov ecx, dword [rsp + 0x78]
or ecx, r8d
mov dword [rsp + 0x78], ecx
inc r11d
sub r10d, 8
cmp r11d, edx
jl 0x1400200a2
mov dword [rsp + 0x40], edi
movabs rdi, 0x7f1137fab69605e
mov r8d, dword [rsp + 0x40]
and dword [rsp + 0x48], r13d
mov r10d, r8d
mov r11d, ecx
xor r10d, 0xb17a307a
xor r11d, 0x42f6b18d
mov ecx, r10d
mov r8d, r11d
test edx, edx
je 0x140020166
mov rdi, qword [rbp - 0x60]
mov ebx, dword [rsp + 0x48]
lea r13, [rdi + 1]
mov qword [rbp - 0x18], r13
cmp ebx, r15d
jge 0x14002012e
rol ecx, 8
mov r13d, ecx
jmp 0x140020135
rol r8d, 8
mov r13d, r8d
mov byte [rdi], r13b
inc ebx
mov r13, qword [rbp - 0x18]
mov rdi, r13
cmp ebx, edx
jl 0x140020119
mov rcx, r13
movabs rbx, 0xc81ecb17b1b54a58
mov r13, qword [rbp - 0x70]
movabs rdi, 0x7f1137fab69605e
mov qword [rbp - 0x60], rcx
jmp 0x14002016a
mov rcx, qword [rbp - 0x60]
cmp edx, r15d
jbe 0x140020181
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
jmp 0x140020197
xor r11d, r11d
cmp edx, r15d
jae 0x14002019b
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x60]
mov rdx, rsi
shr rdx, 3
mov qword [rbp - 0x18], rdx
test rdx, rdx
je 0x1400204f4
movzx eax, word [rbp + 0x5ba]
lea r14, [rcx + 7]
mov rdi, qword [rbp - 0x18]
mov edx, ebx
xor edx, dword [rbp + 0x5bc]
mov r13d, dword [rsp + 0x78]
mov r15d, dword [rsp + 0x40]
mov dword [rsp + 0x48], edx
lea rdx, [r9 + 2]
mov r12d, dword [rsp + 0x48]
mov dword [rbp + 0x10], eax
movzx eax, word [rbp + 0x5bc]
movzx esi, bx
movzx ecx, byte [rdx - 1]
movzx r9d, byte [rdx - 2]
movzx r8d, byte [rdx + 2]
shl r9d, 8
or r9d, ecx
shl r8d, 8
movzx ecx, byte [rdx]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 1]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [rdx + 3]
or r8d, ecx
movzx ecx, byte [rdx + 4]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rdx + 5]
add rdx, 8
shl r8d, 8
or r8d, ecx
mov qword [rbp - 0x18], rdx
mov edx, dword [rbp + 0x5bc]
xor r11d, r8d
mov ecx, r11d
sub ecx, esi
xor ecx, dword [rbp + 0x5bc]
xor ecx, r9d
xor r10d, ecx
movzx ecx, word [rbp + 0x5ba]
xor edx, r10d
ror edx, 0xf
imul edx, ecx
mov ecx, r10d
ror ecx, 7
add edx, ecx
xor r11d, edx
mov ecx, r11d
ror ecx, 0xa
lea edx, [rbx + r11]
ror edx, 9
imul edx, eax
sub edx, ecx
movzx ecx, word [rbp + 0x5be]
xor r10d, edx
mov edx, eax
xor edx, r10d
rol edx, 4
imul edx, ecx
mov ecx, r10d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x5bc]
xor r11d, edx
mov edx, ebx
xor edx, r11d
sub ecx, edx
xor r10d, ecx
movzx ecx, word [rbp + 0x5ba]
mov edx, r10d
sub edx, esi
imul edx, ecx
mov ecx, r10d
shr ecx, 6
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r11d
ror ecx, 0xf
xor ecx, eax
imul ecx, esi
xor r10d, ecx
mov ecx, r10d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, eax
xor r11d, ecx
mov ecx, r11d
sub ecx, dword [rbp + 0x5bc]
sub ecx, esi
xor r10d, ecx
movzx ecx, word [rbp + 0x5be]
xor ecx, r10d
mov edx, r10d
imul ecx, dword [rbp + 0x10]
ror edx, 0xa
xor edx, ecx
xor r11d, edx
mov edx, esi
xor edx, r11d
mov ecx, r11d
rol edx, 6
imul edx, eax
ror ecx, 3
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r10d
ror ecx, 0xf
sub ecx, edx
imul ecx, esi
xor r11d, ecx
xor edx, r11d
mov ecx, r11d
imul edx, esi
shr ecx, 1
xor edx, ecx
mov ecx, r11d
xor r10d, edx
shr ecx, 0xf
mov edx, r11d
sub edx, eax
rol edx, 3
imul edx, esi
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, r10d
sub edx, eax
imul edx, ecx
mov ecx, r10d
shr ecx, 0xd
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 9
imul edx, eax
ror ecx, 0xb
xor edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r10d
sub ecx, edx
sub ecx, ebx
xor r11d, ecx
movzx ecx, word [rbp + 0x5ba]
xor ecx, r11d
mov edx, r11d
ror edx, 7
imul ecx, esi
sub ecx, edx
movzx edx, word [rbp + 0x5be]
xor r10d, ecx
movzx ecx, word [rbp + 0x5ba]
xor edx, r10d
rol edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 0x10
sub edx, ecx
xor r11d, edx
mov edx, ebx
sub edx, r11d
mov ecx, r11d
ror edx, 0xa
imul edx, eax
ror ecx, 4
add edx, ecx
xor r10d, edx
movzx ecx, word [rbp + 0x5be]
mov edx, r10d
sub edx, ebx
ror edx, 4
imul edx, ecx
mov ecx, r10d
ror ecx, 9
xor edx, ecx
xor r11d, edx
mov edx, dword [rbp + 0x5bc]
xor edx, r11d
mov ecx, r11d
rol edx, 8
imul edx, esi
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r10d, edx
mov edx, dword [rbp + 0x5bc]
sub edx, r10d
ror edx, 0xb
imul edx, ecx
mov ecx, r10d
ror ecx, 0xc
sub edx, ecx
xor r11d, edx
movzx edx, word [rbp + 0x5ba]
xor edx, r11d
mov ecx, r11d
xor r11d, r12d
imul edx, eax
shr ecx, 8
xor edx, ecx
xor r10d, edx
mov rdx, qword [rbp - 0x18]
xor r11d, r10d
xor r10d, r15d
mov byte [r14 - 4], r10b
xor r11d, r13d
mov byte [r14], r11b
mov r15d, r9d
ror r10d, 8
mov r13d, r8d
mov byte [r14 - 5], r10b
lea r14, [r14 + 8]
ror r11d, 8
mov byte [r14 - 9], r11b
ror r10d, 8
mov byte [r14 - 0xe], r10b
ror r11d, 8
mov byte [r14 - 0xa], r11b
ror r10d, 8
ror r11d, 8
mov byte [r14 - 0xf], r10b
mov byte [r14 - 0xb], r11b
ror r11d, 8
ror r10d, 8
sub rdi, 1
jne 0x1400201ea
mov al, byte [rsp + 0x34]
movabs rdi, 0x7f1137fab69605e
mov r14d, dword [rsp + 0x30]
mov r15d, 4
mov r13, qword [rbp - 0x70]
mov r12, qword [rbp + 0x58]
mov rsi, qword [rbp - 0x38]
movzx ecx, al
mov rax, qword [rbp - 0x78]
mov qword [rax + rsi], rcx
mov rsi, qword [rbp - 0x20]
mov qword [rbp + 0x518], rsi
mov qword [rbp + 0x1f0], rax
lea rax, [0x14002c230]
mov ebx, 8
mov qword [rbp + 0x520], rax
mov qword [rbp + 0x528], rbx
lea rax, [0x14002c190]
mov qword [rbp + 0x538], 0xa0
mov qword [rbp + 0x530], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [rbx + 0x28]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, rax
test rax, rax
jne 0x14002057a
mov esi, 0xc0000017
jmp 0x14002076d
mov esi, esi
mov dword [rax], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x1400205b3
mov esi, 0xc0000017
jmp 0x1400206a3
mov qword [rbx + 8], rax
mov rdx, qword [rbp - 0x78]
mov r8, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov esi, 0xa0
mov dword [rbx + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov esi, 8
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x1400205a9
mov qword [rbx + 0x18], rax
lea rcx, [0x14002c190]
movups xmm0, xmmword [rcx]
lea edx, [rsi + 0x78]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax + rdx - 0x10], xmm1
movups xmm0, xmmword [rcx + rdx]
movups xmmword [rax + rdx], xmm0
movups xmm1, xmmword [rcx + rdx + 0x10]
movups xmmword [rax + rdx + 0x10], xmm1
mov dword [rbx + 0x20], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, esi
mov edx, esi
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rcx, rax
test rax, rax
je 0x1400205a9
mov qword [rbx + 0x28], rax
mov rax, qword [0x14002c230]
mov r12, rbx
mov qword [rcx], rax
mov esi, r11d
mov ebx, r11d
test rbx, rbx
je 0x14002076d
mov rax, qword [rbx + 8]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x1400206e1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 8], r11
mov rax, qword [rbx + 0x18]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140020716
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 0x18], r11
mov rax, qword [rbx + 0x28]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x14002074a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x140020782
mov qword [rbp + 0x128], r12
mov r12, r11
jmp 0x140020782
mov esi, 0xc0000001
mov rbx, qword [rbp + 0x1f0]
test rbx, rbx
je 0x1400207b8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x1f0], r11
test r12, r12
je 0x140020879
mov rbx, qword [r12 + 8]
test rbx, rbx
je 0x1400207f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 8], r11
mov rbx, qword [r12 + 0x18]
test rbx, rbx
je 0x140020825
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 0x18], r11
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x140020856
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r12 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
or esi, 0x10000000
jl 0x140020b17
mov r12, qword [rbp + 0x128]
mov ecx, dword [r12]
mov r8d, dword [r12 + 0x20]
add ecx, 4
mov edx, dword [r12 + 0x10]
cmp ecx, r15d
jb 0x1400209ed
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400209ed
lea ecx, [rax + rdx]
cmp ecx, eax
jb 0x1400209ed
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x1400209ed
lea ecx, [rax + r8]
cmp ecx, eax
jb 0x1400209ed
mov dword [rbp + 0x138], ecx
mov ebx, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
jne 0x140020916
mov esi, 0xc0000017
mov r9d, 0xc0000095
jmp 0x1400209f6
mov eax, dword [r12]
lea rsi, [rbx + 4]
mov dword [rbx], eax
cmp rsi, rbx
jb 0x1400209ba
mov r8d, dword [r12]
mov rcx, rsi
mov rdx, qword [r12 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12]
add rcx, rsi
cmp rcx, rsi
jb 0x1400209ba
mov eax, dword [r12 + 0x10]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x1400209ba
mov r8d, dword [r12 + 0x10]
mov rcx, rsi
mov rdx, qword [r12 + 0x18]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r12 + 0x10]
add rcx, rsi
cmp rcx, rsi
jb 0x1400209ba
mov eax, dword [r12 + 0x20]
lea rsi, [rcx + 4]
mov dword [rcx], eax
cmp rsi, rcx
jb 0x1400209ba
mov r8d, dword [r12 + 0x20]
mov rcx, rsi
mov rdx, qword [r12 + 0x28]
call sub.msvcrt.dll_memcpy
mov eax, dword [r12 + 0x20]
add rax, rsi
cmp rax, rsi
jb 0x1400209ba
xor eax, eax
mov qword [rbp], rbx
mov esi, eax
mov ebx, eax
mov eax, dword [rbp + 0x138]
mov dword [rsp + 0x50], eax
jmp 0x1400209bf
mov esi, 0xc0000095
test rbx, rbx
je 0x14002090b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x14002090b
mov r9d, 0xc0000095
mov esi, r9d
mov r12d, 0x10000000
or esi, r12d
jl 0x140020b14
xor ebx, ebx
mov dword [rbp + 0x50], ebx
mov dword [rbp + 0x368], 0x1c
lea eax, [rbx + 0x28]
mov dword [rbp + 0x378], eax
mov dword [rbp + 0x3a8], eax
cmp qword [rbp - 0x40], rbx
jne 0x140020a33
mov esi, 0xc000000d
jmp 0x140020e1d
cmp dword [rbp - 0x48], 1
jbe 0x140020a29
mov rax, qword [rbp - 0x40]
mov edx, ebx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140020e1a
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x140020e1a
inc edx
cmp edx, 1
jb 0x140020a3f
mov r8d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140020e1a
test r8d, r8d
mov dword [rbp + 0x50], r8d
mov rax, rbx
cmovne rax, rcx
mov qword [rbp + 0x540], rax
cmp dword [rbp - 0x48], 2
jbe 0x140020a29
mov rax, qword [rbp - 0x40]
mov edx, ebx
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140020e1a
mov eax, dword [rax]
add rax, rcx
cmp rax, rcx
jb 0x140020e1a
inc edx
cmp edx, 2
jb 0x140020a92
mov edx, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x140020e1a
test edx, edx
mov dword [rbp + 0x3ac], edx
mov rax, rbx
cmovne rax, rcx
mov qword [rbp + 0x548], rax
lea eax, [r8 + 0x30]
cmp eax, 0x30
jb 0x140020e1a
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x140020e1a
lea eax, [rcx + rdx]
cmp eax, ecx
jb 0x140020e1a
mov dword [rbp + 0x3b0], eax
mov esi, ebx
cmp eax, 0x400000
jbe 0x140020e15
mov esi, 0x8000ffff
xor r11d, r11d
mov rbx, qword [rbp - 0x80]
test rbx, rbx
je 0x140020b43
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r12, qword [rbp + 0x128]
test r12, r12
je 0x140020c12
mov rbx, qword [r12 + 8]
test rbx, rbx
je 0x140020b85
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 8], r11
mov rbx, qword [r12 + 0x18]
test rbx, rbx
je 0x140020bb7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r12 + 0x18], r11
mov rbx, qword [r12 + 0x28]
test rbx, rbx
je 0x140020be8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r12 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0x128], r11
mov rbx, qword [rbp]
test rbx, rbx
je 0x140020c3e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, qword [rbp - 0x28]
test rbx, rbx
je 0x140020c6a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x140020d25
mov rbx, qword [r13 + 8]
test rbx, rbx
je 0x140020ca3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 8], r11
mov rbx, qword [r13 + 0x18]
test rbx, rbx
je 0x140020cd3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [r13 + 0x18], r11
mov rbx, qword [r13 + 0x28]
test rbx, rbx
je 0x140020d02
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r13 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140020d51
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test esi, esi
js 0x140020e04
mov ecx, dword [rbp + 0xe8]
cmp ecx, 1
jb 0x140020e04
mov rbx, qword [rbp + 0xf0]
test rbx, rbx
je 0x140020e04
test ecx, ecx
je 0x140020e04
mov edx, dword [rbx]
lea r8, [rbx + 4]
cmp r8, rbx
jb 0x140020e04
test edx, edx
mov dword [rbp + 0x3b8], edx
mov rax, r11
cmovne rax, r8
mov qword [rbp + 0x550], rax
cmp edx, r15d
jne 0x140020e04
mov eax, dword [rax]
mov dword [rbp + 0x2c8], eax
test eax, eax
js 0x140020e04
cmp ecx, 1
jbe 0x140020e04
mov ecx, r11d
lea rdx, [rbx + 4]
cmp rdx, rbx
jb 0x140020e04
mov ebx, dword [rbx]
add rbx, rdx
cmp rbx, rdx
jb 0x140020e04
inc ecx
cmp ecx, 1
jb 0x140020dba
mov ecx, dword [rbx]
lea rdx, [rbx + 4]
cmp rdx, rbx
jb 0x140020e04
test ecx, ecx
mov dword [rbp + 0x3c0], ecx
mov rax, r11
cmovne rax, rdx
mov qword [rbp + 0x558], rax
cmp ecx, 8
jne 0x140020e04
mov rax, qword [rax]
mov qword [rbp + 0x560], rax
mov r13, qword [rsp + 0x38]
mov r12, qword [rbp + 0x5c0]
jmp 0x140021a73
mov dword [rbp - 4], eax
jmp 0x140020e1d
mov esi, r9d
test esi, esi
js 0x140020b14
mov ebx, dword [rbp - 4]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, ebx
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x140020e5d
mov esi, 0xd0000017
mov ebx, r11d
jmp 0x140020e67
mov rbx, rax
mov qword [rbp - 0x28], rax
mov esi, r12d
test esi, esi
js 0x140020b17
mov rax, qword [rbp]
test rax, rax
jne 0x140020e82
mov esi, 0x80070057
jmp 0x140020b17
test rbx, rbx
je 0x140020e78
mov qword [rbp + 0x3c8], rax
lea r8, [rbp + 0x398]
mov eax, dword [rsp + 0x50]
lea rdx, [0x140027fe0]
mov dword [rbp + 0x3d8], eax
mov ecx, 1
mov eax, dword [rbp - 4]
mov dword [rbp + 0x3dc], eax
mov qword [rbp + 0x3d0], rbx
mov dword [rbp + 0x3e0], r11d
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x140020efa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x140020ef5
mov esi, 0x80004005
mov edx, dword [rbp - 4]
jmp 0x140020f46
mov rcx, qword [rbp + 0x398]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140020ed2
xor r9d, r9d
lea rdx, [rbp + 0x3c8]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x140027d60]
mov edx, dword [rbp - 4]
mov esi, eax
or esi, 0x10000000
cmovge edx, dword [rbp + 0x3dc]
mov dword [rbp - 4], edx
xor r11d, r11d
cmp esi, 0xd0000023
jne 0x140020f5b
mov esi, 0x8007007a
jmp 0x140020b17
test esi, esi
js 0x140020b17
mov qword [rbp - 0x20], r11
cmp edx, r15d
jae 0x140020f76
mov esi, 0xc000003e
jmp 0x140021354
mov ecx, dword [rbx]
lea r8, [rbx + 4]
mov dword [rsp + 0x48], ecx
cmp r8, rbx
jb 0x14002134f
lea eax, [rdx - 4]
cmp eax, ecx
jb 0x140020f6c
lea r10, [r8 + rcx]
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x18], r10
cmp r10, r8
jb 0x14002134f
lea r9d, [rcx + 4]
cmp r9d, r15d
jb 0x14002134f
mov eax, edx
sub eax, r9d
cmp eax, r15d
jb 0x140020f6c
mov esi, dword [r10]
lea r8, [r10 + 4]
cmp r8, r10
jb 0x14002134f
lea r10d, [r9 + 4]
cmp r10d, r9d
jb 0x14002134f
mov eax, edx
sub eax, r10d
cmp eax, esi
jb 0x140020f6c
lea r11, [r8 + rsi]
cmp r11, r8
jb 0x14002134c
lea r9d, [rsi + r10]
cmp r9d, r10d
jb 0x14002134c
mov eax, edx
sub eax, r9d
cmp eax, r15d
jae 0x140021013
mov esi, 0xc000003e
xor r11d, r11d
jmp 0x140021354
mov r12d, dword [r11]
lea rax, [r11 + 4]
mov qword [rbp + 0x58], rax
cmp rax, r11
jb 0x14002134c
lea r8d, [r9 + 4]
cmp r8d, r9d
jb 0x14002134c
mov eax, edx
sub eax, r8d
cmp eax, r12d
jb 0x140021006
lea r9d, [r8 + r12]
cmp r9d, r8d
jb 0x14002134c
cmp edx, r9d
jne 0x140021006
add ecx, esi
mov eax, edx
add ecx, r12d
add rcx, 0xc
cmp rcx, rax
jne 0x140021006
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rbx, rax
test rax, rax
jne 0x140021099
mov esi, 0xc0000017
jmp 0x140021275
mov r13, qword [rbp - 0x28]
add r13, 4
je 0x1400210f7
mov eax, dword [rsp + 0x48]
mov dword [rbx], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x78]
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
jne 0x1400210df
mov esi, 0xc0000017
jmp 0x1400211ba
mov qword [rbx + 8], rax
mov r8, qword [rbp - 0x78]
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x1400210fe
mov dword [rax], r11d
mov qword [rax + 8], r11
mov r13, qword [rbp - 0x18]
add r13, 4
je 0x14002114d
mov dword [rbx + 0x10], esi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x1400210d5
mov qword [rbx + 0x18], rax
mov r8, rsi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x140021155
mov dword [rbx + 0x10], r11d
mov qword [rbx + 0x18], r11
mov rsi, qword [rbp + 0x58]
test rsi, rsi
je 0x1400211a8
mov dword [rbx + 0x20], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
test rax, rax
je 0x1400210d5
mov qword [rbx + 0x28], rax
mov r8, r12
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r11d, r11d
jmp 0x1400211b0
mov dword [rbx + 0x20], r11d
mov qword [rbx + 0x28], r11
mov qword [rbp - 0x20], rbx
mov esi, r11d
mov rbx, r11
test rbx, rbx
je 0x140021275
mov r12, qword [rbx + 8]
test r12, r12
je 0x1400211f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 8], r11
mov r12, qword [rbx + 0x18]
test r12, r12
je 0x140021223
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 0x18], r11
mov r12, qword [rbx + 0x28]
test r12, r12
je 0x140021252
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov r13, qword [rbp - 0x20]
test esi, esi
mov rbx, r11
cmovs rbx, qword [rbp - 0x20]
cmovs r13, r11
mov qword [rbp - 0x70], r13
test rbx, rbx
je 0x140021354
mov r12, qword [rbx + 8]
test r12, r12
je 0x1400212c4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 8], r11
mov r12, qword [rbx + 0x18]
test r12, r12
je 0x1400212f4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbx + 0x18], r11
mov r12, qword [rbx + 0x28]
test r12, r12
je 0x140021323
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp - 0x70], r13
jmp 0x14002100b
xor r11d, r11d
mov esi, 0xc0000095
or esi, 0x10000000
jl 0x140020b17
mov qword [rbp - 0x78], r11
mov rbx, r11
mov qword [rbp + 0x90], rbx
mov r12, r11
test r13, r13
jne 0x140021380
mov esi, 0xd000000d
jmp 0x140020b17
mov rax, qword [r13 + 8]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140021376
cmp dword [r13], r11d
je 0x140021376
mov esi, dword [r13]
mov dword [rsp + 0x50], r11d
test rsi, rsi
je 0x1400218b9
add rsi, 0xfffffffffffffff8
mov qword [rbp + 0x58], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x30], rax
mov r8, rax
test rax, rax
je 0x1400218b2
mov r10, qword [rbp - 0x60]
mov rdx, rsi
mov qword [rbp + 0x5b8], rdi
mov al, r11b
mov byte [rsp + 0x34], al
mov rcx, r8
mov qword [rbp - 0x20], rcx
mov ebx, r11d
and edx, 7
je 0x140021500
mov dword [rsp + 0x54], ebx
mov ecx, r11d
mov dword [rbp + 8], ecx
test edx, edx
je 0x14002145b
lea edi, [r11 + 0x38]
movzx r9d, byte [r10]
inc r10
cmp r11d, r15d
jge 0x140021434
lea ecx, [rdi - 0x20]
shl r9d, cl
mov ecx, dword [rbp + 8]
or ebx, r9d
jmp 0x140021442
mov ecx, edi
shl r9d, cl
mov ecx, dword [rbp + 8]
or ecx, r9d
mov dword [rbp + 8], ecx
inc r11d
sub edi, 8
cmp r11d, edx
jl 0x14002141a
mov dword [rsp + 0x54], ebx
movabs rdi, 0x7f1137fab69605e
and dword [rsp + 0x48], 0
mov r11d, ebx
mov ebx, ecx
xor r11d, 0x92f65a5
xor ebx, 0x699a899c
mov ecx, r11d
mov r9d, ebx
test edx, edx
je 0x1400214cd
mov r12d, dword [rsp + 0x48]
mov rdi, r8
lea r13, [rdi + 1]
mov qword [rbp - 0x18], r13
cmp r12d, r15d
jge 0x140021499
rol ecx, 8
mov r13d, ecx
jmp 0x1400214a0
rol r9d, 8
mov r13d, r9d
mov byte [rdi], r13b
inc r12d
mov r13, qword [rbp - 0x18]
mov rdi, r13
cmp r12d, edx
jl 0x140021484
mov r12, qword [rbp - 0x78]
mov rcx, r13
mov r13, qword [rbp - 0x70]
movabs rdi, 0x7f1137fab69605e
mov qword [rbp - 0x20], rcx
jmp 0x1400214d0
mov rcx, r8
cmp edx, r15d
jbe 0x1400214e5
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr ebx, cl
shl ebx, cl
jmp 0x1400214fa
xor ebx, ebx
cmp edx, r15d
jae 0x140021505
mov ecx, r15d
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov rcx, qword [rbp - 0x20]
jmp 0x140021505
mov dword [rsp + 0x54], r11d
mov rdx, rsi
shr rdx, 3
test rdx, rdx
je 0x14002181b
movzx eax, word [rbp + 0x5ba]
lea rsi, [rcx + 7]
mov r15d, dword [rbp + 0x5bc]
lea r13, [r10 + 2]
mov r12d, dword [rsp + 0x54]
mov dword [rsp + 0x48], eax
movzx eax, di
mov dword [rsp + 0x40], eax
mov rax, rdx
movzx r14d, r15w
movzx ecx, byte [r13 - 1]
movzx r10d, byte [r13 - 2]
movzx r9d, byte [r13 + 2]
shl r10d, 8
or r10d, ecx
shl r9d, 8
movzx ecx, byte [r13]
lea r13, [r13 + 8]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [r13 - 7]
shl r10d, 8
or r10d, ecx
movzx ecx, byte [r13 - 5]
or r9d, ecx
xor r11d, r10d
movzx ecx, byte [r13 - 4]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r13 - 3]
shl r9d, 8
or r9d, ecx
xor ebx, r9d
xor ebx, r11d
xor ebx, edi
xor ebx, r15d
mov ecx, ebx
mov r8d, ebx
sub ecx, edi
rol ebx, 0xa
rol ecx, 5
imul ecx, r14d
add ecx, ebx
movzx ebx, word [rbp + 0x5ba]
xor r11d, ecx
mov ecx, r11d
rol ecx, 2
lea edx, [r11 + r15]
ror edx, 9
imul edx, ebx
sub edx, ecx
xor r8d, edx
mov edx, r8d
mov ecx, r8d
sub edx, r14d
shr ecx, 0xd
imul edx, dword [rsp + 0x40]
sub edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
xor edx, ebx
rol ecx, 2
movzx ebx, word [rbp + 0x5be]
rol edx, 6
imul edx, ebx
sub edx, ecx
mov ecx, r15d
xor r8d, edx
mov edx, r8d
xor edx, edi
sub ecx, edx
xor r11d, ecx
mov ecx, r11d
mov edx, r11d
ror edx, 6
xor ecx, r14d
imul ecx, dword [rsp + 0x48]
xor edx, ecx
xor r8d, edx
mov ecx, r8d
rol ecx, 2
lea edx, [r8 + r15]
ror edx, 0xf
imul edx, dword [rsp + 0x40]
add edx, ecx
xor r11d, edx
mov edx, r11d
sub edx, edi
ror edx, 0xe
imul edx, ebx
mov ecx, r11d
rol ecx, 8
sub edx, ecx
xor r8d, edx
mov edx, r8d
mov ecx, r8d
xor edx, edi
ror ecx, 0xa
ror edx, 0xc
imul edx, r14d
xor edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, ebx
imul edx, ecx
mov ecx, r11d
shr ecx, 0xa
xor edx, ecx
xor r8d, edx
movzx edx, word [rbp + 0x5be]
mov ecx, r8d
not ecx
ror ecx, 5
add ecx, dword [rsp + 0x40]
imul ecx, ebx
xor r11d, ecx
mov ebx, r11d
sub ebx, edx
xor ebx, r8d
movzx r8d, word [rbp + 0x5be]
xor ebx, edi
mov edx, ebx
mov ecx, ebx
xor edx, r8d
shr ecx, 2
rol edx, 2
imul edx, r14d
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
sub edx, r15d
ror edx, 6
imul edx, ecx
mov ecx, r11d
rol ecx, 7
add edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
ror edx, 9
xor ecx, r14d
imul ecx, dword [rsp + 0x40]
add edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, ecx
mov ecx, r11d
rol edx, 5
rol ecx, 7
imul edx, r8d
add edx, ecx
xor ebx, edx
movzx edx, word [rbp + 0x5ba]
xor r11d, ebx
xor r11d, edi
xor r11d, r15d
mov ecx, r11d
ror ecx, 3
sub ecx, edx
imul ecx, r14d
xor ebx, ecx
mov edx, ebx
mov ecx, ebx
sub edx, r15d
ror ecx, 6
ror edx, 1
imul edx, dword [rsp + 0x40]
sub edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 0xe
lea edx, [r11 + rdi]
rol edx, 3
imul edx, r8d
add edx, ecx
xor ebx, edx
mov ecx, ebx
ror ecx, 0xe
lea edx, [rbx + rdi]
rol edx, 0xf
imul edx, r14d
sub edx, ecx
movzx ecx, word [rbp + 0x5ba]
xor r11d, edx
mov edx, r11d
xor edx, dword [rsp + 0x40]
imul edx, ecx
mov ecx, r11d
shr ecx, 3
xor edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor ebx, dword [rbp + 8]
xor edx, r15d
rol edx, 4
imul edx, dword [rsp + 0x40]
rol ecx, 2
mov dword [rbp + 8], r9d
xor edx, ecx
xor edx, r12d
mov r12d, r10d
xor r11d, edx
mov byte [rsi - 4], r11b
mov byte [rsi], bl
lea rsi, [rsi + 8]
ror r11d, 8
mov byte [rsi - 0xd], r11b
ror ebx, 8
mov byte [rsi - 9], bl
ror r11d, 8
mov byte [rsi - 0xe], r11b
ror ebx, 8
mov byte [rsi - 0xa], bl
ror r11d, 8
ror ebx, 8
mov byte [rsi - 0xf], r11b
mov byte [rsi - 0xb], bl
ror ebx, 8
ror r11d, 8
sub rax, 1
jne 0x140021542
mov al, byte [rsp + 0x34]
mov r15d, 4
mov r14d, dword [rsp + 0x30]
mov r13, qword [rbp - 0x70]
mov r12, qword [rbp - 0x78]
mov rsi, qword [rbp + 0x58]
mov r8, qword [rbp - 0x30]
xor r11d, r11d
mov ecx, r11d
test rsi, rsi
je 0x140021832
xor al, byte [rcx + r8]
inc rcx
cmp rcx, rsi
jb 0x140021826
movzx ecx, al
mov rax, qword [rbp - 0x60]
cmp rcx, qword [rsi + rax]
je 0x14002184d
mov rbx, qword [rbp + 0x90]
mov edi, 0xc004d501
jmp 0x140021865
mov edi, dword [rsp + 0x50]
mov rbx, r8
mov qword [rbp + 0x90], rbx
mov r8, r11
mov qword [rbp - 0x30], r11
mov r12, rsi
test r8, r8
je 0x140021895
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rbx, qword [rbp + 0x90]
xor r11d, r11d
test edi, edi
js 0x1400218b9
mov qword [rbp - 0x68], rbx
mov esi, 0x10000000
mov rbx, r11
mov dword [rbp + 0x4c], r12d
mov qword [rbp + 0x90], rbx
jmp 0x1400218c2
mov rbx, qword [rbp + 0x90]
mov r12d, dword [rbp + 0x4c]
mov esi, 0xd0000001
test rbx, rbx
je 0x1400218f5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r12d, dword [rbp + 0x4c]
xor r11d, r11d
mov qword [rbp + 0x90], r11
test esi, esi
js 0x140020b17
cmp r12d, r15d
jae 0x14002190c
mov esi, 0xc000003e
jmp 0x140021a67
mov r10, qword [rbp - 0x68]
mov r9d, dword [r10]
lea rcx, [r10 + 4]
mov dword [rsp + 0x48], r9d
cmp rcx, r10
jb 0x140021a62
lea eax, [r12 - 4]
cmp eax, r15d
jb 0x140021902
mov edi, dword [rcx]
lea rbx, [rcx + 4]
cmp rbx, rcx
jb 0x140021a62
lea eax, [r12 - 8]
cmp eax, edi
jb 0x140021902
lea eax, [rdi + 8]
cmp eax, 8
jb 0x140021a62
mov ecx, r12d
lea rdx, [rbx + rdi]
mov r8d, edi
lea rax, [rcx + r10]
cmp rax, rdx
jb 0x140021902
sub rcx, rbx
sub rcx, rdi
add rcx, r10
cmp rcx, 8
jae 0x140021902
mov rsi, r11
mov r12d, r11d
test rbx, rbx
je 0x1400219e7
mov rcx, rbx
cmp rdx, rbx
jb 0x140021a62
jbe 0x1400219e2
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x140021a62
cmp rax, rdx
ja 0x1400219d1
mov eax, dword [rcx]
add eax, 4
cmp eax, r15d
jb 0x1400219db
mov dword [rbp + 0x3b4], eax
mov r9d, eax
add r9, rcx
cmp r9, rcx
jb 0x140021a62
mov rcx, r9
cmp r9, rdx
ja 0x1400219d1
inc r12d
cmp rcx, rdx
jae 0x1400219e5
jmp 0x14002198e
mov esi, 0xc000000d
jmp 0x140021a67
mov esi, 0xc0000095
jmp 0x140021a4d
cmp rcx, rdx
jne 0x1400219d1
test edi, edi
je 0x140021a23
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
mov edx, 8
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
xor r11d, r11d
mov rsi, rax
test rax, rax
jne 0x140021a20
mov esi, 0xc0000017
jmp 0x140021a4d
mov r8, rdi
test rbx, rbx
je 0x140021a36
mov rdx, rbx
mov rcx, rsi
call sub.msvcrt.dll_memcpy
xor r11d, r11d
mov qword [rbp + 0xf0], rsi
mov dword [rbp + 0xec], edi
mov dword [rbp + 0xe8], r12d
mov esi, r11d
test esi, esi
js 0x140021a67
mov eax, dword [rsp + 0x48]
cmp eax, dword [rbp + 0xe8]
je 0x140021a67
jmp 0x140021902
mov esi, 0xc0000095
bts esi, 0x1c
jmp 0x140020b17
mov r12, rsi
mov rbx, qword [rbp - 0x40]
mov dword [rbp - 0x44], r11d
mov dword [rbp - 0x48], r11d
test rbx, rbx
je 0x140021aab
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp - 0x40], r11
mov rbx, qword [rbp + 0xf0]
mov dword [rbp + 0xec], r11d
mov dword [rbp + 0xe8], r11d
test rbx, rbx
je 0x140021aef
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov qword [rbp + 0xf0], r11
test r12, r12
je 0x140021b17
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
test r13, r13
je 0x140021b3f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r11d, r11d
mov eax, dword [rbp + 0x1c]
xor r12d, r12d
mov ebx, dword [rbp + 0x98]
mov dword [rbp + 0x144], eax
mov rax, qword [rbp + 0x70]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x70], r11
jmp 0x140021b68
xor r12d, r12d
mov ebx, dword [rbp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.14000b280
test r14d, r14d
jns 0x140021bbb
cmp r14d, 0xd0000034
jne 0x140021b89
mov edi, 0xc004f012
jmp 0x140021c0f
cmp r14d, 0xd00000e5
je 0x140021bb0
cmp r14d, 0xc004d501
je 0x140021bb0
cmp r14d, 0xd000003e
jne 0x140021bab
mov edi, 0xc004f028
jmp 0x140021c0f
mov edi, r14d
jmp 0x140021bb5
mov edi, 0xc004f027
test edi, edi
js 0x140021c0f
jmp 0x140021bc1
mov edi, dword [rbp + 0x140]
sub ebx, 1
je 0x140021bdd
sub ebx, 2
je 0x140021bd5
cmp ebx, 1
je 0x140021be3
mov r15d, r12d
jmp 0x140021be3
mov r15d, 3
jmp 0x140021be3
mov r15d, 1
mov eax, dword [rbp + 0x144]
mov dword [rbp + 0x148], r15d
mov dword [rbp + 0x9c], eax
test eax, eax
je 0x140021c0f
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xf8], r12
lea rcx, [rbp + 0xf8]
call fcn.14000b280
mov ebx, edi
test edi, edi
jns 0x140021c25
mov ecx, edi
jmp 0x140021c63
cmp dword [rbp + 0x148], 1
jne 0x140021c5a
cmp dword [rbp + 0x9c], 2
jb 0x140021c5a
test byte [rbp + 0x9c], 1
jne 0x140021c5a
mov rax, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x3a0]
mov qword [rbp + 0x130], r12
mov qword [rcx], rax
jmp 0x140021c68
mov eax, 0x8000ffff
mov ebx, eax
mov ecx, eax
call fcn.140001c64
mov ecx, ebx
call fcn.140001c84
lea rcx, [rbp + 0x130]
call fcn.14000b280
mov eax, ebx
mov rcx, qword [rbp + 0x5c8]
xor rcx, rsp
call fcn.140025bf0
lea r11, [rsp + 0x6d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret