Function at 0x140017bb4
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7c8]
sub rsp, reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x1400398a8]
xor rax, rsp
mov qword [rbp + 0x7b0], rax
lea r11, [0x140000000]
mov ebx, 1
mov rdi, r9
mov rsi, r8
mov qword [rbp - 0x78], rdx
mov r13, rcx
mov qword [rsp + 0x78], rcx
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
lea r15d, [rbx + 0x3e]
cmp r9, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rdx, dword [0x14000003c]
mov ecx, dword [rdx + r11 + 0x50]
add rcx, r11
cmp r9, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140043070]
mov r8d, r9d
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d60]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor r12d, r12d
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [r12 + 4]
mov r10d, dword [0x140042fbc]
lea r15, [r12 + 8]
mov r12d, dword [r12]
and eax, 0xf
xor r8d, r8d
shr r12, 3
add r15, rax
and r12, r14
mov qword [rbp - 0x80], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
sub r10, r12
mov qword [rsp + 0x70], r12
inc r10
mov r9, r10
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x48], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x308], 0
and qword [rbp + 0x310], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x50], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x2f4], r8d
mov dword [rbp + 0x31c], r8d
movq rax, xmm0
movd dword [rbp + 0x2fc], xmm0
movd dword [rbp + 0x324], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x300], eax
mov dword [rbp + 0x328], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x2f0], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x2f8], edx
mov dword [rbp + 0x304], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x320], edx
mov dword [rbp + 0x318], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x32c], eax
lea rax, [rbp + 0x530]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0xb0]
mov r8, rdi
mov qword [rsp + 0x58], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0xc4]
mov ecx, dword [rbp + 0xec]
mov edx, dword [rbp + 0xe8]
mov r8d, dword [rbp + 0xe4]
mov r9d, dword [rbp + 0xe0]
mov r10d, dword [rbp + 0xdc]
mov r11d, dword [rbp + 0xd8]
mov esi, dword [rbp + 0xd4]
mov r14d, dword [rbp + 0xd0]
mov r15d, dword [rbp + 0xcc]
mov r12d, dword [rbp + 0xc8]
mov r13d, dword [rbp + 0xc0]
mov ebx, dword [rbp + 0xbc]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0xb8]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0xb4]
mov qword [rsp + 0x68], 3
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0xb0]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x24]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x28]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0xb4], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0xb8], eax
add eax, dword [rsp + 0x24]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x28]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0xb0], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0xe0], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x68]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0xec], ecx
mov dword [rbp + 0xd0], r14d
mov r14, qword [rsp + 0x40]
mov dword [rbp + 0xcc], r15d
mov r15, qword [rbp - 0x80]
mov dword [rbp + 0xc8], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0xc4], edi
mov dword [rbp + 0xc0], r13d
mov r13, qword [rsp + 0x58]
mov dword [rbp + 0xbc], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0xe8], edx
mov dword [rbp + 0xe4], r8d
mov dword [rbp + 0xdc], r10d
mov dword [rbp + 0xd8], r11d
mov dword [rbp + 0xd4], esi
mov eax, dword [rbp + rcx + 0x2f0]
add rcx, 4
add dword [rbp + rcx + 0xac], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x530]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x310]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x50]
lea rdx, [rbp + 0x530]
mov r8, rdi
lea rax, [rsi + r13]
mov cl, byte [rax + rdx]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x48], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x40], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + rdx*8]
lea r11, [0x140000000]
and r12d, r14d
and eax, r15d
add r12d, eax
add r12, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x48]
xor ecx, ecx
mov al, byte [rcx + r9]
inc r8d
xor al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
mov eax, dword [0x140042fbc]
mov rax, rsi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140043078]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049cf0]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [rdx + 4]
mov r12d, dword [rdx]
mov r10d, dword [0x140042fbc]
and r12, r14
and eax, 0xf
lea r15, [rdx + 8]
add r15, rax
sub r10, r12
xor r8d, r8d
inc r10
mov qword [rsp + 0x70], r12
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
mov r9, r10
mov qword [rsp + 0x50], r15
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x348], 0
and qword [rbp + 0x350], 0
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x70], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x334], r8d
mov dword [rbp + 0x35c], r8d
movq rax, xmm0
movd dword [rbp + 0x33c], xmm0
movd dword [rbp + 0x364], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x340], eax
mov dword [rbp + 0x368], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x330], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x338], edx
mov dword [rbp + 0x344], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x360], edx
mov dword [rbp + 0x358], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x36c], eax
lea rax, [rbp + 0x6f0]
sub rax, r15
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x30]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x44]
mov ecx, dword [rbp + 0x6c]
mov edx, dword [rbp + 0x68]
mov r8d, dword [rbp + 0x64]
mov r9d, dword [rbp + 0x60]
mov r10d, dword [rbp + 0x5c]
mov r11d, dword [rbp + 0x58]
mov esi, dword [rbp + 0x54]
mov r14d, dword [rbp + 0x50]
mov r15d, dword [rbp + 0x4c]
mov edi, dword [rbp + 0x48]
mov r13d, dword [rbp + 0x40]
mov ebx, dword [rbp + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x38]
mov r12d, dword [rsp + 0x30]
mov qword [rsp + 0x58], 2
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x34]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x30]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, r12d
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + r12]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor r12d, eax
lea eax, [rdi + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor edi, eax
mov eax, dword [rsp + 0x24]
add eax, edi
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x34], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x38], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [r12 + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x30], r9d
xor edi, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + rdi]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor r12d, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x60], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x6c], ecx
mov dword [rbp + 0x54], esi
mov rsi, qword [rsp + 0x40]
mov dword [rbp + 0x50], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x4c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x48], edi
mov dword [rbp + 0x40], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x3c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x68], edx
mov dword [rbp + 0x64], r8d
mov dword [rbp + 0x5c], r10d
mov dword [rbp + 0x58], r11d
mov dword [rbp + 0x44], r12d
mov eax, dword [rbp + rcx + 0x330]
add rcx, 4
add dword [rbp + rcx + 0x2c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x6f0]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x350]
cmp r13, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x38]
mov r8, rsi
mov rcx, r14
sub r8, r14
mov r9, rdi
mov al, byte [rdx + rcx]
xor al, byte [rcx]
mov byte [rcx + r8], al
inc rcx
xor bl, al
dec r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
sub r13, rdi
add rsi, rdi
add r14, rdi
sub rdx, rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x38], rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
shr eax, 1
and edx, r14d
and eax, r15d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
xor r9d, r9d
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
test r13, r13
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
inc r9d
xor al, byte [rdx + rcx]
mov byte [rcx + r8], al
mov ecx, r9d
xor bl, al
cmp rcx, r13
jb reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
mov rcx, qword [rsp + 0x78]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
lea r10, [rcx + 0x18]
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
mov qword [rcx + 0x10], rsi
lea r11, [r10 + 0xfff]
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042fac]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d28]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor r12d, r12d
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [r12 + 4]
mov r10d, dword [0x140042fbc]
lea r15, [r12 + 8]
mov r12d, dword [r12]
shr rax, 1
xor r8d, r8d
shr r12, 2
and eax, 0xf
and r12, r14
add r15, rax
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
sub r10, r12
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x70], r12
inc r10
mov r9, r10
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x448], 0
and qword [rbp + 0x450], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x10], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x434], r8d
mov dword [rbp + 0x45c], r8d
movq rax, xmm0
movd dword [rbp + 0x43c], xmm0
movd dword [rbp + 0x464], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x440], eax
mov dword [rbp + 0x468], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x430], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x438], edx
mov dword [rbp + 0x444], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x460], edx
mov dword [rbp + 0x458], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x46c], eax
lea rax, [rbp + 0x5b0]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x1b0]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x1c4]
mov ecx, dword [rbp + 0x1ec]
mov edx, dword [rbp + 0x1e8]
mov r8d, dword [rbp + 0x1e4]
mov r9d, dword [rbp + 0x1e0]
mov r10d, dword [rbp + 0x1dc]
mov r11d, dword [rbp + 0x1d8]
mov esi, dword [rbp + 0x1d4]
mov r14d, dword [rbp + 0x1d0]
mov r15d, dword [rbp + 0x1cc]
mov r12d, dword [rbp + 0x1c8]
mov r13d, dword [rbp + 0x1c0]
mov ebx, dword [rbp + 0x1bc]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x1b8]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x1b4]
mov qword [rsp + 0x58], 3
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x1b0]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x1b4], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x1b8], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x1b0], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x1e0], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x1ec], ecx
mov dword [rbp + 0x1d0], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x1cc], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x1c8], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x1c4], edi
mov dword [rbp + 0x1c0], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x1bc], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x1e8], edx
mov dword [rbp + 0x1e4], r8d
mov dword [rbp + 0x1dc], r10d
mov dword [rbp + 0x1d8], r11d
mov dword [rbp + 0x1d4], esi
mov eax, dword [rbp + rcx + 0x430]
add rcx, 4
add dword [rbp + rcx + 0x1ac], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x5b0]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x450]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x5b0]
mov r8, rdi
lea rax, [rdx + r13]
mov cl, byte [rax + rsi]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + rdx*8]
lea r11, [0x140000000]
and r12d, r14d
and eax, r15d
add r12d, eax
add r12, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rcx + r9]
inc r8d
xor al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042fb4]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d58]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rdx]
mov r10d, dword [0x140042fbc]
lea r15, [rdx + 8]
mov eax, r12d
shr r12, 4
xor r8d, r8d
and eax, 0xf
sub r10, r12
mov qword [rsp + 0x70], r12
add r15, rax
inc r10
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
mov r9, r10
mov qword [rsp + 0x50], r15
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x3c8], 0
and qword [rbp + 0x3d0], 0
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x30], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x3b4], r8d
mov dword [rbp + 0x3dc], r8d
movq rax, xmm0
movd dword [rbp + 0x3bc], xmm0
movd dword [rbp + 0x3e4], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x3c0], eax
mov dword [rbp + 0x3e8], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x3b0], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x3b8], edx
mov dword [rbp + 0x3c4], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x3e0], edx
mov dword [rbp + 0x3d8], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x3ec], eax
lea rax, [rbp + 0x730]
sub rax, r15
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x130]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x144]
mov ecx, dword [rbp + 0x16c]
mov edx, dword [rbp + 0x168]
mov r8d, dword [rbp + 0x164]
mov r9d, dword [rbp + 0x160]
mov r10d, dword [rbp + 0x15c]
mov r11d, dword [rbp + 0x158]
mov esi, dword [rbp + 0x154]
mov r14d, dword [rbp + 0x150]
mov r15d, dword [rbp + 0x14c]
mov edi, dword [rbp + 0x148]
mov r13d, dword [rbp + 0x140]
mov ebx, dword [rbp + 0x13c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x138]
mov r12d, dword [rsp + 0x30]
mov qword [rsp + 0x58], 3
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x134]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x130]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, r12d
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + r12]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor r12d, eax
lea eax, [rdi + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor edi, eax
mov eax, dword [rsp + 0x24]
add eax, edi
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x134], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x138], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [r12 + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x130], r9d
xor edi, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + rdi]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor r12d, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x160], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x16c], ecx
mov dword [rbp + 0x154], esi
mov rsi, qword [rsp + 0x40]
mov dword [rbp + 0x150], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x14c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x148], edi
mov dword [rbp + 0x140], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x13c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x168], edx
mov dword [rbp + 0x164], r8d
mov dword [rbp + 0x15c], r10d
mov dword [rbp + 0x158], r11d
mov dword [rbp + 0x144], r12d
mov eax, dword [rbp + rcx + 0x3b0]
add rcx, 4
add dword [rbp + rcx + 0x12c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x730]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x3d0]
cmp r13, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x38]
mov r8, rsi
mov rcx, r14
sub r8, r14
mov r9, rdi
mov al, byte [rdx + rcx]
xor al, byte [rcx]
mov byte [rcx + r8], al
inc rcx
xor bl, al
dec r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
sub r13, rdi
add rsi, rdi
add r14, rdi
sub rdx, rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x38], rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
and edx, r14d
and eax, r15d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
xor r9d, r9d
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
test r13, r13
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
inc r9d
xor al, byte [rdx + rcx]
mov byte [rcx + r8], al
mov ecx, r9d
xor bl, al
cmp rcx, r13
jb reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
mov rcx, qword [rsp + 0x78]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
lea r10, [rcx + 0x18]
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
mov qword [rcx + 0x10], rsi
lea r11, [r10 + 0xfff]
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140043050]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049ca8]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [rdx]
mov r12d, dword [rdx + 4]
mov r10d, dword [0x140042fbc]
and r12, r14
shr rax, 1
lea r15, [rdx + 8]
and eax, 0xf
sub r10, r12
xor r8d, r8d
add r15, rax
inc r10
mov qword [rsp + 0x70], r12
mov r9, r10
mov qword [rsp + 0x50], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + reloc.Mso20Win32Client.dll_Ordinal_1224], 0
and qword [rbp + 0x4d0], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp + 0x10], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x4b4], r8d
mov dword [rbp + 0x4dc], r8d
movq rax, xmm0
movd dword [rbp + 0x4bc], xmm0
movd dword [rbp + 0x4e4], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x4c0], eax
mov dword [rbp + 0x4e8], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x4b0], eax
mov eax, dword [0x140043084]
mov dword [rbp + reloc.Mso20Win32Client.dll_Ordinal_1208], edx
mov dword [rbp + 0x4c4], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x4e0], edx
mov dword [rbp + 0x4d8], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x4ec], eax
lea rax, [rbp + 0x670]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp + 0x230]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x244]
mov ecx, dword [rbp + 0x26c]
mov edx, dword [rbp + 0x268]
mov r8d, dword [rbp + 0x264]
mov r9d, dword [rbp + 0x260]
mov r10d, dword [rbp + 0x25c]
mov r11d, dword [rbp + 0x258]
mov esi, dword [rbp + 0x254]
mov r14d, dword [rbp + 0x250]
mov r15d, dword [rbp + 0x24c]
mov r12d, dword [rbp + 0x248]
mov r13d, dword [rbp + 0x240]
mov ebx, dword [rbp + 0x23c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x238]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x234]
mov qword [rsp + 0x58], 3
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x230]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x234], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x238], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x230], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x260], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x26c], ecx
mov dword [rbp + 0x250], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x24c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x248], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x244], edi
mov dword [rbp + 0x240], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x23c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x268], edx
mov dword [rbp + 0x264], r8d
mov dword [rbp + 0x25c], r10d
mov dword [rbp + 0x258], r11d
mov dword [rbp + 0x254], esi
mov eax, dword [rbp + rcx + 0x4b0]
add rcx, 4
add dword [rbp + rcx + 0x22c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x670]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x4d0]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x670]
mov r8, rdi
lea rax, [rsi + r13]
mov cl, byte [rax + rdx]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
and edx, r14d
and eax, r15d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rcx + r9]
inc r8d
xor al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140043074]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d20]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [rdx]
mov r12d, dword [rdx + 4]
mov r10d, dword [0x140042fbc]
and r12, r14
shr rax, 2
lea r15, [rdx + 8]
and eax, 0xf
sub r10, r12
xor r8d, r8d
add r15, rax
inc r10
mov qword [rsp + 0x70], r12
mov r9, r10
mov qword [rsp + 0x50], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x2c8], 0
and qword [rbp + 0x2d0], 0
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x60], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x2b4], r8d
mov dword [rbp + 0x2dc], r8d
movq rax, xmm0
movd dword [rbp + 0x2bc], xmm0
movd dword [rbp + 0x2e4], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x2c0], eax
mov dword [rbp + 0x2e8], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x2b0], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x2b8], edx
mov dword [rbp + 0x2c4], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x2e0], edx
mov dword [rbp + 0x2d8], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x2ec], eax
lea rax, [rbp + 0x770]
sub rax, r15
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x70]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0xac]
mov edx, dword [rbp + 0xa8]
mov r8d, dword [rbp + 0xa4]
mov r9d, dword [rbp + 0xa0]
mov r10d, dword [rbp + 0x9c]
mov r11d, dword [rbp + 0x98]
mov esi, dword [rbp + 0x94]
mov r14d, dword [rbp + 0x90]
mov r15d, dword [rbp + 0x8c]
mov edi, dword [rbp + 0x88]
mov r13d, dword [rbp + 0x80]
mov ebx, dword [rbp + 0x7c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x78]
mov r12d, dword [rsp + 0x30]
mov qword [rsp + 0x58], 3
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x74]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x70]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, r12d
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + r12]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor r12d, eax
lea eax, [rdi + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor edi, eax
mov eax, dword [rsp + 0x24]
add eax, edi
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x74], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x78], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [r12 + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x70], r9d
xor edi, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + rdi]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor r12d, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0xa0], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0xac], ecx
mov dword [rbp + 0x94], esi
mov rsi, qword [rsp + 0x40]
mov dword [rbp + 0x90], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x8c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x88], edi
mov dword [rbp + 0x80], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x7c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0xa8], edx
mov dword [rbp + 0xa4], r8d
mov dword [rbp + 0x9c], r10d
mov dword [rbp + 0x98], r11d
mov dword [rbp + 0x84], r12d
mov eax, dword [rbp + rcx + 0x2b0]
add rcx, 4
add dword [rbp + rcx + 0x6c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x770]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x2d0]
cmp r13, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x38]
mov r8, rsi
mov rcx, r14
sub r8, r14
mov r9, rdi
mov al, byte [rdx + rcx]
xor al, byte [rcx]
mov byte [rcx + r8], al
inc rcx
xor bl, al
dec r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
sub r13, rdi
add rsi, rdi
add r14, rdi
sub rdx, rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x38], rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
shr eax, 1
and edx, r14d
and eax, r15d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
xor r9d, r9d
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
test r13, r13
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
inc r9d
xor al, byte [rdx + rcx]
mov byte [rcx + r8], al
mov ecx, r9d
xor bl, al
cmp rcx, r13
jb reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
mov rcx, qword [rsp + 0x78]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
lea r10, [rcx + 0x18]
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
mov qword [rcx + 0x10], rsi
lea r11, [r10 + 0xfff]
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042f98]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d48]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [rdx + 4]
mov r12d, dword [rdx]
mov r10d, dword [0x140042fbc]
and r12, r14
and eax, 0xf
lea r15, [rdx + 8]
add r15, rax
sub r10, r12
xor r8d, r8d
inc r10
mov qword [rsp + 0x70], r12
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
mov r9, r10
mov qword [rsp + 0x50], r15
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x388], 0
and qword [rbp + 0x390], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x40], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x374], r8d
mov dword [rbp + 0x39c], r8d
movq rax, xmm0
movd dword [rbp + 0x37c], xmm0
movd dword [rbp + 0x3a4], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x380], eax
mov dword [rbp + 0x3a8], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x370], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x378], edx
mov dword [rbp + 0x384], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x3a0], edx
mov dword [rbp + 0x398], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x3ac], eax
lea rax, [rbp + 0x630]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0xf0]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x104]
mov ecx, dword [rbp + 0x12c]
mov edx, dword [rbp + 0x128]
mov r8d, dword [rbp + 0x124]
mov r9d, dword [rbp + 0x120]
mov r10d, dword [rbp + 0x11c]
mov r11d, dword [rbp + 0x118]
mov esi, dword [rbp + 0x114]
mov r14d, dword [rbp + reloc.Mso30Win32Client.dll_Ordinal_272]
mov r15d, dword [rbp + 0x10c]
mov r12d, dword [rbp + 0x108]
mov r13d, dword [rbp + 0x100]
mov ebx, dword [rbp + 0xfc]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0xf8]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0xf4]
mov qword [rsp + 0x58], 2
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0xf0]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0xf4], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0xf8], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0xf0], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x120], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x12c], ecx
mov dword [rbp + reloc.Mso30Win32Client.dll_Ordinal_272], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x10c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x108], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x104], edi
mov dword [rbp + 0x100], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0xfc], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x128], edx
mov dword [rbp + 0x124], r8d
mov dword [rbp + 0x11c], r10d
mov dword [rbp + 0x118], r11d
mov dword [rbp + 0x114], esi
mov eax, dword [rbp + rcx + 0x370]
add rcx, 4
add dword [rbp + rcx + 0xec], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x630]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x390]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x630]
mov r8, rdi
lea rax, [rdx + r13]
mov cl, byte [rax + rsi]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
and edx, r14d
and eax, r15d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rcx + r9]
inc r8d
xor al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042fb0]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d68]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10, rdx
mov eax, dword [r11 + rdx*8]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor edx, edx
test rdx, rdx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [rdx]
mov r12d, dword [rdx + 4]
mov r10d, dword [0x140042fbc]
and r12, r14
shr rax, 3
lea r15, [rdx + 8]
and eax, 0xf
sub r10, r12
xor r8d, r8d
add r15, rax
inc r10
mov qword [rsp + 0x70], r12
mov r9, r10
mov qword [rsp + 0x50], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x408], 0
and qword [rbp + 0x410], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp - 0x20], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x3f4], r8d
mov dword [rbp + 0x41c], r8d
movq rax, xmm0
movd dword [rbp + 0x3fc], xmm0
movd dword [rbp + 0x424], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x400], eax
mov dword [rbp + reloc.Mso20Win32Client.dll_Ordinal_1064], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x3f0], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x3f8], edx
mov dword [rbp + 0x404], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x420], edx
mov dword [rbp + 0x418], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x42c], eax
lea rax, [rbp + 0x6b0]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x170]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x184]
mov ecx, dword [rbp + 0x1ac]
mov edx, dword [rbp + 0x1a8]
mov r8d, dword [rbp + 0x1a4]
mov r9d, dword [rbp + 0x1a0]
mov r10d, dword [rbp + 0x19c]
mov r11d, dword [rbp + 0x198]
mov esi, dword [rbp + 0x194]
mov r14d, dword [rbp + 0x190]
mov r15d, dword [rbp + 0x18c]
mov r12d, dword [rbp + 0x188]
mov r13d, dword [rbp + 0x180]
mov ebx, dword [rbp + 0x17c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x178]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x174]
mov qword [rsp + 0x58], 2
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x170]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x174], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x178], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x170], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x1a0], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x1ac], ecx
mov dword [rbp + 0x190], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x18c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x188], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x184], edi
mov dword [rbp + 0x180], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x17c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x1a8], edx
mov dword [rbp + 0x1a4], r8d
mov dword [rbp + 0x19c], r10d
mov dword [rbp + 0x198], r11d
mov dword [rbp + 0x194], esi
mov eax, dword [rbp + rcx + 0x3f0]
add rcx, 4
add dword [rbp + rcx + 0x16c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x6b0]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x410]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x6b0]
mov r8, rdi
lea rax, [rsi + r13]
mov cl, byte [rax + rdx]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + r10*8]
lea r11, [0x140000000]
and edx, r15d
and eax, r14d
add edx, eax
add rdx, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
inc r8d
xor al, byte [r9 + rcx]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042fb8]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049cf8]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov eax, dword [r11 + rdx*8 + 4]
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor r12d, r12d
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [r12 + 4]
mov r10d, dword [0x140042fbc]
lea r15, [r12 + 8]
mov r12d, dword [r12]
and eax, 0xf
xor r8d, r8d
shr r12, 2
add r15, rax
and r12, r14
mov qword [rsp + 0x50], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
sub r10, r12
mov qword [rsp + 0x70], r12
inc r10
mov r9, r10
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x488], 0
and qword [rbp + 0x490], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x474], r8d
mov dword [rbp + 0x49c], r8d
movq rax, xmm0
movd dword [rbp + 0x47c], xmm0
movd dword [rbp + 0x4a4], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x480], eax
mov dword [rbp + 0x4a8], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x470], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x478], edx
mov dword [rbp + 0x484], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x4a0], edx
mov dword [rbp + 0x498], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x4ac], eax
lea rax, [rbp + 0x570]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x1f0]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x204]
mov ecx, dword [rbp + 0x22c]
mov edx, dword [rbp + 0x228]
mov r8d, dword [rbp + 0x224]
mov r9d, dword [rbp + 0x220]
mov r10d, dword [rbp + 0x21c]
mov r11d, dword [rbp + 0x218]
mov esi, dword [rbp + 0x214]
mov r14d, dword [rbp + 0x210]
mov r15d, dword [rbp + 0x20c]
mov r12d, dword [rbp + 0x208]
mov r13d, dword [rbp + 0x200]
mov ebx, dword [rbp + 0x1fc]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x1f8]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x1f4]
mov qword [rsp + 0x58], 2
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x1f0]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x1f4], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x1f8], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x1f0], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x220], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x22c], ecx
mov dword [rbp + 0x210], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x20c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x208], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x204], edi
mov dword [rbp + 0x200], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x1fc], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x228], edx
mov dword [rbp + 0x224], r8d
mov dword [rbp + 0x21c], r10d
mov dword [rbp + 0x218], r11d
mov dword [rbp + 0x214], esi
mov eax, dword [rbp + rcx + 0x470]
add rcx, 4
add dword [rbp + rcx + 0x1ec], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x570]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x490]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x570]
mov r8, rdi
lea rax, [rsi + r13]
mov cl, byte [rax + rdx]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + rdx*8]
lea r11, [0x140000000]
and r12d, r14d
and eax, r15d
add r12d, eax
add r12, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
inc r8d
xor al, byte [r9 + rcx]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov edx, dword [0x14000003c]
cmp rdi, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
movsxd rax, edx
mov ecx, dword [rax + r11 + 0x50]
add rcx, r11
cmp rdi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140043054]
mov r8d, edi
xor r9d, r9d
sub r8d, r11d
sub ecx, ebx
js reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, qword [0x140049d30]
lea eax, [rcx + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov eax, dword [r11 + rdx*8]
shr eax, 1
and eax, r14d
cmp r8d, eax
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea ecx, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx + 1]
cmp ecx, r9d
jge reloc.Mso20Win32Client.dll_Ordinal_255
lea r11, [0x140000000]
xor r12d, r12d
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
mov eax, dword [r12 + 4]
mov r10d, dword [0x140042fbc]
lea r15, [r12 + 8]
mov r12d, dword [r12]
and eax, 0xf
xor r8d, r8d
shr r12, 1
add r15, rax
and r12, r14
mov qword [rsp + 0x50], r15
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
sub r10, r12
mov qword [rsp + 0x70], r12
inc r10
mov r9, r10
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049ce8]
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r8, 0x10
shr r9, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r8, rdx
test r9, r9
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
xor edx, edx
mov rax, r8
xor bl, bl
div r10
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x38], r15
add rsi, rdx
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x40], rsi
test r12, r12
je reloc.Mso20Win32Client.dll_Ordinal_255
movups xmm0, xmmword [r15 + r12]
and qword [rbp + 0x508], 0
and qword [rbp + 0x510], 0
mov r13, rsi
mov edi, 0x40
movq r8, xmm0
movups xmmword [rbp + 0x20], xmm0
psrldq xmm0, 8
mov rdx, r8
mov dword [rbp + 0x4f4], r8d
mov dword [rbp + 0x51c], r8d
movq rax, xmm0
movd dword [rbp + 0x4fc], xmm0
movd dword [rbp + 0x524], xmm0
shr rax, 0x20
shr rdx, 0x20
mov dword [rbp + 0x500], eax
mov dword [rbp + 0x528], eax
mov eax, dword [0x140043080]
mov dword [rbp + 0x4f0], eax
mov eax, dword [0x140043084]
mov dword [rbp + 0x4f8], edx
mov dword [rbp + 0x504], eax
mov eax, dword [0x140043088]
mov dword [rbp + 0x520], edx
mov dword [rbp + 0x518], eax
mov eax, dword [0x14004308c]
mov dword [rbp + 0x52c], eax
lea rax, [rbp + 0x5f0]
sub r13, rax
mov rax, r15
sub rax, rsi
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0x270]
mov r8, rdi
mov qword [rsp + 0x68], r13
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rbp + 0x284]
mov ecx, dword [rbp + 0x2ac]
mov edx, dword [rbp + 0x2a8]
mov r8d, dword [rbp + 0x2a4]
mov r9d, dword [rbp + 0x2a0]
mov r10d, dword [rbp + 0x29c]
mov r11d, dword [rbp + 0x298]
mov esi, dword [rbp + 0x294]
mov r14d, dword [rbp + 0x290]
mov r15d, dword [rbp + 0x28c]
mov r12d, dword [rbp + 0x288]
mov r13d, dword [rbp + 0x280]
mov ebx, dword [rbp + 0x27c]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x278]
mov edi, dword [rsp + 0x30]
mov dword [rsp + 0x24], eax
mov eax, dword [rbp + 0x274]
mov qword [rsp + 0x58], 3
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x270]
mov dword [rsp + 0x2c], eax
add eax, r9d
rol eax, 7
xor r13d, eax
mov eax, dword [rsp + 0x2c]
add eax, r13d
rol eax, 9
xor r14d, eax
lea eax, [r14 + r13]
rol eax, 0xd
xor r9d, eax
mov dword [rsp + 0x30], r9d
lea eax, [r14 + r9]
mov r9d, dword [rsp + 0x2c]
ror eax, 0xe
xor r9d, eax
mov eax, dword [rsp + 0x28]
add eax, edi
mov dword [rsp + 0x2c], r9d
rol eax, 7
xor esi, eax
lea eax, [rsi + rdi]
rol eax, 9
xor r8d, eax
lea eax, [r8 + rsi]
rol eax, 0xd
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
add eax, r8d
ror eax, 0xe
xor edi, eax
lea eax, [r12 + r11]
rol eax, 7
xor edx, eax
lea eax, [rdx + r11]
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, edx
rol eax, 0xd
xor r12d, eax
mov eax, dword [rsp + 0x24]
add eax, r12d
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebx, eax
lea eax, [rbx + rcx]
rol eax, 9
xor r15d, eax
lea eax, [r15 + rbx]
rol eax, 0xd
xor r10d, eax
lea eax, [r15 + r10]
ror eax, 0xe
xor ecx, eax
lea eax, [rbx + r9]
rol eax, 7
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov dword [rbp + 0x274], eax
add eax, r9d
rol eax, 9
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rbp + 0x278], eax
add eax, dword [rsp + 0x28]
rol eax, 0xd
xor ebx, eax
mov eax, dword [rsp + 0x24]
add eax, ebx
ror eax, 0xe
xor r9d, eax
lea eax, [rdi + r13]
rol eax, 7
mov dword [rsp + 0x2c], r9d
mov dword [rbp + 0x270], r9d
xor r12d, eax
lea eax, [r12 + rdi]
rol eax, 9
xor r15d, eax
mov r9d, dword [rsp + 0x30]
lea eax, [r15 + r12]
rol eax, 0xd
xor r13d, eax
lea eax, [r15 + r13]
ror eax, 0xe
xor edi, eax
lea eax, [r11 + rsi]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor r14d, eax
lea eax, [r10 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [rsi + r14]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rbp + 0x2a0], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r9]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
dec qword [rsp + 0x58]
mov eax, dword [rsp + 0x2c]
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov dword [rbp + 0x2ac], ecx
mov dword [rbp + 0x290], r14d
mov r14, qword [rsp + 0x48]
mov dword [rbp + 0x28c], r15d
mov r15, qword [rsp + 0x50]
mov dword [rbp + 0x288], r12d
mov r12, qword [rsp + 0x70]
mov dword [rbp + 0x284], edi
mov dword [rbp + 0x280], r13d
mov r13, qword [rsp + 0x68]
mov dword [rbp + 0x27c], ebx
mov bl, byte [rsp + 0x20]
mov edi, 0x40
xor ecx, ecx
mov dword [rbp + 0x2a8], edx
mov dword [rbp + 0x2a4], r8d
mov dword [rbp + 0x29c], r10d
mov dword [rbp + 0x298], r11d
mov dword [rbp + 0x294], esi
mov eax, dword [rbp + rcx + 0x4f0]
add rcx, 4
add dword [rbp + rcx + 0x26c], eax
cmp rcx, rdi
jl reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x5f0]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
inc dword [rbp + 0x510]
cmp r14, rdi
jbe reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rbp - 0x80]
lea rdx, [rbp + 0x5f0]
mov r8, rdi
lea rax, [rsi + r13]
mov cl, byte [rax + rdx]
xor cl, byte [rdx]
mov byte [r13 + rdx], cl
inc rdx
xor bl, cl
dec r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [rsp + 0x40], rdi
sub r14, rdi
add r13, rdi
add qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], bl
mov qword [rsp + 0x48], r14
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r11 + rdx*8 + 4]
mov eax, dword [r11 + rdx*8]
lea r11, [0x140000000]
shr eax, 1
and r12d, r15d
and eax, r14d
add r12d, eax
add r12, r11
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rsi, qword [rsp + 0x60]
xor r8d, r8d
test r14, r14
mov r14d, reloc.Mso20Win32Client.dll_Ordinal_255
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov al, byte [rcx + r9]
inc r8d
xor al, byte [rbp + rcx + reloc.Mso20Win32Client.dll_Ordinal_255]
mov byte [rcx + r10], al
mov ecx, r8d
xor bl, al
cmp rcx, rdx
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov r13, qword [rsp + 0x78]
lea r11, [0x140000000]
cmp bl, byte [r15 + r12 + 0x10]
je reloc.Mso20Win32Client.dll_Ordinal_255
call fcn.1400264d8
lea r10, [r13 + 0x18]
lea rsi, [fcn.140036e40]
mov rbx, rax
mov rax, reloc.Mso20Win32Client.dll_Ordinal_255
and r10, reloc.Mso20Win32Client.dll_Ordinal_255
and rbx, rax
lea r11, [r10 + 0xfff]
mov qword [r13 + 0x10], rsi
and r11, rax
mov rax, qword [0x140049ce8]
xor r9d, r9d
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
imul rax, rax, reloc.Mso20Win32Client.dll_Ordinal_255
shl r9, 0x10
shr r8, 0x10
add rax, r14
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or r9, rdx
test r8, r8
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov qword [0x140049ce8], rax
movabs rax, reloc.Mso20Win32Client.dll_Ordinal_255
mul r9
shr rdx, 0xf
imul rax, rdx, reloc.Mso20Win32Client.dll_Ordinal_255
sub r9, rax
mov rax, qword [rbp - 0x78]
inc r9
mov qword [rax + 0xb0], r9
mov qword [rax + 0x98], rbx
mov qword [rsp + 0x50], r8
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
add r10, 8
cmp r10, r11
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140043058]
mov rdi, r15
mov r13, r11
sub rdi, rsi
sub r13, rax
jne reloc.Mso20Win32Client.dll_Ordinal_255
test rdi, rdi
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r14, qword [0x140049d50]
mov rbx, rsi
sub rbx, r15
sub r15d, r11d
lea eax, [r15 + r12]
mov dword [rsp + 0x30], eax
test r14, r14
je reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [r14]
xor r8d, r8d
mov ecx, reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [r12 - 1]
test r9d, r9d
js reloc.Mso20Win32Client.dll_Ordinal_255
lea eax, [r8 + r9]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r10d, dword [r14 + rdx*4 + 4]
and r10d, ecx
cmp r15d, r10d
jae reloc.Mso20Win32Client.dll_Ordinal_255
lea r9d, [rdx - 1]
jmp reloc.Mso20Win32Client.dll_Ordinal_255
jbe reloc.Mso20Win32Client.dll_Ordinal_255
lea r8d, [rdx + 1]
cmp r9d, r8d
jge reloc.Mso20Win32Client.dll_Ordinal_255
movsxd r11, r8d
cmp r11, r12
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r12d, dword [rsp + 0x30]
lea r15, [r14 + 4]
lea rsi, [0x140000000]
lea r15, [r15 + r11*4]
mov edx, dword [r15]
mov eax, edx
and eax, ecx
cmp eax, r12d
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov r8d, edx
mov r9d, edx
sar edx, 0x1d
sar r8d, 0x1b
and r9, rcx
and edx, 7
and r8d, 3
add r9, rsi
xor r10d, r10d
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
je reloc.Mso20Win32Client.dll_Ordinal_255
dec r8d
jne reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r11, rdx
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, rdi
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov r10, r13
sub r10, rdi
sub edx, 2
je reloc.Mso20Win32Client.dll_Ordinal_255
dec edx
jne reloc.Mso20Win32Client.dll_Ordinal_255
add qword [r9 + rbx], r10
jmp reloc.Mso20Win32Client.dll_Ordinal_255
add dword [r9 + rbx], r10d
mov eax, dword [r14]
inc r11
add r15, 4
cmp r11, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
jmp reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049d40]
cmp rsi, rax
jb reloc.Mso20Win32Client.dll_Ordinal_255
mov ecx, dword [0x140042fc0]
mov eax, dword [0x140042fbc]
imul ecx, eax
mov rax, qword [0x140049d40]
add rcx, rax
cmp rsi, rcx
jae reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049d40]
mov ecx, dword [0x140042fbc]
mov rdx, rsi
sub rdx, rax
mov rax, rdx
cqo
idiv rcx
mov rcx, rax
mov eax, dword [0x140042fbc]
imul rcx, rax
mov rax, qword [0x140049d40]
add rcx, rax
jmp reloc.Mso20Win32Client.dll_Ordinal_255
xor ecx, ecx
test rcx, rcx
je reloc.Mso20Win32Client.dll_Ordinal_255
mov rax, qword [0x140049d40]
mov ecx, dword [0x140042fbc]
sub rsi, rax
mov rax, rsi
cqo
idiv rcx
mov rcx, rax
mov eax, dword [0x140042fc0]
mov rax, qword [0x140049d38]
mov rax, qword [0x140049d38]
mov dword [rax + rcx*4], 0x3887
jmp reloc.Mso20Win32Client.dll_Ordinal_255
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
or rcx, 3
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_RtlDeleteFunctionTable]
xor edx, edx
mov r8d, reloc.Mso20Win32Client.dll_Ordinal_255
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, rdi
mov rcx, qword [rbp + 0x7b0]
xor rcx, rsp
call fcn.140003dd0
add rsp, reloc.Mso20Win32Client.dll_Ordinal_255
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret