Function at 0x140086a20
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x89c8
call fcn.140105d80
sub rsp, rax
mov qword [rsp + 0xb8], r9
mov qword [rsp + 0xe0], r8
mov qword [rsp + 0xd8], rdx
mov r14, rcx
mov eax, dword [rsp + 0x8a40]
mov dword [rsp + 0x48], eax
mov r13, qword [rsp + 0x8a38]
mov eax, dword [rsp + 0x8a30]
mov dword [rsp + 0x64], eax
mov rax, qword [0x140203ac0]
xor rax, rsp
mov qword [rsp + 0x89c0], rax
mov qword [r13], 8
mov dword [r13 + 8], 0
lea rsi, [rcx + 0xc0]
lea rax, [rcx + 0xc8]
mov qword [rsp + 0x40], rax
lea rdi, [rcx + 0x30]
lea r12, [rcx + 0x38]
lea rbp, [rcx + 0x39]
mov rcx, qword [rcx + 0xc0]
mov rax, qword [r14 + 0xc8]
xor r15d, r15d
lea rbx, [0x14011a6c8]
nop dword [rax + rax]
cmp rcx, rax
jae 0x140086af0
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140086b4b
cmp dword [rdi], 0
je 0x140086b29
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140086b2d
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140086b3d
xor edx, edx
jmp 0x140086b4b
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
cmp dl, byte [r15 + rbx]
jne 0x140086bae
inc r15
cmp r15, 8
jne 0x140086ad0
vmovups xmm0, xmmword [r14 + 0xd0]
vmovups xmmword [r14 + 0xc0], xmm0
mov qword [rsp + 0x150], r14
mov edi, dword [rsp + 0x64]
cmp edi, 5
jb 0x140086c55
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.bad_req_comp
mov qword [rax + 8], rcx
xor r15d, r15d
jmp 0x1400871b8
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rbx, [rax + 8]
lea rcx, str.bad_png_sig
mov qword [rax + 8], rcx
mov rcx, qword [r14 + 0xd0]
mov rax, qword [r14 + 0xd8]
mov qword [r14 + 0xc0], rcx
mov qword [r14 + 0xc8], rax
cmp rcx, rax
jae 0x140086c0f
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
cmp dl, 0x42
je 0x140086d0b
jmp 0x140086f06
cmp dword [rdi], 0
je 0x140086f06
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov edx, dword [r14 + 0xc0]
mov rcx, qword [r14 + 0xd0]
sub edx, ecx
add dword [r14 + 0xb8], edx
test eax, eax
je 0x140086ce4
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140086cf4
lea rcx, [rsp + 0x150]
xor edx, edx
mov r8d, edi
call fcn.14008f2c0
test eax, eax
je 0x140086cd4
mov eax, dword [rsp + 0x170]
mov ecx, 8
cmp eax, 9
jl 0x140086c8a
mov ecx, 0x10
cmp eax, 0x10
jne 0x140086d68
mov dword [r13], ecx
mov rsi, qword [rsp + 0x150]
mov r15, qword [rsp + 0x168]
test edi, edi
je 0x14008716e
mov edx, dword [rsi + 0xc]
cmp edx, edi
je 0x14008716e
mov r9d, dword [rsi]
mov ecx, dword [rsi + 4]
cmp eax, 8
jg 0x140087150
mov dword [rsp + 0x20], ecx
mov rcx, r15
mov r8d, edi
call fcn.140090a80
jmp 0x14008715f
mov rcx, qword [rsp + 0x168]
xor r15d, r15d
jmp 0x14008719b
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov r8, qword [rsp + 0x40]
mov qword [r8], rax
mov qword [rsi], rbp
mov r8, rbp
cmp dl, 0x42
jne 0x140086f06
cmp r8, rax
jae 0x140086d28
lea rax, [r8 + 1]
mov qword [rsi], rax
movzx eax, byte [r8]
cmp al, 0x4d
jne 0x140086f06
jmp 0x140086daa
cmp dword [rdi], 0
je 0x140086f06
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov edx, dword [r14 + 0xc0]
mov rcx, qword [r14 + 0xd0]
sub edx, ecx
add dword [r14 + 0xb8], edx
test eax, eax
je 0x140086d87
movsxd rdx, eax
add rdx, r12
movzx eax, byte [r12]
jmp 0x140086d97
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.bad_bits_per_channel
jmp 0x140086b9f
mov dword [rdi], 0
mov byte [r12], 0
xor eax, eax
mov rdx, rbp
mov r8, qword [rsp + 0x40]
mov qword [r8], rdx
mov qword [rsi], rbp
cmp al, 0x4d
jne 0x140086f06
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov rcx, r14
call fcn.140096d20
mov r15d, eax
mov rcx, r14
call fcn.140096d20
shl eax, 0x10
or eax, r15d
cmp eax, 0x38
ja 0x140086e08
movabs rcx, 0x100010000001000
bt rcx, rax
jb 0x140086e11
cmp eax, 0x6c
jne 0x1400871e2
vmovups xmm0, xmmword [r14 + 0xd0]
vmovups xmmword [r14 + 0xc0], xmm0
mov dword [rsp + 0x144], 0xff
lea rdx, [rsp + 0x128]
mov rcx, r14
call fcn.140096e50
test rax, rax
je 0x140086ba6
mov r15d, dword [r14 + 4]
mov eax, r15d
neg eax
cmovs eax, r15d
mov dword [r14 + 4], eax
cmp eax, 0x1000001
jae 0x1400872c9
cmp dword [r14], 0x1000001
jae 0x1400872c9
mov qword [rsp + 0x38], rbx
mov eax, dword [rsp + 0x134]
mov dword [rsp + 0x88], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x13c]
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0x140]
mov ebx, dword [rsp + 0x144]
mov r10d, dword [rsp + 0x128]
mov r8d, dword [rsp + 0x130]
cmp r8d, 0xc
mov dword [rsp + 0x58], ecx
jne 0x1400872d8
cmp r10d, 0x17
jg 0x14008739c
mov edx, dword [rsp + 0x12c]
mov eax, dword [rsp + 0x148]
neg eax
add eax, edx
add eax, 0xffffffe8
cdqe
imul r11, rax, 0x55555556
mov rax, r11
shr rax, 0x3f
shr r11, 0x20
add r11d, eax
jmp 0x1400872fd
mov qword [r14 + 0xc0], rcx
mov rax, qword [r14 + 0xd8]
mov qword [r14 + 0xc8], rax
mov rcx, r14
call fcn.140088f10
test eax, eax
je 0x140086fbd
lea r15, [rsp + 0x150]
mov r8d, 0x8870
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, r14
mov rdx, r15
mov r8, qword [rsp + 0xb8]
xor r9d, r9d
call fcn.1400974e0
cmp rax, r14
je 0x14008706c
mov r15, rax
test rax, rax
je 0x14008706c
mov r9d, dword [rsp + 0x150]
mov rax, qword [rsp + 0xd8]
mov dword [rax], r9d
mov eax, dword [rsp + 0x154]
mov rcx, qword [rsp + 0xe0]
mov dword [rcx], eax
mov r8d, dword [rsp + 0x64]
test r8d, 0xfffffffb
je 0x140087082
mov dword [rsp + 0x20], eax
mov rcx, r15
mov edx, 4
call fcn.140090a80
mov r15, rax
jmp 0x140087082
mov rcx, r14
call fcn.140092b70
mov r15d, eax
shl r15d, 0x10
mov rcx, r14
call fcn.140092b70
or eax, r15d
vmovups xmm0, xmmword [r14 + 0xd0]
vmovups xmmword [r14 + 0xc0], xmm0
mov rcx, r14
cmp eax, 0x38425053
jne 0x1400870a0
call fcn.140092b70
mov r15d, eax
shl r15d, 0x10
mov rcx, r14
call fcn.140092b70
or eax, r15d
cmp eax, 0x38425053
jne 0x1400870ec
mov rcx, r14
call fcn.140092b70
cmp eax, 1
jne 0x140087141
cmp qword [r14 + 0x10], 0
je 0x14008724d
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, qword [rsi]
mov r8d, ecx
sub r8d, eax
cmp r8d, 5
jg 0x140087250
mov qword [r14 + 0xc0], rcx
mov edx, 6
sub edx, r8d
mov rcx, qword [r14 + 0x28]
call qword [r14 + 0x18]
jmp 0x140087257
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x14008707f
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r15d, r15d
mov rcx, qword [rsp + 0x168]
mov rsi, qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call rsi
mov rcx, qword [rsp + 0x160]
jmp 0x1400871b6
call fcn.140089250
test eax, eax
je 0x1400870fb
mov rcx, qword [rsp + 0x89c0]
xor rcx, rsp
call fcn.140105bb0
mov rcx, r14
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xb8]
add rsp, 0x89c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x1400896d0
lea rax, str.not_PSD
mov qword [rbx], rax
jmp 0x140086ba6
mov rdi, rbx
mov rcx, r14
call fcn.14008a1c0
test eax, eax
mov rsi, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0xd8]
je 0x140087202
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x20], eax
mov rcx, r14
mov rdx, rbx
mov r8, rsi
mov r9, qword [rsp + 0xb8]
call fcn.14008a2f0
jmp 0x140087235
lea rax, str.wrong_version
mov qword [rbx], rax
jmp 0x140086ba6
mov dword [rsp + 0x20], ecx
mov rcx, r15
mov r8d, edi
call fcn.140091ad0
mov r15, rax
mov dword [rsi + 0xc], edi
test rax, rax
je 0x140086ba6
mov eax, dword [rsi]
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov eax, dword [rsi + 4]
mov rcx, qword [rsp + 0xe0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x140087199
mov eax, dword [rsi + 8]
mov dword [rcx], eax
xor ecx, ecx
mov rsi, qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call rsi
mov rcx, qword [rsp + 0x160]
call rsi
mov rcx, qword [rsp + 0x158]
call rsi
mov rcx, qword [rsp + 0x89c0]
xor rcx, rsp
vzeroupper
call fcn.140105bb0
mov rax, r15
add rsp, 0x89c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
vmovups xmm0, xmmword [r14 + 0xd0]
vmovups xmmword [r14 + 0xc0], xmm0
cmp eax, 0x7c
jne 0x140086f1b
jmp 0x140086e23
mov rcx, r14
call fcn.14008cb20
test eax, eax
je 0x1400873ce
mov qword [rsp + 0x28], r13
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x20], eax
mov rcx, r14
mov rdx, rbx
mov r8, rsi
mov r9, qword [rsp + 0xb8]
call fcn.14008cc60
mov rsi, rax
mov rcx, qword [rsp + 0x89c0]
xor rcx, rsp
call fcn.140105bb0
mov rax, rsi
jmp 0x1400871ce
mov rax, qword [rsi]
add rax, 6
mov qword [rsi], rax
mov rcx, r14
call fcn.140092b70
cmp eax, 0x11
jb 0x140087273
lea rax, str.wrong_channel_count
mov qword [rbx], rax
jmp 0x140086ba6
mov dword [rsp + 0x90], eax
mov rcx, r14
call fcn.140092b70
mov r15d, eax
shl r15d, 0x10
mov rcx, r14
call fcn.140092b70
or eax, r15d
mov dword [rsp + 0x78], eax
mov rcx, r14
call fcn.140092b70
mov r15d, eax
mov rcx, r14
call fcn.140092b70
cmp dword [rsp + 0x78], 0x1000001
jge 0x1400872c9
shl r15d, 0x10
or r15d, eax
cmp r15d, 0x1000001
jl 0x14008746e
lea rax, str.too_large
mov qword [rbx], rax
jmp 0x140086ba6
cmp r10d, 0xf
jg 0x14008739c
mov edx, dword [rsp + 0x12c]
mov eax, dword [rsp + 0x148]
add eax, r8d
mov r11d, edx
sub r11d, eax
sar r11d, 2
test r11d, r11d
je 0x14008739c
mov qword [rsp + 0x70], rdx
mov dword [rsp + 0x80], r8d
mov dword [rsp + 0x78], ebx
cmp ecx, 0xff000000
sete al
xor r13d, r13d
mov edx, r13d
mov byte [rsp + 0x54], r13b
cmp ecx, 1
mov ebx, 4
sbb ebx, 0
mov r13d, eax
mov dword [r14 + 8], ebx
mov eax, dword [rsp + 0x64]
cmp eax, 3
cmovge ebx, eax
mov r9d, dword [r14]
mov eax, r9d
or eax, ebx
js 0x140087390
mov ecx, dword [r14 + 4]
test r9d, r9d
je 0x140087368
mov eax, 0x7fffffff
xor edx, edx
div r9d
cmp eax, ebx
jb 0x140087390
mov r8d, r9d
imul r8d, ebx
mov eax, r8d
or eax, ecx
js 0x140087390
test ecx, ecx
je 0x140087586
mov eax, 0x7fffffff
xor edx, edx
div ecx
cmp eax, r8d
jge 0x140087586
lea rax, str.too_large
jmp 0x140087461
mov eax, dword [r14 + 0xb8]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
lea edx, [rax + rcx]
add edx, 0xfffffbff
cmp edx, 0xfffffbff
ja 0x14008743f
lea rax, str.bad_header
jmp 0x140087461
mov rcx, r14
call fcn.1400836f0
test eax, eax
je 0x1400874f6
mov ebp, dword [rsp + 0x64]
mov dword [rsp + 0x20], ebp
mov rcx, r14
mov rdx, rbx
mov r8, rsi
mov rdi, qword [rsp + 0xb8]
mov r9, rdi
call fcn.14008cef0
mov r14, rax
test ebp, ebp
jne 0x140087408
mov ebp, dword [rdi]
mov esi, dword [rsi]
mov edi, dword [rbx]
mov rcx, qword [rsp + 0x89c0]
xor rcx, rsp
call fcn.140105bb0
mov rcx, r14
mov edx, edi
mov r8d, esi
mov r9d, ebp
add rsp, 0x89c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x14008dab0
add eax, ecx
mov ecx, dword [rsp + 0x12c]
mov edx, ecx
sub edx, eax
jl 0x14008745a
cmp edx, 0x401
jl 0x140087529
lea rax, str.bad_offset
mov rcx, qword [rsp + 0x38]
mov qword [rcx], rax
jmp 0x140086ba6
mov dword [rsp + 0x70], r15d
mov rcx, r14
call fcn.140092b70
mov r15d, eax
cmp r15w, 8
je 0x14008748f
cmp r15d, 0x10
jne 0x14008761a
mov rcx, r14
call fcn.140092b70
cmp eax, 3
jne 0x140087629
mov rcx, r14
call fcn.140092b40
mov rcx, r14
mov edx, eax
call fcn.140092ae0
mov rcx, r14
call fcn.140092b40
mov rcx, r14
mov edx, eax
call fcn.140092ae0
mov rcx, r14
call fcn.140092b40
mov rcx, r14
mov edx, eax
call fcn.140092ae0
mov rcx, r14
call fcn.140092b70
cmp eax, 2
jb 0x140087653
lea rax, str.bad_compression
mov qword [rbx], rax
jmp 0x140086ba6
mov rcx, r14
call fcn.14008df00
test eax, eax
je 0x140087644
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x20], eax
mov rcx, r14
mov rdx, rbx
mov r8, rsi
mov r9, qword [rsp + 0xb8]
call fcn.14008e2d0
jmp 0x140087235
mov qword [rsp + 0x70], rcx
mov dword [rsp + 0x80], r8d
mov rcx, r14
mov r13d, r10d
call fcn.140092ae0
mov ecx, dword [rsp + 0x58]
mov r10d, r13d
cmp ecx, 0xff000000
sete al
xor r11d, r11d
mov r13b, 1
cmp r10d, 0x18
mov dword [rsp + 0x78], ebx
jne 0x140087323
cmp ecx, 0xff000000
jne 0x140087323
mov ebx, 3
mov r10d, 0x18
mov byte [rsp + 0x54], 1
jmp 0x140087339
mov qword [rsp + 0x98], r11
mov dword [rsp + 0xec], r15d
test r9d, r9d
je 0x1400875ad
mov eax, 0x7fffffff
xor edx, edx
div r9d
cmp eax, ebx
jb 0x140087638
test ecx, ecx
je 0x1400875bf
mov eax, 0x7fffffff
xor edx, edx
div ecx
cmp eax, r8d
jl 0x140087638
imul r8d, ecx
movsxd rcx, r8d
mov dword [rsp + 0x68], r10d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [rsp + 0x68]
test rax, rax
je 0x140087638
mov r15, rax
cmp ecx, 0xf
mov dword [rsp + 0x48], ebx
jg 0x1400877ab
mov rdx, qword [rsp + 0x98]
cmp edx, 0x101
setge al
or byte [rsp + 0x54], al
je 0x140087818
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rax, str.invalid
jmp 0x140087461
lea rax, str.unsupported_bit_depth
mov qword [rbx], rax
jmp 0x140086ba6
lea rax, str.wrong_color_format
mov qword [rbx], rax
jmp 0x140086ba6
lea rax, str.outofmem
jmp 0x140087461
lea rax, str.unknown_image_type
mov qword [rdi], rax
jmp 0x140086ba6
mov dword [rsp + 0x58], eax
mov ecx, 4
mov edx, dword [rsp + 0x70]
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
call fcn.140096c40
test eax, eax
je 0x1400872c9
cmp dword [rsp + 0x48], 0x10
mov r8d, dword [rsp + 0x78]
mov dword [rsp + 0x98], r15d
jne 0x1400876b4
cmp r15d, 0x10
jne 0x1400876b4
cmp dword [rsp + 0x58], 0
jne 0x1400876b4
mov ecx, 8
mov edx, dword [rsp + 0x70]
xor r9d, r9d
call fcn.140096be0
mov r15, rax
mov dword [r13], 0x10
jmp 0x1400876cb
mov eax, r8d
imul eax, dword [rsp + 0x70]
shl eax, 2
movsxd rcx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test r15, r15
mov edx, dword [rsp + 0x90]
je 0x140087809
mov qword [rsp + 0x38], rbx
mov eax, dword [rsp + 0x70]
mov r9d, eax
mov eax, dword [rsp + 0x78]
imul r9d, eax
mov ecx, edx
mov qword [rsp + 0x68], rcx
cmp dword [rsp + 0x58], 0
mov qword [rsp + 0x80], r9
je 0x140087aa1
imul edx, eax
add edx, edx
mov rcx, r14
call fcn.140092ae0
mov r9, qword [rsp + 0x80]
mov esi, r9d
and esi, 0xfffffff8
mov edi, r9d
and edi, 7
xor ebx, ebx
jmp 0x140087756
mov rcx, r14
mov r8d, r9d
call fcn.140098be0
mov r9, qword [rsp + 0x80]
test eax, eax
je 0x140087dd6
inc rbx
cmp rbx, 4
je 0x140087d23
lea rdx, [r15 + rbx]
cmp rbx, qword [rsp + 0x68]
jb 0x14008772e
test r9d, r9d
jle 0x140087749
cmp rbx, 3
sete al
neg al
cmp r9d, 8
jb 0x140087797
mov ecx, esi
mov byte [rdx], al
mov byte [rdx + 4], al
mov byte [rdx + 8], al
mov byte [rdx + 0xc], al
mov byte [rdx + 0x10], al
mov byte [rdx + 0x14], al
mov byte [rdx + 0x18], al
mov byte [rdx + 0x1c], al
add rdx, 0x20
add ecx, 0xfffffff8
jne 0x140087777
test r9b, 7
je 0x140087749
xor ecx, ecx
mov byte [rdx + rcx*4], al
inc rcx
cmp edi, ecx
jne 0x14008779f
jmp 0x140087749
mov eax, dword [rsp + 0x80]
add eax, dword [rsp + 0x148]
mov r9, qword [rsp + 0x70]
sub r9d, eax
je 0x140088467
js 0x140087f0f
cmp qword [r14 + 0x10], 0
je 0x140088457
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, qword [rsi]
mov r8d, ecx
sub r8d, eax
mov edx, r9d
sub edx, r8d
jle 0x14008845a
mov qword [r14 + 0xc0], rcx
mov rcx, qword [r14 + 0x28]
call qword [r14 + 0x18]
jmp 0x140088463
lea rax, str.outofmem
mov qword [rbx], rax
jmp 0x140086ba6
test edx, edx
mov ebx, dword [rsp + 0x80]
jle 0x140087a51
mov eax, edx
mov qword [rsp + 0x58], rax
mov rcx, qword [rsi]
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
xor r13d, r13d
jmp 0x14008785b
inc rcx
mov qword [rsi], rcx
mov byte [rsp + r13*4 + 0x153], 0xff
inc r13
cmp qword [rsp + 0x58], r13
je 0x140087a51
cmp rcx, rax
jae 0x140087870
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx r9d, byte [rcx]
mov rcx, r8
jmp 0x1400878d5
cmp dword [rdi], 0
je 0x1400878a9
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x1400878ae
cdqe
add rax, r12
movzx r9d, byte [r12]
jmp 0x1400878bf
xor r9d, r9d
jmp 0x1400878d5
mov dword [rdi], 0
mov byte [r12], 0
xor r9d, r9d
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov rdx, qword [rsp + 0x98]
mov byte [rsp + r13*4 + 0x152], r9b
cmp rcx, rax
jae 0x1400878f2
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx r9d, byte [rcx]
mov rcx, r8
jmp 0x140087957
cmp dword [rdi], 0
je 0x14008792b
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140087930
cdqe
add rax, r12
movzx r9d, byte [r12]
jmp 0x140087941
xor r9d, r9d
jmp 0x140087957
mov dword [rdi], 0
mov byte [r12], 0
xor r9d, r9d
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov rdx, qword [rsp + 0x98]
mov byte [rsp + r13*4 + 0x151], r9b
cmp rcx, rax
jae 0x140087974
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx r9d, byte [rcx]
mov rcx, r8
jmp 0x1400879d9
cmp dword [rdi], 0
je 0x1400879ad
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x1400879b2
cdqe
add rax, r12
movzx r9d, byte [r12]
jmp 0x1400879c3
xor r9d, r9d
jmp 0x1400879d9
mov dword [rdi], 0
mov byte [r12], 0
xor r9d, r9d
mov rax, rbp
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov byte [rsp + r13*4 + 0x150], r9b
cmp ebx, 0xc
je 0x140087844
cmp rcx, rax
jb 0x14008783e
cmp dword [rdi], 0
je 0x140087844
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140087a2b
cdqe
add rax, r12
jmp 0x140087a39
mov dword [rdi], 0
mov byte [r12], 0
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov rcx, rbp
mov rdx, qword [rsp + 0x98]
jmp 0x140087841
xor eax, eax
cmp ebx, 0xc
sete al
or eax, 0xfffffffc
imul edx, eax
add edx, dword [rsp + 0x70]
add ebx, dword [rsp + 0x148]
sub edx, ebx
mov rcx, r14
call fcn.140092ae0
cmp dword [rsp + 0x68], 1
je 0x140087f1f
cmp dword [rsp + 0x68], 8
je 0x140088173
cmp dword [rsp + 0x68], 4
jne 0x140088442
mov eax, dword [r14]
inc eax
shr eax, 1
jmp 0x140088176
mov ecx, dword [rsp + 0x48]
xor ecx, 0x10
mov eax, dword [rsp + 0x98]
xor eax, 0x10
or eax, ecx
sete byte [rsp + 0x54]
mov eax, r9d
and eax, 0xfffffff8
mov dword [rsp + 0xc0], eax
mov eax, r9d
and eax, 7
mov qword [rsp + 0x38], rax
mov eax, r9d
mov qword [rsp + 0x48], rax
xor ecx, ecx
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x88], r15
jmp 0x140087b15
mov rcx, qword [rsp + 0xa8]
inc rcx
inc qword [rsp + 0x88]
add qword [rsp + 0x58], 2
cmp rcx, 4
mov r9, qword [rsp + 0x80]
je 0x140087d23
cmp rcx, qword [rsp + 0x68]
mov qword [rsp + 0xa8], rcx
jae 0x140087b52
cmp dword [r13], 0x10
jne 0x140087bda
test r9d, r9d
jle 0x140087aea
xor ebx, ebx
mov rcx, r14
call fcn.140092b70
mov rcx, qword [rsp + 0x58]
mov word [rcx + rbx*8], ax
inc rbx
cmp dword [rsp + 0x48], ebx
jne 0x140087b36
jmp 0x140087aea
cmp byte [rsp + 0x54], 0
je 0x140087c14
xor eax, eax
cmp rcx, 3
sete cl
test r9d, r9d
jle 0x140087aea
mov al, cl
neg eax
mov rcx, qword [rsp + 0xa8]
lea rcx, [r15 + rcx*2]
mov r8, qword [rsp + 0x80]
cmp r8d, 8
jb 0x140087bbc
mov edx, dword [rsp + 0xc0]
mov word [rcx], ax
mov word [rcx + 8], ax
mov word [rcx + 0x10], ax
mov word [rcx + 0x18], ax
mov word [rcx + 0x20], ax
mov word [rcx + 0x28], ax
mov word [rcx + 0x30], ax
mov word [rcx + 0x38], ax
add rcx, 0x40
add edx, 0xfffffff8
jne 0x140087b94
test r8b, 7
je 0x140087aea
xor edx, edx
mov word [rcx + rdx*8], ax
inc rdx
cmp dword [rsp + 0x38], edx
jne 0x140087bc8
jmp 0x140087aea
cmp dword [rsp + 0x98], 0x10
jne 0x140087c83
test r9d, r9d
jle 0x140087aea
xor ebx, ebx
mov rcx, r14
call fcn.140092b70
mov rcx, qword [rsp + 0x88]
mov byte [rcx + rbx*4], ah
inc rbx
cmp dword [rsp + 0x48], ebx
jne 0x140087bf3
jmp 0x140087aea
cmp rcx, 3
sete al
test r9d, r9d
jle 0x140087aea
neg al
mov rcx, qword [rsp + 0xa8]
add rcx, r15
mov r8, qword [rsp + 0x80]
cmp r8d, 8
jb 0x140087c66
mov edx, dword [rsp + 0xc0]
mov byte [rcx], al
mov byte [rcx + 4], al
mov byte [rcx + 8], al
mov byte [rcx + 0xc], al
mov byte [rcx + 0x10], al
mov byte [rcx + 0x14], al
mov byte [rcx + 0x18], al
mov byte [rcx + 0x1c], al
add rcx, 0x20
add edx, 0xfffffff8
jne 0x140087c46
test r8b, 7
je 0x140087aea
xor edx, edx
mov byte [rcx + rdx*4], al
inc rdx
cmp dword [rsp + 0x38], edx
jne 0x140087c72
jmp 0x140087aea
test r9d, r9d
jle 0x140087aea
mov rcx, qword [rsi]
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
xor ebx, ebx
jmp 0x140087cc1
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
mov r8, qword [rsp + 0x88]
mov byte [r8 + rbx*4], dl
inc rbx
cmp dword [rsp + 0x48], ebx
je 0x140087aea
cmp rcx, rax
jb 0x140087c9b
cmp dword [rdi], 0
je 0x140087cff
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140087d03
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140087d13
xor edx, edx
jmp 0x140087ca8
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
jmp 0x140087ca8
cmp dword [rsp + 0x90], 4
mov r8d, dword [rsp + 0x64]
jb 0x140087e89
cmp dword [r13], 0x10
jne 0x140087deb
test r9d, r9d
jle 0x140087e89
mov eax, r9d
xor ecx, ecx
vmovss xmm0, dword [0x14011a424]
jmp 0x140087d65
inc rcx
cmp rax, rcx
je 0x140087e89
movzx edx, word [r15 + rcx*8 + 6]
test edx, edx
je 0x140087d59
cmp edx, 0xffff
je 0x140087d59
movzx edx, dx
vcvtsi2ss xmm1, xmm5, edx
vdivss xmm1, xmm0, xmm1
vmulss xmm2, xmm1, xmm0
vsubss xmm2, xmm0, xmm2
vmovd xmm3, dword [r15 + rcx*8]
vpmovzxwd xmm3, xmm3
vcvtdq2ps xmm3, xmm3
vmovsldup xmm4, xmm1
vmulps xmm3, xmm4, xmm3
vmovsldup xmm4, xmm2
vaddps xmm3, xmm3, xmm4
vcvttps2dq xmm3, xmm3
vpshuflw xmm3, xmm3, 0xe8
vmovd dword [r15 + rcx*8], xmm3
movzx edx, word [r15 + rcx*8 + 4]
vcvtsi2ss xmm3, xmm5, edx
vmulss xmm1, xmm1, xmm3
vaddss xmm1, xmm1, xmm2
vcvttss2si edx, xmm1
mov word [r15 + rcx*8 + 4], dx
jmp 0x140087d59
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rax, str.corrupt
jmp 0x140087461
test r9d, r9d
jle 0x140087e89
mov eax, r9d
xor ecx, ecx
vmovss xmm0, dword [0x14011a420]
vmovss xmm1, dword [0x14010ce70]
jmp 0x140087e13
inc rcx
cmp rax, rcx
je 0x140087e89
movzx edx, byte [r15 + rcx*4 + 3]
test edx, edx
je 0x140087e0b
cmp edx, 0xff
je 0x140087e0b
movzx edx, dl
vcvtsi2ss xmm2, xmm5, edx
vdivss xmm2, xmm0, xmm2
vmulss xmm3, xmm2, xmm1
vsubss xmm3, xmm1, xmm3
movzx edx, byte [r15 + rcx*4]
vcvtsi2ss xmm4, xmm5, edx
vmulss xmm4, xmm2, xmm4
vaddss xmm4, xmm4, xmm3
vcvttss2si edx, xmm4
mov byte [r15 + rcx*4], dl
movzx edx, byte [r15 + rcx*4 + 1]
vcvtsi2ss xmm4, xmm5, edx
vmulss xmm4, xmm2, xmm4
vaddss xmm4, xmm4, xmm3
vcvttss2si edx, xmm4
mov byte [r15 + rcx*4 + 1], dl
movzx edx, byte [r15 + rcx*4 + 2]
vcvtsi2ss xmm4, xmm5, edx
vmulss xmm2, xmm2, xmm4
vaddss xmm2, xmm2, xmm3
vcvttss2si edx, xmm2
mov byte [r15 + rcx*4 + 2], dl
jmp 0x140087e0b
test r8d, 0xfffffffb
je 0x140087edb
cmp dword [r13], 0x10
jne 0x140087eb5
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
mov rcx, r15
mov edx, 4
mov r9d, dword [rsp + 0x70]
call fcn.140091ad0
jmp 0x140087ecf
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
mov rcx, r15
mov edx, 4
mov r9d, dword [rsp + 0x70]
call fcn.140090a80
mov r15, rax
test rax, rax
je 0x140086ba6
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x140087eee
mov dword [rax], 4
mov rax, qword [rsp + 0xe0]
mov ecx, dword [rsp + 0x78]
mov dword [rax], ecx
mov rax, qword [rsp + 0xd8]
mov ecx, dword [rsp + 0x70]
mov dword [rax], ecx
jmp 0x1400871b8
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsi], rax
jmp 0x140088463
mov eax, dword [r14 + 4]
test eax, eax
jle 0x140088f07
mov eax, dword [r14]
add eax, 7
shr eax, 3
neg eax
and eax, 3
mov dword [rsp + 0x90], eax
mov eax, eax
mov qword [rsp + 0xa8], rax
xor ebx, ebx
xor edx, edx
jmp 0x140087f70
add r8, qword [rsp + 0xa8]
mov qword [rsi], r8
mov edx, dword [rsp + 0x88]
inc edx
mov ecx, dword [r14 + 4]
cmp edx, ecx
jge 0x140088bde
mov r8, qword [rsi]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
cmp r8, rcx
mov dword [rsp + 0x88], edx
jae 0x140087f99
lea rdx, [r8 + 1]
mov qword [rsi], rdx
movzx r8d, byte [r8]
mov qword [rsp + 0x38], rdx
jmp 0x140087ffe
mov qword [rsp + 0x38], r8
cmp dword [rdi], 0
je 0x140087fd8
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140087fdd
movsxd rcx, eax
add rcx, r12
movzx r8d, byte [r12]
jmp 0x140087fee
xor r8d, r8d
jmp 0x140087ffe
mov dword [rdi], 0
mov byte [r12], 0
xor r8d, r8d
mov rcx, rbp
mov rax, qword [rsp + 0x40]
mov qword [rax], rcx
mov qword [rsi], rbp
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x58], rcx
mov edx, dword [r14]
test edx, edx
jle 0x140088128
movzx r8d, r8b
xor r13d, r13d
mov r9d, 7
mov r10d, ebx
jmp 0x14008802f
dec r9d
mov r10d, ebx
cmp r13d, edx
jge 0x140088128
xor r11d, r11d
bt r8d, r9d
setb r11b
movsxd rbx, r10d
lea rcx, [rbx + 3]
movzx eax, byte [rsp + r11*4 + 0x150]
mov byte [r15 + rbx], al
movzx eax, byte [rsp + r11*4 + 0x151]
mov byte [r15 + rbx + 1], al
movzx eax, byte [rsp + r11*4 + 0x152]
mov byte [r15 + rbx + 2], al
mov rbx, rcx
cmp dword [rsp + 0x48], 4
jne 0x140088080
add r10d, 4
mov byte [r15 + rbx], 0xff
mov ebx, r10d
inc r13d
cmp r13d, edx
je 0x140088128
test r9d, r9d
jg 0x140088020
mov rcx, qword [rsp + 0x38]
cmp rcx, qword [rsp + 0x58]
jae 0x1400880af
lea rax, [rcx + 1]
mov qword [rsi], rax
movzx r8d, byte [rcx]
mov qword [rsp + 0x38], rax
jmp 0x140088119
cmp dword [rdi], 0
je 0x1400880e8
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x1400880ed
cdqe
add rax, r12
movzx r8d, byte [r12]
jmp 0x1400880fe
xor r8d, r8d
jmp 0x140088119
mov dword [rdi], 0
mov byte [r12], 0
xor r8d, r8d
mov rax, rbp
mov qword [rsp + 0x58], rax
mov qword [r14 + 0xc8], rax
mov qword [r14 + 0xc0], rbp
mov edx, dword [r14]
mov qword [rsp + 0x38], rbp
movzx r8d, r8b
mov r9d, 7
jmp 0x140088023
cmp dword [rsp + 0x90], 0
je 0x140087f5b
cmp qword [r14 + 0x10], 0
mov rcx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x38]
je 0x140087f50
mov eax, ecx
sub eax, r8d
mov edx, dword [rsp + 0x90]
sub edx, eax
jle 0x140087f50
mov qword [r14 + 0xc0], rcx
mov rcx, qword [r14 + 0x28]
call qword [r14 + 0x18]
jmp 0x140087f5b
mov eax, dword [r14]
mov edx, dword [r14 + 4]
test edx, edx
jle 0x140088bdb
neg eax
and eax, 3
mov dword [rsp + 0x88], eax
mov eax, eax
mov qword [rsp + 0x90], rax
xor r11d, r11d
xor eax, eax
mov r9d, dword [rsp + 0x68]
jmp 0x1400881d0
mov qword [r14 + 0xc0], rcx
mov rcx, qword [r14 + 0x28]
mov r13, r11
call qword [r14 + 0x18]
mov r11, r13
mov r9d, dword [rsp + 0x68]
mov eax, dword [rsp + 0x58]
inc eax
mov ecx, dword [r14 + 4]
cmp eax, ecx
jge 0x140088bde
mov dword [rsp + 0x58], eax
cmp dword [r14], 0
jle 0x1400883ea
mov rcx, qword [rsi]
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax]
xor r13d, r13d
mov eax, r9d
jmp 0x140088203
add r13d, 2
cmp r13d, dword [r14]
mov rdx, qword [rsp + 0x38]
jge 0x1400883f4
cmp rcx, rdx
jae 0x14008821c
mov qword [rsp + 0x38], rdx
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140088290
cmp dword [rdi], 0
je 0x14008825b
mov qword [rsp + 0x38], r11
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140088264
movsxd r8, eax
add r8, r12
movzx edx, byte [r12]
jmp 0x140088274
mov qword [rsp + 0x38], rdx
xor edx, edx
jmp 0x140088290
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov r8, rbp
mov eax, dword [rsp + 0x68]
mov r11, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], r8
mov qword [rcx], r8
mov qword [rsi], rbp
mov rcx, rbp
movzx r8d, dl
mov edx, r8d
and edx, 0xf
mov r9d, r8d
shr r9d, 4
mov ebx, eax
cmp eax, 4
cmovne r9d, r8d
mov r8d, 0
cmovne edx, r8d
movsxd r8, r11d
lea rax, [r8 + 3]
movzx r10d, byte [rsp + r9*4 + 0x150]
mov byte [r15 + r8], r10b
movzx r10d, byte [rsp + r9*4 + 0x151]
mov byte [r15 + r8 + 1], r10b
movzx r9d, byte [rsp + r9*4 + 0x152]
mov byte [r15 + r8 + 2], r9b
mov r10, rax
cmp dword [rsp + 0x48], 4
jne 0x1400882fa
add r11d, 4
mov byte [r15 + r10], 0xff
mov r10d, r11d
lea r8d, [r13 + 1]
cmp r8d, dword [r14]
je 0x1400883ef
mov eax, ebx
cmp ebx, 8
jne 0x140088328
cmp rcx, qword [rsp + 0x38]
mov ebx, dword [rsp + 0x48]
jae 0x14008832e
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x14008839c
mov ebx, dword [rsp + 0x48]
jmp 0x14008839f
cmp dword [rdi], 0
je 0x14008836c
mov qword [rsp + 0x38], r10
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140088370
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140088380
xor edx, edx
jmp 0x14008839c
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov r10, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rax
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov eax, dword [rsp + 0x68]
movzx edx, dl
movsxd r8, r10d
lea r11, [r8 + 3]
mov edx, edx
movzx r9d, byte [rsp + rdx*4 + 0x150]
mov byte [r15 + r8], r9b
movzx r9d, byte [rsp + rdx*4 + 0x151]
mov byte [r15 + r8 + 1], r9b
movzx edx, byte [rsp + rdx*4 + 0x152]
mov byte [r15 + r8 + 2], dl
cmp ebx, 4
jne 0x1400881f1
add r10d, 4
mov byte [r15 + r11], 0xff
mov r11d, r10d
jmp 0x1400881f1
mov eax, r9d
jmp 0x1400883f4
mov r11d, r10d
mov eax, ebx
mov r9d, eax
cmp dword [rsp + 0x88], 0
je 0x1400881be
cmp qword [r14 + 0x10], 0
je 0x14008842f
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, qword [rsi]
mov r8d, ecx
sub r8d, eax
mov edx, dword [rsp + 0x88]
sub edx, r8d
jg 0x1400881a4
jmp 0x140088432
mov rax, qword [rsi]
add rax, qword [rsp + 0x90]
mov qword [rsi], rax
jmp 0x1400881be
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rax, str.bad_bpp
jmp 0x140087461
mov rax, qword [rsi]
mov ecx, r9d
add rcx, rax
mov qword [rsi], rcx
mov ecx, dword [rsp + 0x68]
cmp ecx, 0x10
je 0x14008849f
cmp ecx, 0x20
je 0x1400884b3
mov dword [rsp + 0xa4], 0
cmp ecx, 0x18
jne 0x140088549
mov eax, dword [r14]
and eax, 3
mov dword [rsp + 0xa4], eax
mov dword [rsp + 0x98], 0
jmp 0x1400884f8
mov eax, dword [r14]
add eax, eax
and eax, 2
mov dword [rsp + 0xa4], eax
jmp 0x140088549
mov eax, dword [rsp + 0xa8]
xor eax, 0xff
mov ecx, dword [rsp + 0x90]
xor ecx, 0xff00
or ecx, eax
mov eax, dword [rsp + 0x88]
xor eax, 0xff0000
or eax, ecx
sete al
mov dword [rsp + 0xa4], 0
test al, r13b
je 0x140088549
mov al, 1
mov dword [rsp + 0x98], eax
mov dword [rsp + 0xc4], 0
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x70], 0
mov dword [rsp + 0x54], 0
mov dword [rsp + 0xb4], 0
xor r13d, r13d
mov dword [rsp + 0xd0], 0
mov dword [rsp + 0xc8], 0
xor eax, eax
jmp 0x140088648
cmp dword [rsp + 0x88], 0
je 0x140088bc6
cmp dword [rsp + 0x90], 0
je 0x140088bc6
cmp dword [rsp + 0xa8], 0
je 0x140088bc6
mov ebx, dword [rsp + 0x88]
mov ecx, ebx
call fcn.1400973d0
mov dword [rsp + 0x80], eax
mov ecx, ebx
call fcn.140097440
mov r13d, eax
mov ebx, dword [rsp + 0x90]
mov ecx, ebx
call fcn.1400973d0
mov dword [rsp + 0x70], eax
mov ecx, ebx
call fcn.140097440
mov dword [rsp + 0xd0], eax
mov ebx, dword [rsp + 0xa8]
mov ecx, ebx
call fcn.1400973d0
mov dword [rsp + 0x54], eax
mov ecx, ebx
call fcn.140097440
mov dword [rsp + 0xc8], eax
mov ebx, dword [rsp + 0x58]
mov ecx, ebx
call fcn.1400973d0
mov dword [rsp + 0xb4], eax
mov ecx, ebx
call fcn.140097440
cmp r13d, 8
ja 0x140088bc6
cmp dword [rsp + 0xd0], 8
ja 0x140088bc6
cmp dword [rsp + 0xc8], 8
ja 0x140088bc6
cmp eax, 9
jae 0x140088bc6
add dword [rsp + 0x80], 0xfffffff9
add dword [rsp + 0x70], 0xfffffff9
add dword [rsp + 0x54], 0xfffffff9
add dword [rsp + 0xb4], 0xfffffff9
mov dword [rsp + 0x98], 0
mov cl, 1
mov dword [rsp + 0xc4], ecx
mov edx, dword [r14 + 4]
test edx, edx
jle 0x140088bdb
mov ecx, dword [rsp + 0x80]
neg ecx
mov dword [rsp + 0xc0], ecx
mov ecx, 8
mov edx, 8
sub edx, r13d
mov dword [rsp + 0x10c], edx
mov edx, r13d
mov qword [rsp + 0x120], rdx
mov edx, dword [rsp + 0x70]
neg edx
mov dword [rsp + 0x108], edx
mov edx, 8
mov r8d, dword [rsp + 0xd0]
sub edx, r8d
mov dword [rsp + 0x104], edx
mov edx, r8d
mov qword [rsp + 0xd0], rdx
mov edx, dword [rsp + 0x54]
neg edx
mov dword [rsp + 0x100], edx
mov edx, 8
mov r8d, dword [rsp + 0xc8]
sub edx, r8d
mov dword [rsp + 0xfc], edx
mov edx, r8d
mov qword [rsp + 0xc8], rdx
mov edx, dword [rsp + 0xb4]
neg edx
mov dword [rsp + 0xf4], edx
sub ecx, eax
mov dword [rsp + 0xf8], ecx
mov eax, eax
mov qword [rsp + 0x118], rax
mov eax, dword [rsp + 0xa4]
mov qword [rsp + 0x110], rax
xor r9d, r9d
xor r13d, r13d
mov r11d, dword [rsp + 0x48]
jmp 0x14008873e
mov rax, qword [rsi]
add rax, qword [rsp + 0x110]
mov qword [rsi], rax
inc r13d
mov ecx, dword [r14 + 4]
cmp r13d, ecx
jge 0x140088be3
mov eax, dword [r14]
cmp byte [rsp + 0xc4], 0
mov dword [rsp + 0xf0], r13d
je 0x1400888fc
test eax, eax
jle 0x140088b65
xor ebx, ebx
mov eax, r9d
mov dword [rsp + 0x38], r9d
jmp 0x140088783
or dword [rsp + 0x78], r13d
inc ebx
mov eax, r9d
mov dword [rsp + 0x38], r9d
cmp ebx, dword [r14]
jge 0x140088b65
mov rcx, r14
call fcn.140096d20
mov r13d, eax
cmp dword [rsp + 0x68], 0x10
je 0x1400887a3
mov rcx, r14
call fcn.140096d20
shl eax, 0x10
or r13d, eax
mov eax, r13d
and eax, dword [rsp + 0x88]
mov edx, eax
mov ecx, dword [rsp + 0xc0]
shl edx, cl
mov ecx, dword [rsp + 0x80]
shr eax, cl
test ecx, ecx
cmovs eax, edx
mov ecx, dword [rsp + 0x10c]
shr eax, cl
mov rcx, qword [rsp + 0x120]
lea r10, [0x14011a770]
imul eax, dword [r10 + rcx*4]
lea r11, [0x14011a7a0]
movzx ecx, byte [r11 + rcx*4]
sar eax, cl
mov edx, r13d
and edx, dword [rsp + 0x90]
mov r8d, edx
mov ecx, dword [rsp + 0x108]
shl r8d, cl
mov ecx, dword [rsp + 0x70]
shr edx, cl
test ecx, ecx
cmovs edx, r8d
mov ecx, dword [rsp + 0x104]
shr edx, cl
mov rcx, qword [rsp + 0xd0]
imul edx, dword [r10 + rcx*4]
movzx ecx, byte [r11 + rcx*4]
sar edx, cl
mov r8d, r13d
and r8d, dword [rsp + 0xa8]
mov r9d, r8d
mov ecx, dword [rsp + 0x100]
shl r9d, cl
mov ecx, dword [rsp + 0x54]
shr r8d, cl
test ecx, ecx
cmovs r8d, r9d
movsxd r9, dword [rsp + 0x38]
mov ecx, dword [rsp + 0xfc]
shr r8d, cl
mov byte [r15 + r9], al
mov rax, qword [rsp + 0xc8]
imul r8d, dword [r10 + rax*4]
movzx ecx, byte [r11 + rax*4]
sar r8d, cl
mov byte [r15 + r9 + 1], dl
mov byte [r15 + r9 + 2], r8b
add r9, 3
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x1400888d4
and r13d, eax
mov eax, r13d
mov ecx, dword [rsp + 0xf4]
shl eax, cl
mov ecx, dword [rsp + 0xb4]
shr r13d, cl
test ecx, ecx
cmovs r13d, eax
mov ecx, dword [rsp + 0xf8]
shr r13d, cl
mov rax, qword [rsp + 0x118]
imul r13d, dword [r10 + rax*4]
movzx ecx, byte [r11 + rax*4]
sar r13d, cl
jmp 0x1400888da
mov r13d, 0xff
mov r11d, dword [rsp + 0x48]
cmp r11d, 4
jne 0x14008876b
mov eax, dword [rsp + 0x38]
add eax, 4
mov byte [r15 + r9], r13b
mov r9d, eax
jmp 0x14008876b
test eax, eax
jle 0x140088b65
mov rcx, qword [rsi]
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
xor r13d, r13d
mov ebx, r9d
jmp 0x14008892d
movzx edx, dl
or dword [rsp + 0x78], edx
inc r13d
mov ebx, r9d
cmp r13d, dword [r14]
jge 0x140088b65
cmp rcx, rax
jae 0x140088941
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x1400889a1
cmp dword [rdi], 0
je 0x14008897a
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x14008897e
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x14008898e
xor edx, edx
jmp 0x1400889a1
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov r11d, dword [rsp + 0x48]
movsxd r9, ebx
mov byte [r9 + r15 + 2], dl
cmp rcx, rax
jae 0x1400889bd
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140088a2b
cmp dword [rdi], 0
je 0x1400889fd
mov dword [rsp + 0x38], ebx
mov rbx, r9
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140088a01
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140088a11
xor edx, edx
jmp 0x140088a2b
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov r9, rbx
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov r11d, dword [rsp + 0x48]
mov ebx, dword [rsp + 0x38]
mov byte [r9 + r15 + 1], dl
cmp rcx, rax
jae 0x140088a44
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140088ab2
cmp dword [rdi], 0
je 0x140088a84
mov dword [rsp + 0x38], ebx
mov rbx, r9
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140088a88
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140088a98
xor edx, edx
jmp 0x140088ab2
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov r9, rbx
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov r11d, dword [rsp + 0x48]
mov ebx, dword [rsp + 0x38]
mov byte [r15 + r9], dl
add r9, 3
mov dl, 0xff
cmp byte [rsp + 0x98], 0
je 0x140088b4c
cmp rcx, rax
jae 0x140088ade
lea r8, [rcx + 1]
mov qword [rsi], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140088b4c
cmp dword [rdi], 0
je 0x140088b1e
mov dword [rsp + 0x38], ebx
mov rbx, r9
mov r8d, dword [r14 + 0x34]
mov rcx, qword [r14 + 0x28]
mov rdx, r12
call qword [r14 + 0x10]
mov ecx, dword [r14 + 0xc0]
sub ecx, dword [r14 + 0xd0]
add dword [r14 + 0xb8], ecx
test eax, eax
je 0x140088b22
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140088b32
xor edx, edx
jmp 0x140088b4c
mov dword [rdi], 0
mov byte [r12], 0
xor edx, edx
mov rax, rbp
mov r9, rbx
mov ebx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
mov qword [rsi], rbp
mov rcx, rbp
mov r11d, dword [rsp + 0x48]
cmp r11d, 4
jne 0x140088917
add ebx, 4
mov byte [r15 + r9], dl
mov r9d, ebx
jmp 0x140088917
cmp dword [rsp + 0xa4], 0
mov r13d, dword [rsp + 0xf0]
je 0x14008872e
cmp qword [r14 + 0x10], 0
je 0x140088720
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, qword [rsi]
mov r8d, ecx
sub r8d, eax
mov edx, dword [rsp + 0xa4]
sub edx, r8d
jle 0x140088723
mov qword [r14 + 0xc0], rcx
mov rcx, qword [r14 + 0x28]
mov rbx, r9
call qword [r14 + 0x18]
mov r9, rbx
mov r11d, dword [rsp + 0x48]
jmp 0x14008872e
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rax, str.bad_masks
jmp 0x140087461
mov rcx, rdx
mov r11d, dword [rsp + 0x48]
cmp r11d, 4
mov qword [rsp + 0x38], rcx
jne 0x140088c72
cmp dword [rsp + 0x78], 0
jne 0x140088c72
mov edx, dword [r14]
imul edx, ecx
shl edx, 2
dec edx
js 0x140088c72
mov r8d, edx
shr r8d, 2
inc r8d
mov rax, rdx
and r8, 7
je 0x140088c2a
mov rax, rdx
mov byte [r15 + rax], 0xff
add rax, 0xfffffffffffffffc
dec r8
jne 0x140088c1c
cmp edx, 0x1c
mov rcx, qword [rsp + 0x38]
jb 0x140088c72
add rax, 4
mov byte [r15 + rax - 4], 0xff
mov byte [r15 + rax - 8], 0xff
mov byte [r15 + rax - 0xc], 0xff
mov byte [r15 + rax - 0x10], 0xff
mov byte [r15 + rax - 0x14], 0xff
mov byte [r15 + rax - 0x18], 0xff
mov byte [r15 + rax - 0x1c], 0xff
mov byte [r15 + rax - 0x20], 0xff
add rax, 0xffffffffffffffe0
cmp rax, 3
ja 0x140088c38
cmp dword [rsp + 0xec], 0
jle 0x140088e9a
cmp ecx, 2
jl 0x140088e9a
mov eax, ecx
shr eax, 1
mov qword [rsp + 0x40], rax
mov edx, dword [r14]
imul edx, dword [rsp + 0x48]
lea rax, [r15 + rdx]
mov qword [rsp + 0x88], rax
mov r9d, edx
and r9d, 0xffffffc0
mov eax, edx
and eax, 0xfffffff0
mov r8, rdx
neg r8
mov qword [rsp + 0x58], r8
lea r8, [r15 + 0x20]
mov qword [rsp + 0x68], r8
lea edi, [rcx - 1]
imul edi, edx
lea r8, [r15 + 1]
mov qword [rsp + 0x90], r8
xor r12d, r12d
xor r13d, r13d
mov qword [rsp + 0xa8], r9
jmp 0x140088cfb
inc r13
add r12d, edx
sub edi, edx
cmp r13, qword [rsp + 0x40]
je 0x140088e9a
test edx, edx
jle 0x140088ce8
mov ebp, edi
mov esi, r12d
mov r10d, edx
imul r10d, r13d
lea r8, [r15 + r10]
mov ebx, r13d
not ebx
add ebx, ecx
cmp edx, 0x10
jae 0x140088d23
xor r10d, r10d
jmp 0x140088e17
mov rcx, r8
mov r8d, edx
imul r8d, ebx
mov r9, qword [rsp + 0x88]
lea r11, [r9 + r8]
mov qword [rsp + 0x78], rcx
cmp rcx, r11
jae 0x140088d60
add r10, r9
add r8, r15
cmp r8, r10
jae 0x140088d60
xor r10d, r10d
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x38]
jmp 0x140088e17
cmp edx, 0x40
mov rcx, qword [rsp + 0x38]
jae 0x140088d6f
xor r11d, r11d
jmp 0x140088ddd
mov r8, qword [rsp + 0x68]
lea r10, [r8 + rsi]
lea r11, [r8 + rbp]
xor r8d, r8d
mov r9, qword [rsp + 0xa8]
vmovups ymm0, ymmword [r10 + r8 - 0x20]
vmovups ymm1, ymmword [r10 + r8]
vmovups ymm2, ymmword [r11 + r8 - 0x20]
vmovups ymm3, ymmword [r11 + r8]
vmovups ymmword [r10 + r8 - 0x20], ymm2
vmovups ymmword [r10 + r8], ymm3
vmovups ymmword [r11 + r8 - 0x20], ymm0
vmovups ymmword [r11 + r8], ymm1
add r8, 0x40
cmp r9, r8
jne 0x140088d87
cmp r9, rdx
mov r8, qword [rsp + 0x78]
je 0x140088ce8
mov r11, r9
mov r10, r9
test dl, 0x30
je 0x140088e17
lea r8, [r15 + rsi]
lea r10, [r15 + rbp]
vmovups xmm0, xmmword [r8 + r11]
vmovups xmm1, xmmword [r10 + r11]
vmovups xmmword [r8 + r11], xmm1
vmovups xmmword [r10 + r11], xmm0
add r11, 0x10
cmp rax, r11
jne 0x140088de5
mov r10, rax
cmp rax, rdx
mov r8, qword [rsp + 0x78]
je 0x140088ce8
mov r11, r10
test dl, 1
je 0x140088e46
imul ebx, edx
add rbx, r15
mov rcx, r8
movzx r8d, byte [r8 + r10]
movzx r11d, byte [rbx + r10]
mov byte [rcx + r10], r11b
mov rcx, qword [rsp + 0x38]
mov byte [rbx + r10], r8b
mov r11, r10
or r11, 1
not r10
cmp r10, qword [rsp + 0x58]
je 0x140088ce8
mov r8, qword [rsp + 0x90]
add rbp, r8
add rsi, r8
movzx r8d, byte [rsi + r11 - 1]
movzx r10d, byte [rbp + r11 - 1]
mov byte [rsi + r11 - 1], r10b
mov byte [rbp + r11 - 1], r8b
movzx r8d, byte [rsi + r11]
movzx r10d, byte [rbp + r11]
mov byte [rsi + r11], r10b
mov byte [rbp + r11], r8b
add r11, 2
cmp rdx, r11
jne 0x140088e62
jmp 0x140088ce8
mov r8d, dword [rsp + 0x64]
test r8d, r8d
je 0x140088ed0
mov edx, dword [rsp + 0x48]
cmp edx, r8d
je 0x140088ed0
mov r9d, dword [r14]
mov rax, qword [rsp + 0x38]
mov dword [rsp + 0x20], eax
mov rcx, r15
vzeroupper
call fcn.140090a80
mov r15, rax
test rax, rax
je 0x140086ba6
mov eax, dword [r14]
mov rcx, qword [rsp + 0xd8]
mov dword [rcx], eax
mov eax, dword [r14 + 4]
mov rcx, qword [rsp + 0xe0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x1400871b8
mov eax, dword [r14 + 8]
mov dword [rcx], eax
jmp 0x1400871b8
mov rcx, rax
jmp 0x140088bde
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov rdi, r9
mov r14, r8
mov r13, rdx
mov r15, rcx
mov rax, qword [0x140203ac0]
xor rax, rsp
mov qword [rsp + 0xb0], rax
lea r12, [rcx + 0x38]
lea rbx, [rcx + 0x39]
mov rcx, qword [rcx + 0xc0]
mov rax, qword [r15 + 0xc8]
mov esi, 0x5c
jmp 0x14008972e
inc rcx
mov qword [r15 + 0xc0], rcx
dec esi
je 0x140089785
cmp rcx, rax
jb 0x140089720
cmp dword [r15 + 0x30], 0
je 0x14008972a
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x140089769
cdqe
add rax, r12
jmp 0x140089779
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov rcx, rbx
jmp 0x140089723
mov rcx, r15
call fcn.140092b70
mov esi, eax
mov rcx, r15
call fcn.140092b70
mov ebp, eax
cmp qword [r15 + 0x10], 0
je 0x1400897b3
mov rcx, qword [r15 + 0x28]
call qword [r15 + 0x20]
test eax, eax
je 0x1400897c3
cmp dword [r15 + 0x30], 0
je 0x14008982c
mov rax, qword [r15 + 0xc0]
cmp rax, qword [r15 + 0xc8]
jae 0x14008982c
test ebp, ebp
je 0x14008984b
mov eax, 0x7fffffff
xor edx, edx
div ebp
cmp eax, esi
jb 0x14008a055
mov eax, ebp
imul eax, esi
cmp eax, 0x20000000
jae 0x14008a055
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
test ebp, ebp
je 0x140089875
mov eax, 0x7fffffff
xor edx, edx
div ebp
cmp eax, esi
jae 0x140089875
jmp 0x14008a039
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, [0x14011aeef]
jmp 0x14008a06f
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r14
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
mov rcx, r15
call fcn.140092b70
mov r13d, ebp
imul r13d, esi
cmp r13d, 0x1fffffff
ja 0x14008a039
shl r13d, 2
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14008a039
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rax
mov rcx, rax
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
xor esi, esi
lea rdi, [rsp + 0x92]
xor r13d, r13d
mov dword [rsp + 0x5c], ebp
nop dword [rax]
cmp rsi, 0xa
je 0x14008a09f
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x140089930
lea rdx, [rcx + 1]
mov qword [r15 + 0xc0], rdx
movzx ecx, byte [rcx]
mov dword [rsp + 0x34], ecx
mov rcx, rdx
cmp rcx, rax
jae 0x1400899b0
lea rdx, [rcx + 1]
mov qword [r15 + 0xc0], rdx
movzx ebp, byte [rcx]
mov rcx, rdx
jmp 0x140089a12
cmp dword [r15 + 0x30], 0
je 0x14008996f
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x14008997e
cdqe
add rax, r12
movzx ecx, byte [r12]
mov dword [rsp + 0x34], ecx
jmp 0x140089996
mov dword [rsp + 0x34], 0
cmp rcx, rax
jb 0x14008990b
jmp 0x1400899b0
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
mov dword [rsp + 0x34], 0
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
cmp rcx, rax
jb 0x14008990b
cmp dword [r15 + 0x30], 0
je 0x1400899eb
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x1400899ef
cdqe
add rax, r12
movzx ebp, byte [r12]
jmp 0x140089a01
xor ebp, ebp
jmp 0x140089a12
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
xor ebp, ebp
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
mov byte [rdi - 2], bpl
cmp rcx, rax
jae 0x140089a30
lea r8, [rcx + 1]
mov qword [r15 + 0xc0], r8
movzx edx, byte [rcx]
mov rcx, r8
jmp 0x140089a92
cmp dword [r15 + 0x30], 0
je 0x140089a6b
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x140089a6f
cdqe
add rax, r12
movzx edx, byte [r12]
jmp 0x140089a81
xor edx, edx
jmp 0x140089a92
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
xor edx, edx
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
mov byte [rdi - 1], dl
cmp rcx, rax
jae 0x140089ab0
lea rdx, [rcx + 1]
mov qword [r15 + 0xc0], rdx
movzx r14d, byte [rcx]
mov rcx, rdx
jmp 0x140089b14
cmp dword [r15 + 0x30], 0
je 0x140089aeb
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x140089af0
cdqe
add rax, r12
movzx r14d, byte [r12]
jmp 0x140089b03
xor r14d, r14d
jmp 0x140089b14
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
xor r14d, r14d
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
mov byte [rdi], r14b
cmp qword [r15 + 0x10], 0
je 0x140089b43
mov rcx, qword [r15 + 0x28]
call qword [r15 + 0x20]
test eax, eax
je 0x140089b4c
cmp dword [r15 + 0x30], 0
je 0x14008a0bb
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x14008a0bb
cmp bpl, 8
jne 0x14008a09f
movzx eax, r14b
or r13d, eax
add rdi, 3
inc rsi
cmp byte [rsp + 0x34], 0
mov eax, dword [rsp + 0x5c]
jne 0x1400898d0
and r13d, 0x10
cmp r13d, 1
mov r8d, 4
sbb r8d, 0
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x140089b92
mov dword [rdi], r8d
test eax, eax
mov r14, qword [rsp + 0x40]
mov ebp, dword [rsp + 0x120]
mov r13, qword [rsp + 0x38]
je 0x14008a02a
mov ecx, eax
mov rax, qword [rsp + 0x28]
lea eax, [rax*4]
mov ecx, ecx
mov qword [rsp + 0x70], rcx
xor ecx, ecx
mov dword [rsp + 0x34], r8d
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x6c], eax
mov qword [rsp + 0x78], rcx
imul eax, ecx
cdqe
add rax, qword [rsp + 0x48]
mov qword [rsp + 0x60], rax
xor edx, edx
jmp 0x140089c1c
mov rdx, qword [rsp + 0x80]
inc rdx
cmp rsi, rdx
mov rdi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x40]
mov ebp, dword [rsp + 0x120]
mov r13, qword [rsp + 0x38]
mov r8d, dword [rsp + 0x34]
je 0x14008a013
lea rax, [rdx + rdx*2]
movzx ecx, byte [rsp + rax + 0x91]
test ecx, ecx
mov qword [rsp + 0x80], rdx
je 0x140089e34
cmp ecx, 1
je 0x140089e78
cmp ecx, 2
jne 0x14008a169
cmp dword [rsp + 0x28], 0
je 0x140089bed
lea r14, [rsp + rax]
add r14, 0x92
mov rax, qword [rsp + 0x28]
mov ebp, eax
mov r13, qword [rsp + 0x60]
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x140089c8e
lea rdx, [rcx + 1]
mov qword [r15 + 0xc0], rdx
movzx edi, byte [rcx]
mov rcx, rdx
jmp 0x140089cf0
cmp dword [r15 + 0x30], 0
je 0x140089cc9
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x140089ccd
cdqe
add rax, r12
movzx edi, byte [r12]
jmp 0x140089cdf
xor edi, edi
jmp 0x140089cf0
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
xor edi, edi
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
cmp qword [r15 + 0x10], 0
je 0x140089d1c
mov rcx, qword [r15 + 0x28]
call qword [r15 + 0x20]
test eax, eax
je 0x140089d25
cmp dword [r15 + 0x30], 0
je 0x14008a143
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x14008a143
movzx eax, dil
test al, al
mov dword [rsp + 0x58], ebp
js 0x140089d71
cmp ebp, eax
jbe 0x14008a143
inc eax
movzx edi, byte [r14]
mov dword [rsp + 0x68], eax
mov ebp, eax
mov rcx, r15
mov edx, edi
mov r8, r13
call fcn.140098ec0
test rax, rax
je 0x14008a0dc
add r13, 4
dec ebp
jne 0x140089d45
mov ebp, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x68]
jmp 0x140089e26
cmp dil, 0x80
jne 0x140089d81
mov rcx, r15
call fcn.140092b70
jmp 0x140089d84
add eax, 0xffffff81
mov rdi, qword [rsp + 0x50]
cmp eax, ebp
jg 0x14008a18f
mov ebp, eax
movzx edx, byte [r14]
mov rcx, r15
lea r8, [rsp + 0x8c]
call fcn.140098ec0
test rax, rax
je 0x14008a0e1
mov r8d, ebp
test ebp, ebp
jle 0x140089e22
mov eax, r8d
mov ebp, dword [rsp + 0x58]
jmp 0x140089dc8
add r13, 4
dec eax
je 0x140089e26
movzx ecx, byte [r14]
test cl, cl
js 0x140089de1
test cl, 0x40
jne 0x140089df2
test cl, 0x20
jne 0x140089e03
test cl, 0x10
je 0x140089dc0
jmp 0x140089e14
movzx edx, byte [rsp + 0x8c]
mov byte [r13], dl
test cl, 0x40
je 0x140089dd5
movzx edx, byte [rsp + 0x8d]
mov byte [r13 + 1], dl
test cl, 0x20
je 0x140089dda
movzx edx, byte [rsp + 0x8e]
mov byte [r13 + 2], dl
test cl, 0x10
je 0x140089dc0
movzx ecx, byte [rsp + 0x8f]
mov byte [r13 + 3], cl
jmp 0x140089dc0
mov ebp, dword [rsp + 0x58]
sub ebp, r8d
jg 0x140089c68
jmp 0x140089bed
cmp dword [rsp + 0x28], 0
je 0x140089bed
movzx r13d, byte [rsp + rax + 0x92]
mov rax, qword [rsp + 0x28]
mov ebp, eax
mov rdi, qword [rsp + 0x60]
mov rcx, r15
mov edx, r13d
mov r8, rdi
call fcn.140098ec0
test rax, rax
je 0x14008a0dc
add rdi, 4
dec ebp
jne 0x140089e54
jmp 0x140089bed
cmp dword [rsp + 0x28], 0
je 0x140089bed
lea rdi, [rsp + rax]
add rdi, 0x92
mov rax, qword [rsp + 0x28]
mov ebp, eax
mov r14, qword [rsp + 0x60]
jmp 0x140089ea4
sub ebp, eax
jle 0x140089bed
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x140089ecb
lea rdx, [rcx + 1]
mov qword [r15 + 0xc0], rdx
movzx r13d, byte [rcx]
mov rcx, rdx
jmp 0x140089f2f
cmp dword [r15 + 0x30], 0
je 0x140089f06
mov r8d, dword [r15 + 0x34]
mov rcx, qword [r15 + 0x28]
mov rdx, r12
call qword [r15 + 0x10]
mov ecx, dword [r15 + 0xc0]
sub ecx, dword [r15 + 0xd0]
add dword [r15 + 0xb8], ecx
test eax, eax
je 0x140089f0b
cdqe
add rax, r12
movzx r13d, byte [r12]
jmp 0x140089f1e
xor r13d, r13d
jmp 0x140089f2f
mov dword [r15 + 0x30], 0
mov byte [r15 + 0x38], 0
xor r13d, r13d
mov rax, rbx
mov qword [r15 + 0xc8], rax
mov qword [r15 + 0xc0], rbx
mov rcx, rbx
cmp qword [r15 + 0x10], 0
je 0x140089f5b
mov rcx, qword [r15 + 0x28]
call qword [r15 + 0x20]
test eax, eax
je 0x140089f64
cmp dword [r15 + 0x30], 0
je 0x14008a143
mov rcx, qword [r15 + 0xc0]
mov rax, qword [r15 + 0xc8]
cmp rcx, rax
jae 0x14008a143
movzx edx, byte [rdi]
mov rcx, r15
lea r8, [rsp + 0x8c]
call fcn.140098ec0
test rax, rax
je 0x14008a0dc
movzx eax, r13b
cmp ebp, eax
cmovb eax, ebp
movzx eax, al
test al, al
je 0x140089e9c
mov ecx, eax
jmp 0x140089fac
add r14, 4
dec ecx
je 0x140089e9c
movzx edx, byte [rdi]
test dl, dl
js 0x140089fd0
test dl, 0x40
jne 0x140089fe1
test dl, 0x20
jne 0x140089ff3
test dl, 0x10
je 0x140089fa0
jmp 0x14008a005
movzx r8d, byte [rsp + 0x8c]
mov byte [r14], r8b
test dl, 0x40
je 0x140089fb8
movzx r8d, byte [rsp + 0x8d]
mov byte [r14 + 1], r8b
test dl, 0x20
je 0x140089fbd
movzx r8d, byte [rsp + 0x8e]
mov byte [r14 + 2], r8b
test dl, 0x10
je 0x140089fa0
movzx edx, byte [rsp + 0x8f]
mov byte [r14 + 3], dl
jmp 0x140089fa0
mov rcx, qword [rsp + 0x78]
inc rcx
cmp rcx, qword [rsp + 0x70]
mov eax, dword [rsp + 0x6c]
jne 0x140089bd5
mov rsi, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x48]
jmp 0x14008a109
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.outofmem
jmp 0x14008a06f
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.too_large
mov qword [rax + 8], rcx
xor esi, esi
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.140105bb0
mov rax, rsi
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.bad_format
jmp 0x14008a0d5
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, [0x14011aeef]
mov qword [rax + 8], rcx
mov rdi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x40]
mov ebp, dword [rsp + 0x120]
mov r13, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor ecx, ecx
mov r8d, dword [rsp + 0x34]
test ebp, ebp
cmovne r8d, ebp
mov dword [r13], esi
mov eax, dword [rsp + 0x5c]
mov dword [r14], eax
test rdi, rdi
je 0x14008a126
test ebp, ebp
jne 0x14008a126
mov r8d, dword [rdi]
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x20], eax
mov edx, 4
mov r9d, esi
call fcn.140090a80
mov rsi, rax
jmp 0x14008a078
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, [0x14011aeef]
mov qword [rax + 8], rcx
jmp 0x14008a0dc
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.bad_format
mov qword [rax + 8], rcx
jmp 0x14008a0f2
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, [0x14011aeef]
mov qword [rax + 8], rcx
jmp 0x14008a0e1
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x148
vmovaps xmmword [rsp + 0x130], xmm15
vmovaps xmmword [rsp + 0x120], xmm14
vmovaps xmmword [rsp + 0x110], xmm13
vmovaps xmmword [rsp + 0x100], xmm12
vmovaps xmmword [rsp + 0xf0], xmm11
vmovdqa xmmword [rsp + 0xe0], xmm10
vmovaps xmmword [rsp + 0xd0], xmm9
vmovaps xmmword [rsp + 0xc0], xmm8
vmovaps xmmword [rsp + 0xb0], xmm7
vmovaps xmmword [rsp + 0xa0], xmm6
test rcx, rcx
je 0x14008de75
mov ebp, r8d
mov r8d, edx
mov r15, rcx
mov eax, ebp
or eax, edx
js 0x14008de4b
test ebp, ebp
je 0x14008db4f
mov eax, 0x7fffffff
xor edx, edx
div ebp
cmp eax, r8d
jl 0x14008de4b
imul ebp, r8d
mov eax, ebp
or eax, r9d
js 0x14008de4b
test r9d, r9d
je 0x14008db75
mov eax, 0x7fffffff
xor edx, edx
div r9d
cmp eax, ebp
jl 0x14008de4b
mov eax, ebp
imul eax, r9d
movsxd rcx, eax
mov qword [rsp + 0x30], r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, qword [rsp + 0x30]
test rax, rax
je 0x14008de4b
mov qword [rsp + 0x28], rax
test ebp, ebp
jle 0x14008dee5
mov eax, edx
and eax, 1
lea r14d, [rdx + rax]
dec r14d
vbroadcastss xmm6, dword [0x1401eba08]
vbroadcastss ymm1, dword [0x1401eba0c]
movsxd rax, edx
mov ecx, ebp
mov qword [rsp + 0x48], rcx
mov r13d, r14d
mov ebp, r13d
and ebp, 0xfffffff8
mov qword [rsp + 0x38], rax
lea rax, [rax*4]
mov qword [rsp + 0x40], rax
xor r12d, r12d
vmovss xmm7, dword [0x14010ce70]
vmovss xmm8, dword [0x14010b520]
vxorps xmm9, xmm9, xmm9
vmovshdup xmm13, xmm6
vmovdqa xmm10, xmmword [0x14011a4c0]
mov rsi, r15
mov rbx, qword [rsp + 0x28]
vmovups ymmword [rsp + 0x80], ymm1
jmp 0x14008dc38
inc r12
add rbx, qword [rsp + 0x38]
add rsi, qword [rsp + 0x40]
cmp r12, qword [rsp + 0x48]
je 0x14008dee5
mov eax, 0
test r14d, r14d
jle 0x14008de11
xor edi, edi
cmp r14d, 8
jb 0x14008ddd0
nop word cs:[rax + rax]
vmulps ymm0, ymm1, ymmword [rsi + rdi*4]
vmovups ymmword [rsp + 0x50], ymm0
vmovaps xmm1, xmm6
vzeroupper
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovaps xmmword [rsp + 0x70], xmm0
vmovshdup xmm0, xmmword [rsp + 0x50]
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovaps xmm9, xmm0
vpermilpd xmm0, xmmword [rsp + 0x50], 1
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovdqa xmm8, xmm10
vmovapd xmm10, xmm0
vpermilps xmm0, xmmword [rsp + 0x50], 0xff
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovaps xmm11, xmm0
vmovups ymm0, ymmword [rsp + 0x50]
vextractf128 xmm12, ymm0, 1
vmovshdup xmm0, xmm12
vmovaps xmm1, xmm13
vzeroupper
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovaps xmm7, xmm13
vmovaps xmm13, xmm0
vmovaps xmm0, xmm12
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovaps xmm14, xmm0
vpermilpd xmm0, xmm12, 1
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovapd xmm15, xmm0
vpermilps xmm0, xmm12, 0xff
vmovaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vxorps xmm3, xmm3, xmm3
vmovaps ymm2, ymmword [0x14011a480]
vinsertps xmm1, xmm14, xmm13, 0x10
vmovaps xmm13, xmm7
vinsertps xmm1, xmm1, xmm15, 0x20
vinsertps xmm0, xmm1, xmm0, 0x30
vmovaps xmm1, xmmword [rsp + 0x70]
vinsertps xmm1, xmm1, xmm9, 0x10
vinsertps xmm1, xmm1, xmm10, 0x20
vmovdqa xmm10, xmm8
vinsertps xmm1, xmm1, xmm11, 0x30
vinsertf128 ymm0, ymm1, xmm0, 1
vmulps ymm0, ymm0, ymm2
vaddps ymm0, ymm0, ymmword [0x14011a4a0]
vmaxps ymm0, ymm0, ymm3
vminps ymm0, ymm0, ymm2
vcvttps2dq ymm0, ymm0
vextractf128 xmm1, ymm0, 1
vpshufb xmm1, xmm1, xmm8
vpshufb xmm0, xmm0, xmm8
vpunpckldq xmm0, xmm0, xmm1
vmovups ymm1, ymmword [rsp + 0x80]
vmovq qword [rbx + rdi], xmm0
add rdi, 8
cmp rbp, rdi
jne 0x14008dc60
mov rdi, rbp
mov eax, r14d
cmp rbp, r13
mov rdx, qword [rsp + 0x30]
vmovss xmm8, dword [0x14010b520]
vxorps xmm9, xmm9, xmm9
vmovss xmm7, dword [0x14010ce70]
je 0x14008de11
nop dword [rax + rax]
vmulss xmm0, xmm1, dword [rsi + rdi*4]
vmovaps xmm1, xmm6
vzeroupper
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
vmovups ymm1, ymmword [rsp + 0x80]
vmulss xmm0, xmm0, xmm7
vaddss xmm0, xmm8, xmm0
vmaxss xmm0, xmm9, xmm0
vminss xmm0, xmm0, xmm7
vcvttss2si eax, xmm0
mov byte [rbx + rdi], al
inc rdi
cmp r13, rdi
jne 0x14008ddd0
mov eax, r14d
mov rdx, qword [rsp + 0x30]
cmp eax, edx
jge 0x14008dc20
mov rcx, r12
imul rcx, qword [rsp + 0x38]
cdqe
add rax, rcx
vmulss xmm0, xmm7, dword [r15 + rax*4]
vaddss xmm0, xmm8, xmm0
vmaxss xmm0, xmm9, xmm0
vminss xmm0, xmm0, xmm7
vcvttss2si ecx, xmm0
mov r8, qword [rsp + 0x28]
mov byte [r8 + rax], cl
jmp 0x14008dc20
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [0x14020d200]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rcx, str.outofmem
mov qword [rax + 8], rcx
xor eax, eax
vmovaps xmm6, xmmword [rsp + 0xa0]
vmovaps xmm7, xmmword [rsp + 0xb0]
vmovaps xmm8, xmmword [rsp + 0xc0]
vmovaps xmm9, xmmword [rsp + 0xd0]
vmovaps xmm10, xmmword [rsp + 0xe0]
vmovaps xmm11, xmmword [rsp + 0xf0]
vmovaps xmm12, xmmword [rsp + 0x100]
vmovaps xmm13, xmmword [rsp + 0x110]
vmovaps xmm14, xmmword [rsp + 0x120]
vmovaps xmm15, xmmword [rsp + 0x130]
add rsp, 0x148
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, r15
vzeroupper
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [rsp + 0x28]
jmp 0x14008de77