Function at 0x140004710
Capabilities:
Create thread
Encode data using xor
Encrypt data using speck
Execute anti-debugging instructions
Find taskbar
Link many functions at runtime
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x19e0]
mov eax, 0x1ae0
call fcn.14000d7c0
sub rsp, rax
mov qword [rbp + 0x240], 0xfffffffffffffffe
mov qword [rsp + 0x1b10], rbx
mov qword [rsp + 0x1b18], rsi
mov qword [rsp + 0x1b20], rdi
mov rax, qword [0x14005b3e8]
xor rax, rsp
mov qword [rbp + 0x19d0], rax
mov edx, 0xc
lea rcx, str._Crashed
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
nop dword [rax + rax]
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
nop dword [rax + rax]
xor r13d, r13d
mov dword [rbp + 0x4c], r13d
lea rdx, [0x14004c950]
lea rcx, [rbp + 0x1370]
call fcn.140006864
lea rax, [0x14004a0e8]
mov qword [rbp + 0x1370], rax
lea rcx, [rbp + 0x1370]
call fcn.140006290
lea ebx, [r13 + 1]
mov r15d, 0x80004005
cmp byte [0x14005c049], r13b
jne 0x140004831
mov qword [rbp + 0x248], r13
mov r12d, r13d
mov dword [rbp + 0x50], r13d
mov dword [rbp + 0x54], r13d
mov dword [rbp + 0x58], r13d
mov qword [rbp + 0x40], r13
mov dword [rbp + 0x5c], r13d
jmp 0x14001c108
xor r13d, r13d
cmp edi, 4
jne 0x140028dc5
mov rax, qword [rbp + 0x248]
test rax, rax
je 0x140028dd0
mov ecx, dword [rax]
mov dword [rbp + 0x4c], ecx
lea rcx, [rbp + 0x248]
call fcn.140009afc
test r12d, r12d
js 0x140028de3
cmp dword [rbp + 0x4c], 0
je 0x140028dd8
mov byte [0x14005bd70], 0
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_SetProcessShutdownParameters]
nop dword [rax + rax]
lea rdi, section..rdata
mov qword [rbp + 0x5c0], rdi
mov qword [rbp + 0x5c8], r13
lea rcx, [rbp + 0xf10]
call fcn.140004660
lea rcx, [rbp + 0xf90]
call fcn.140004660
mov byte [rbp + 0xc10], 0
mov byte [rbp + 0xc11], 0
mov byte [rbp + 0xc12], 0
mov byte [rbp + 0xc13], 0
mov byte [rbp + 0xc14], 0
mov byte [rbp + 0xc15], 0xf
mov dword [rsp + 0x20], ebx
mov r9d, 2
mov r8d, r9d
lea rdx, [rbp + 0xc10]
lea rcx, [rbp + 0x1010]
call fcn.1400054a0
mov dword [rsp + 0x60], 0x5596e9d6
mov dword [rsp + 0x58], 0x77116514
mov dword [rsp + 0x50], 0xec877a02
mov dword [rsp + 0x48], 0xf9dd46d4
mov dword [rsp + 0x40], 0x98c2b4b2
mov dword [rsp + 0x38], 0x9bf2c075
mov dword [rsp + 0x30], 0x750bcfb9
mov dword [rsp + 0x28], 0x59934ace
mov dword [rsp + 0x20], 0x400
mov r9d, 3
lea r8d, [r9 + 7]
lea rdx, [rbp + 0xc10]
lea rcx, [rbp + 0x1090]
call fcn.1400054a0
lea rdx, [rbp + 0xf90]
lea rcx, [rbp + 0xf10]
call fcn.140005ea0
test al, al
je 0x140029016
lea rdx, [rbp + 0xf10]
lea rcx, [rbp + 0x5c0]
call fcn.140005d5c
lea rdx, [rbp + 0xf90]
lea rcx, [rbp + 0x5c0]
call fcn.140005be4
lea rcx, [rbp + 0x770]
call fcn.140005868
lea rcx, [rbp + 0x1110]
call fcn.140004304
mov rdx, rax
mov r8d, 0x15
lea rcx, [rbp + 0x770]
call fcn.140004330
lea rcx, [rbp + 0x1110]
call fcn.140005690
lea rcx, [rbp + 0x1190]
call fcn.14000445c
mov rdx, rax
mov r8d, 0xb
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rcx, [rbp + 0x1190]
call fcn.140005690
lea rcx, [rbp + 0x1210]
call fcn.14000448c
mov rdx, rax
mov r8d, 0xb
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rcx, [rbp + 0x1210]
call fcn.140005690
mov r8d, 0xb
lea rdx, [rbp + 0xf10]
lea rcx, [rbp + 0x770]
call fcn.140005180
mov r8d, 0xb
lea rdx, [rbp + 0x1010]
lea rcx, [rbp + 0x770]
call fcn.140005180
mov r8d, 0xb
lea rdx, [rbp + 0x1090]
lea rcx, [rbp + 0x770]
call fcn.140005180
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x5c0]
call fcn.1400058fc
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 - 1]
mov rcx, qword [rbp + 0x5c8]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeSecurity]
nop dword [rax + rax]
mov r15d, eax
test eax, eax
js 0x140028fda
lea rax, [rbp + 0x5a8]
mov qword [rsp + 0x20], rax
mov r9d, ebx
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionTouchKeyboard
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
nop dword [rax + rax]
test eax, eax
jg 0x140028def
js 0x140004b44
mov dword [rbp + 0x214], r13d
mov dword [rbp + 0x218], 4
lea rax, [rbp + 0x218]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x214]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DelayStart
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
nop dword [rax + rax]
test eax, eax
jle 0x140004b2b
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x140028dfe
mov rcx, qword [rbp + 0x5a8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
nop dword [rax + rax]
lea rax, [0x14005c048]
mov qword [rsp + 0x20], rax
lea r9, [0x14005bc4c]
lea r8, [0x14005c049]
lea rcx, [rbp + 0x14b0]
call fcn.140006230
mov qword [rbp + 0x238], r13
lea rax, [rbp + 0x238]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c8b0]
mov r8d, ebx
xor edx, edx
lea rcx, [0x14004d2d8]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
test eax, eax
js 0x140004bb9
mov rcx, qword [rbp + 0x238]
mov rax, qword [rcx]
mov r8, rbx
mov edx, ebx
mov rax, qword [rax + 0x18]
call qword [case.0x140037fef.0]
call fcn.140006908
mov byte [0x14005bc4c], al
call fcn.1400041ec
test eax, eax
jne 0x140028e30
xor bl, bl
cmp byte [0x14005bc4c], 0
jne 0x140004bf0
test bl, bl
jne 0x140028e37
cmp byte [0x14005c048], bl
jne 0x140028e37
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
nop dword [rax + rax]
mov qword [0x14005bd80], rax
lea rcx, [rbp + 0x21c]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140002e70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__beginthreadex]
nop dword [rax + rax]
mov r12, rax
mov ecx, 0x43
call qword [sym.imp.USER32.dll_GetSystemMetrics]
nop dword [rax + rax]
mov qword [rbp + 0x348], r13
test eax, eax
jne 0x140028e43
xor r14b, r14b
xor sil, sil
test bl, bl
jne 0x140028e46
mov eax, 1
mov rdi, qword [0x14005bdb0]
mov rdx, qword [0x14005bdb8]
cmp rdi, rdx
jae 0x140004ca6
test eax, eax
js 0x140004ce5
mov rcx, qword [rdi]
test rcx, rcx
je 0x140004c99
call fcn.14000571c
mov rdx, qword [0x14005bdb8]
add rdi, 8
cmp rdi, rdx
jb 0x140004c81
test eax, eax
js 0x140004ce5
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoResumeClassObjects]
nop dword [rax + rax]
test eax, eax
js 0x140004ce5
mov sil, 1
lea rax, [rbp + 0x348]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c850]
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [0x14004c8a0]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
lea rdi, section..rdata
mov qword [rbp + 0x3a0], r13
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x20], rax
lea r9, [0x14004c890]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x14004c880]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
nop dword [rax + rax]
test eax, eax
js 0x140004deb
mov qword [rbp + 0x438], r13
lea r8, [rbp + 0x438]
lea rdx, [0x14004d2f8]
lea rcx, [0x14002cb80]
call fcn.140008b30
test eax, eax
js 0x140004daf
mov qword [rbp + 0x4f0], r13
mov rcx, qword [rbp + 0x438]
mov rax, qword [rcx]
lea r8, [rbp + 0x4f0]
lea rdx, [0x14004c840]
mov rax, qword [rax]
call qword [case.0x140037fef.0]
test eax, eax
js 0x140004da2
mov rcx, qword [rbp + 0x3a0]
mov rax, qword [rcx]
lea r9, [0x14005c044]
lea r8, [0x14004c840]
mov rdx, qword [rbp + 0x4f0]
mov rax, qword [rax + 0x18]
call qword [case.0x140037fef.0]
nop
lea rcx, [rbp + 0x4f0]
call fcn.140003484
nop
mov rdx, qword [rbp + 0x348]
test rdx, rdx
je 0x140004dde
mov rcx, qword [rbp + 0x3a0]
mov rax, qword [rcx]
lea r9, [0x14005c040]
lea r8, [0x14004c850]
mov rax, qword [rax + 0x18]
call qword [case.0x140037fef.0]
nop
lea rcx, [rbp + 0x438]
call fcn.140003484
nop
mov rcx, qword [0x14005bd80]
test rcx, rcx
je 0x140004e0a
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
nop dword [rax + rax]
mov qword [0x14005bd80], r13
test bl, bl
jne 0x140004e3d
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x593
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_GetMessageW]
nop dword [rax + rax]
test eax, eax
jg 0x140028e4e
jmp 0x140028e93
xor eax, eax
lock cmpxchg dword [0x14005c480], ebx
jne 0x14001c108
lea r14, [0x14005c0a0]
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x14001c996
mov dword [rbp - 0x28], r13d
mov dword [rbp - 0x48], r13d
mov dword [rsp + 0x74], r13d
mov qword [rbp + 0x250], r13
mov ecx, 0x338
call fcn.140009ce0
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14001c68c
mov esi, r13d
mov dword [rbp - 0x20], 0xffffffff
mov r11d, r13d
mov r10d, r13d
lea r14, [rax + 7]
lea r13, [0x14004d862]
mov r12d, 0x67
mov ebx, dword [rbp - 0x20]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea r13, [r13 + 8]
xor r11d, r10d
xor r11d, 0xac987321
mov edi, r11d
lea eax, [r11 + 0x54969fa2]
rol eax, 5
rol r11d, 0xa
imul eax, eax, 0x137f
add r11d, eax
xor r10d, r11d
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
mov eax, edi
shr eax, 0xd
imul ecx, edi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, edi
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor r10d, ecx
xor r11d, ebx
mov byte [r14 - 4], r10b
ror r10d, 8
mov byte [r14], r11b
ror r11d, 8
mov byte [r14 - 5], r10b
ror r10d, 8
mov byte [r14 - 1], r11b
ror r11d, 8
mov byte [r14 - 6], r10b
ror r10d, 8
mov byte [r14 - 2], r11b
ror r11d, 8
mov byte [r14 - 7], r10b
mov byte [r14 - 3], r11b
ror r10d, 8
ror r11d, 8
mov esi, r9d
mov ebx, r8d
lea r14, [r14 + 8]
sub r12, 1
jne 0x14001c178
xor r13d, r13d
mov eax, r13d
xorps xmm1, xmm1
xorps xmm2, xmm2
mov r12d, eax
mov rbx, qword [rbp - 0x70]
mov esi, eax
movdqu xmm0, xmmword [rbx + rax]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rbx + rax + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x14001c478
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14001c4f1
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x338
jb 0x14001c4e3
movzx eax, cl
cmp rax, qword [0x14004db98]
jne 0x14001c665
mov qword [rbp + 0x250], rbx
mov qword [rbp + 0x258], 0x338
mov byte [rbx + 0x337], sil
xor edx, edx
lea r8d, [rdx + 0x60]
lea r14, [0x14005c0a0]
mov rcx, r14
call sub.msvcrt.dll_memset
cmp byte [rbx], sil
je 0x14001c69d
mov rdx, rbx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rbx + rax*2], r12w
jne 0x14001c542
lea rbx, [rbx + rax*2]
mov eax, dword [rsp + 0x74]
lea rcx, [rax + rax*2]
lea rdi, [r14 + rcx*8]
mov r8, rdi
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14001c68c
mov esi, r13d
mov rax, qword [rdi]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x14001c58d
mov esi, 0xc000007b
jmp 0x14001c5ec
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x14001c5a0
mov esi, 0xc000007b
jmp 0x14001c5ec
add rcx, qword [rdi]
cmp rcx, qword [rdi]
jae 0x14001c5af
mov esi, 0xc000007b
jmp 0x14001c5ec
cmp dword [rcx], 0x4550
je 0x14001c5be
mov esi, 0xc000007b
jmp 0x14001c5ec
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14001c5db
mov esi, 0xc000000d
jmp 0x14001c5ec
mov rax, qword [rcx + 0x88]
mov qword [rdi + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [rdi + 8], eax
mov r13d, dword [rbx + 2]
add rbx, 6
xor eax, eax
mov r14d, eax
test r13d, r13d
je 0x14001c64c
mov rdx, rbx
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r12b
jne 0x14001c608
inc rbx
add rbx, rax
test esi, esi
js 0x14001c641
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14001c693
mov ecx, dword [rbp - 0x28]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
inc dword [rbp - 0x28]
inc r14d
cmp r14d, r13d
jb 0x14001c5fe
inc dword [rsp + 0x74]
cmp byte [rbx], r12b
mov r13, r12
lea r14, [0x14005c0a0]
jne 0x14001c538
jmp 0x14001c696
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
lea r14, [0x14005c0a0]
mov esi, 0xc000007a
jmp 0x14001c69d
xor r13d, r13d
lea r14, [0x14005c0a0]
cmp qword [rbp + 0x250], 0
je 0x14001c6cb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x250]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test esi, esi
jns 0x14001c98b
mov rdi, r14
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001c6ef
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, 1
jne 0x14001c6db
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, r14
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r13
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
mov ebx, 1
jmp 0x14001c99e
mov eax, dword [0x14005bea8]
mov ebx, 1
inc eax
mov dword [0x14005bea8], eax
mov eax, r13d
xchg dword [0x14005c480], eax
mov qword [rbp + 0x260], r13
mov qword [rbp + 0x268], r13
mov esi, r13d
mov edi, r13d
mov rax, qword gs:[0x60]
cmp dword [rax + 0x2c0], 0
je 0x14001cc53
mov rax, qword [0x14005b110]
call qword [case.0x140037fef.0]
mov r14, rax
test rax, rax
jne 0x14001ca11
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001ca01
movzx edi, ax
or edi, 0x80070000
test edi, edi
js 0x14001cc5d
mov edi, r15d
jmp 0x14001cc5d
mov qword [rbp + 0x270], r13
mov r9d, r13d
mov rbx, r13
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov edx, 2
mov rcx, r14
mov rax, qword [0x14005b130]
call qword [case.0x140037fef.0]
test eax, eax
jne 0x14001ca97
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14001ca7d
test rbx, rbx
jne 0x14001ca87
mov ecx, dword [rbp + 0x60]
call fcn.140009ce0
mov rbx, rax
test rax, rax
je 0x14001ca76
mov qword [rbp + 0x270], rax
mov r9d, dword [rbp + 0x60]
jmp 0x14001ca1e
mov edi, 0x8007000e
jmp 0x14001ca9e
test eax, eax
je 0x14001ca87
jg 0x14001ca8c
mov edi, eax
jmp 0x14001caa5
mov edi, r15d
jmp 0x14001caa5
movzx edi, ax
or edi, 0x80070000
jmp 0x14001caa5
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x270], r13
lea rcx, [rbp + 0x270]
call fcn.14000960c
test edi, edi
js 0x14001cc58
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
nop dword [rax + rax]
mov ecx, eax
mov rax, qword [0x14005b128]
call qword [case.0x140037fef.0]
mov r14, rax
test rax, rax
jne 0x14001cb0c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001caf7
movzx edi, ax
or edi, 0x80070000
mov ebx, 1
test edi, edi
js 0x14001cc5d
mov edi, r15d
jmp 0x14001cc5d
mov qword [rbp + 0x278], r13
mov edi, r13d
mov r9d, r13d
mov rbx, r13
lea rax, [rbp + 0x64]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov edx, 2
mov rcx, r14
mov rax, qword [0x14005b130]
call qword [case.0x140037fef.0]
test eax, eax
jne 0x14001cb95
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14001cb7b
test rbx, rbx
jne 0x14001cb85
mov ecx, dword [rbp + 0x64]
call fcn.140009ce0
mov rbx, rax
test rax, rax
je 0x14001cb74
mov qword [rbp + 0x278], rax
mov r9d, dword [rbp + 0x64]
jmp 0x14001cb1c
mov edi, 0x8007000e
jmp 0x14001cb9c
test eax, eax
je 0x14001cb85
jg 0x14001cb8a
mov edi, eax
jmp 0x14001cba3
mov edi, r15d
jmp 0x14001cba3
movzx edi, ax
or edi, 0x80070000
jmp 0x14001cba3
mov qword [rbp + 0x268], rbx
mov qword [rbp + 0x278], r13
lea rcx, [rbp + 0x278]
call fcn.14000960c
test edi, edi
js 0x14001cc58
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x14001cc4e
lea rdx, str.WinSta0
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001cc4e
mov rcx, qword [rbp + 0x268]
test rcx, rcx
je 0x14001cc4e
lea rdx, str.Default
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14001cc4e
xor eax, eax
mov dword [rbp + 0x38], eax
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
nop dword [rax + rax]
mov rcx, rax
mov r9d, 4
lea r8, [rbp + 0x38]
lea edx, [r9 + 7]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_GetProcessMitigationPolicy]
nop dword [rax + rax]
test eax, eax
jne 0x14001cc40
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x14001caf7
jmp 0x14001caee
test byte [rbp + 0x38], 0xf
mov ebx, 1
cmove esi, ebx
jmp 0x14001cc53
mov ebx, 1
mov dword [rbp + 0x5c], esi
jmp 0x14001cc5d
mov ebx, 1
lea rcx, [rbp + 0x268]
call fcn.14000960c
lea rcx, [rbp + 0x260]
call fcn.14000960c
mov eax, dword [rbp + 0x5c]
test edi, edi
cmovs eax, r13d
mov dword [rbp + 0x5c], eax
mov edx, 4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140009b2c
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14001ccbc
mov r13d, 0x8007000e
xor r14d, r14d
jmp 0x140028a66
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
mov qword [rbp + 0x5f8], r13
mov dword [rbp + 0x68], r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x600], xmm0
mov dword [rbp + 0x6c], r13d
lea rax, [0x14005b4d0]
mov qword [rbp + 0x280], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
lea rdx, [0x14005b410]
test rax, rax
je 0x140020335
mov rax, qword [rbp + 0x280]
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r14 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r14 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r14 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r14 + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [r14 + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [r14 + 0x90], xmm1
mov qword [rbp - 0x70], r14
mov qword [rbp + 0x288], rdx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140020335
mov rax, qword [rbp + 0x288]
mov rcx, qword [rax]
mov qword [rdx], rcx
mov qword [rbp - 0x68], rdx
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x290], rax
lea r8, [rbp + 0x70]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x74]
test eax, eax
cmovns r9d, dword [rbp + 0x70]
mov dword [rbp + 0x74], r9d
js 0x14002033f
lea r8, [rbp + 0x78]
mov edx, 0xa0
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, r9d
test eax, eax
cmovns edi, dword [rbp + 0x78]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r9]
mov r10d, 0xffffffff
cmp eax, r9d
cmovae r10d, eax
mov r13d, 0x10000000
mov r11d, 0xd0000095
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002031e
lea r8, [rbp + 0x7c]
mov edx, 8
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x7c]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r10]
mov r9d, 0xffffffff
cmp eax, r10d
cmovae r9d, eax
mov r13d, 0x10000000
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002031e
lea r8, [rbp + 0x80]
mov edx, 8
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x80]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r9]
mov r11d, 0xffffffff
cmp eax, r9d
cmovae r11d, eax
mov ecx, 0xd0000095
mov r13d, 0x10000000
cmovb r13d, ecx
mov dword [rbp - 0x20], r13d
jb 0x14002031e
lea r8, [rbp + 0x298]
call fcn.14000d66c
test eax, eax
jns 0x14001cf34
mov r13d, 0xc000003e
jmp 0x14002033b
mov rax, qword [rbp + 0x298]
inc rax
mov qword [rbp + 0x298], rax
lea edx, [rax + rax]
lea r8, [rbp + 0x84]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x84]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r11]
mov r10d, 0xffffffff
cmp eax, r11d
cmovae r10d, eax
mov ecx, 0xd0000095
mov r13d, 0x10000000
cmovb r13d, ecx
mov dword [rbp - 0x20], r13d
jb 0x14002031e
lea r8, [rbp + 0x88]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x88]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r10]
mov r9d, 0xffffffff
cmp eax, r10d
cmovae r9d, eax
mov r13d, 0x10000000
mov r11d, 0xd0000095
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002031e
lea r8, [rbp + 0x8c]
mov edx, ecx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns edi, dword [rbp + 0x8c]
mov dword [rbp + 0x74], edi
js 0x14002033f
lea eax, [rdi + r9]
mov ecx, 0xffffffff
cmp eax, r9d
cmovae ecx, eax
mov r13d, 0x10000000
cmovb r13d, r11d
mov dword [rbp - 0x20], r13d
jb 0x14002031e
mov dword [rbp + 0x5f4], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r9, rax
test rax, rax
je 0x140020335
mov qword [rbp + 0x5f8], rax
xor r10d, r10d
mov edi, r10d
mov dword [rbp + 0x5f0], r10d
mov dword [rbp + 0x90], r10d
lea r8, [rbp + 0x618]
lea edx, [r10 + 4]
mov rcx, rax
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
mov eax, r10d
test r13d, r13d
js 0x14002033f
mov ecx, dword [rbp + 0x5f4]
add rcx, r9
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001d0ce
mov r13d, 0xc0000023
jmp 0x14002033b
mov dword [r9], 4
mov ecx, dword [rbp + 0x90]
mov rax, qword [rbp + 0x618]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
mov eax, edi
test r13d, r13d
js 0x14002033f
cmp qword [rbp + 0x5f8], r10
jne 0x14001d170
lea r8, [rbp + 0x98]
mov edx, 0xa0
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0x9c]
test eax, eax
cmovns edx, dword [rbp + 0x98]
mov dword [rbp + 0x9c], edx
js 0x14001d2b2
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d2b2
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d2bb
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2a0], r9
mov r11d, r10d
test eax, eax
je 0x14001d1ec
mov r10d, dword [rbp + 0x9c]
lea r8, [rbp + 0xa0]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xa0]
mov dword [rbp + 0x9c], r10d
js 0x14001d2b2
mov edx, r10d
lea r8, [rbp + 0x2a0]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d2b2
inc r11d
mov r9, qword [rbp + 0x2a0]
cmp r11d, edi
jb 0x14001d18c
lea r8, [rbp + 0x5b8]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d2b2
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xa4]
cmp rax, rcx
jbe 0x14001d232
mov r13d, 0xc0000023
jmp 0x14002033b
mov dword [r9], 0xa0
mov rax, qword [rbp + 0x5b8]
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x14002033f
cmp qword [rbp + 0x5f8], 0
jne 0x14001d330
lea r8, [rbp + 0xa4]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xa8]
test eax, eax
cmovns edx, dword [rbp + 0xa4]
mov dword [rbp + 0xa8], edx
js 0x14001d416
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d416
inc edi
mov dword [rbp + 0x5f0], edi
xor r14d, r14d
jmp 0x14001d422
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2a8], r9
xor r14d, r14d
mov r11d, r14d
test edi, edi
je 0x14001d3ab
mov r10d, dword [rbp + 0xa8]
lea r8, [rbp + 0xac]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xac]
mov dword [rbp + 0xa8], r10d
js 0x14001d419
mov edx, r10d
lea r8, [rbp + 0x2a8]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d419
inc r11d
mov r9, qword [rbp + 0x2a8]
cmp r11d, edi
jb 0x14001d34f
lea r8, [rbp + 0x5e8]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d419
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
jbe 0x14001d3ee
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov dword [r9], 8
mov rcx, qword [rbp - 0x80]
mov rcx, qword [rcx]
mov rax, qword [rbp + 0x5e8]
mov qword [rax], rcx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d419
xor r14d, r14d
test r13d, r13d
js 0x140020342
mov rax, qword [rbp + 0x290]
mov qword [rbp + 0x2b0], rax
cmp qword [rbp + 0x5f8], 0
jne 0x14001d4a2
lea r8, [rbp + 0xb0]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xb4]
test eax, eax
cmovns edx, dword [rbp + 0xb0]
mov dword [rbp + 0xb4], edx
js 0x14001d583
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d583
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d58c
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2b8], r9
mov r11d, r14d
test edi, edi
je 0x14001d51a
mov r10d, dword [rbp + 0xb4]
lea r8, [rbp + 0xb8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xb8]
mov dword [rbp + 0xb4], r10d
js 0x14001d583
mov edx, r10d
lea r8, [rbp + 0x2b8]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d583
inc r11d
mov r9, qword [rbp + 0x2b8]
cmp r11d, edi
jb 0x14001d4be
lea r8, [rbp + 0x648]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d583
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
jbe 0x14001d55d
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov dword [r9], 8
mov rcx, qword [rbp + 0x2b0]
mov rax, qword [rbp + 0x648]
mov qword [rax], rcx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020342
lea r8, [rbp + 0x2c0]
call fcn.14000d66c
test eax, eax
jns 0x14001d5ab
mov r13d, 0xc000003e
mov dword [rbp - 0x20], r13d
jmp 0x140020342
lea r8, [rbp + 0x2c0]
mov edx, 1
mov rcx, qword [rbp + 0x2c0]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d74a
mov eax, dword [rbp + 0x2c0]
lea r11d, [rax + rax]
test r11d, r11d
je 0x14001d740
cmp qword [rbp + 0x5f8], 0
jne 0x14001d65d
lea r8, [rbp + 0xbc]
mov edx, r11d
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xc0]
test eax, eax
cmovns edx, dword [rbp + 0xbc]
mov dword [rbp + 0xc0], edx
js 0x14001d74a
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d74a
inc edi
mov dword [rbp + 0x5f0], edi
mov r13d, r14d
mov dword [rbp - 0x20], r14d
jmp 0x14001d74a
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2c8], r9
test edi, edi
je 0x14001d6d2
mov r10d, dword [rbp + 0xc0]
lea r8, [rbp + 0xc4]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xc4]
mov dword [rbp + 0xc0], r10d
js 0x14001d73b
mov edx, r10d
lea r8, [rbp + 0x2c8]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d73b
inc r14d
mov r9, qword [rbp + 0x2c8]
cmp r14d, edi
jb 0x14001d676
lea r8, [rbp + 0x658]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d73b
mov r8d, r11d
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r11 + 4]
add rax, r9
cmp rax, rcx
jbe 0x14001d717
mov r13d, 0xc0000023
xor r14d, r14d
jmp 0x14001d746
mov dword [r9], r11d
lea rdx, str.TabletPCInputPanel_EnableTIP
mov rcx, qword [rbp + 0x658]
call sub.msvcrt.dll_memcpy
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
xor r14d, r14d
jmp 0x14001d74a
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
test r13d, r13d
js 0x140020342
mov eax, dword [rbp + 0x5c]
mov dword [rbp + 0xc8], eax
cmp qword [rbp + 0x5f8], 0
jne 0x14001d7cd
lea r8, [rbp + 0xd0]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xd4]
test eax, eax
cmovns edx, dword [rbp + 0xd0]
mov dword [rbp + 0xd4], edx
js 0x14001d8ac
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001d8ac
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001d8b5
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2d0], r9
mov r11d, r14d
test edi, edi
je 0x14001d845
mov r10d, dword [rbp + 0xd4]
lea r8, [rbp + 0xd8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xd8]
mov dword [rbp + 0xd4], r10d
js 0x14001d8ac
mov edx, r10d
lea r8, [rbp + 0x2d0]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d8ac
inc r11d
mov r9, qword [rbp + 0x2d0]
cmp r11d, edi
jb 0x14001d7e9
lea r8, [rbp + 0x668]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001d8ac
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001d888
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov dword [r9], 4
mov ecx, dword [rbp + 0xc8]
mov rax, qword [rbp + 0x668]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020342
mov dword [rbp + 0xe0], 4
cmp qword [rbp + 0x5f8], 0
jne 0x14001d930
lea r8, [rbp + 0xe8]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edx, dword [rbp + 0xec]
test eax, eax
cmovns edx, dword [rbp + 0xe8]
mov dword [rbp + 0xec], edx
js 0x14001da0f
lea r8, [rbp + 0x5f4]
mov ecx, dword [rbp + 0x5f4]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov edi, dword [rbp + 0x5f0]
test eax, eax
js 0x14001da0f
inc edi
mov dword [rbp + 0x5f0], edi
jmp 0x14001da18
mov r9, qword [rbp + 0x5f8]
mov qword [rbp + 0x2d8], r9
mov r11d, r14d
test edi, edi
je 0x14001d9a8
mov r10d, dword [rbp + 0xec]
lea r8, [rbp + 0xf0]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r10d, dword [rbp + 0xf0]
mov dword [rbp + 0xec], r10d
js 0x14001da0f
mov edx, r10d
lea r8, [rbp + 0x2d8]
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001da0f
inc r11d
mov r9, qword [rbp + 0x2d8]
cmp r11d, edi
jb 0x14001d94c
lea r8, [rbp + 0x678]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001da0f
mov ecx, dword [rbp + 0x5f4]
add rcx, qword [rbp + 0x5f8]
lea rax, [r9 + 8]
cmp rax, rcx
jbe 0x14001d9eb
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov dword [r9], 4
mov ecx, dword [rbp + 0xe0]
mov rax, qword [rbp + 0x678]
mov dword [rax], ecx
mov edi, dword [rbp + 0x5f0]
inc edi
mov dword [rbp + 0x5f0], edi
test r13d, r13d
js 0x140020342
lea r8, [rbp + 0xf4]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r10d, dword [rbp + 0xf8]
test eax, eax
cmovns r10d, dword [rbp + 0xf4]
mov dword [rbp + 0xf8], r10d
js 0x14001dbe9
mov dword [rbp + 0xfc], r10d
lea r8, [rbp + 0x100]
mov edx, 8
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, r10d
test eax, eax
cmovns r9d, dword [rbp + 0x100]
mov dword [rbp + 0xf8], r9d
js 0x14001dbe9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, r10d
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dbe9
lea r8, [rbp + 0x104]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x104]
mov dword [rbp + 0xf8], r9d
js 0x14001dbe9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dbe9
lea r8, [rbp + 0x108]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x108]
mov dword [rbp + 0xf8], r9d
js 0x14001dbe9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dbe9
lea r8, [rbp + 0x10c]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x10c]
mov dword [rbp + 0xf8], r9d
js 0x14001dbe9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001dbe9
lea r8, [rbp + 0x48]
mov edx, 4
mov ecx, edx
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
cmovns r9d, dword [rbp + 0x48]
mov dword [rbp + 0xf8], r9d
js 0x14001dbe9
lea r8, [rbp + 0xfc]
mov edx, r9d
mov ecx, dword [rbp + 0xfc]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x48]
test eax, eax
cmovns r9d, dword [rbp + 0xfc]
jmp 0x14001dbed
mov r9d, dword [rbp + 0x48]
mov dword [rsp + 0x74], r9d
test r13d, r13d
js 0x140020342
mov qword [rbp - 0x80], r14
xor eax, eax
mov qword [rbp + 0x478], rax
mov r11d, eax
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x48], eax
mov qword [rbp - 8], rax
mov dword [rbp + 0x110], eax
mov qword [rbp + 0x28], rax
mov r10d, eax
mov qword [rbp - 0x40], rax
mov dword [rbp + 0x114], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x470], rax
mov dword [rbp + 0x118], 8
lea r8, [rbp + 0x118]
mov edx, dword [rbp + 0x5f4]
lea ecx, [r10 + 8]
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001dd7e
mov eax, dword [rbp + 0x118]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14001dc84
mov r13d, 0xc0000095
jmp 0x14001dd7e
mov dword [rbp + 0x118], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14001dcc2
mov r13d, 0xc0000017
jmp 0x14001dd6c
mov qword [rbp + 0x460], rdi
mov eax, dword [rbp + 0x5f0]
mov dword [rdi], eax
lea r8, [rbp + 0x460]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001dd4c
mov rcx, qword [rbp + 0x460]
mov eax, dword [rbp + 0x5f4]
mov dword [rcx], eax
lea r8, [rbp + 0x460]
mov edx, 4
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001dd4c
mov ecx, dword [rbp + 0x118]
mov rax, qword [rbp + 0x470]
mov qword [rcx + rdi - 8], rax
mov r8d, dword [rbp + 0x5f4]
mov rdx, qword [rbp + 0x5f8]
mov rcx, qword [rbp + 0x460]
call sub.msvcrt.dll_memcpy
mov qword [rbp - 0x80], rdi
mov r14d, dword [rbp + 0x118]
jmp 0x14001dd6c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r11, r10
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fadb
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov qword [rbp - 0x78], rax
mov r13, qword [rbp - 0x80]
test r13, r13
jne 0x14001ddb0
mov r13d, 0xc000000d
jmp 0x14001e687
mov r14d, r14d
mov qword [rbp + 0x10], r14
test r14, r14
je 0x14001e56a
lea rax, [r14 + 8]
mov qword [rbp + 0x30], rax
mov rcx, rax
call fcn.140009ce0
mov r8, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x14001e558
xor al, al
mov dword [rbp - 0x20], eax
xor edx, edx
mov ecx, edx
test r14, r14
je 0x14001de80
cmp r14, 0x20
jb 0x14001de6c
mov edx, r14d
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx + r13]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + r13 + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x14001de05
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
mov dword [rbp - 0x20], eax
xor edx, edx
cmp rcx, r14
jae 0x14001de80
xor al, byte [rcx + r13]
inc rcx
cmp rcx, r14
jb 0x14001de71
mov dword [rbp - 0x20], eax
mov qword [rbp + 0xc28], rbx
mov rdi, r13
mov r11, r8
mov r9d, edx
mov r10d, 0xffffffff
mov dword [rbp - 0x28], edx
mov dword [rsp + 0x78], edx
mov rax, r14
and eax, 7
je 0x14001e472
mov r10d, edx
mov dword [rbp - 0x28], edx
mov r13d, edx
mov dword [rsp + 0x78], edx
test eax, eax
je 0x14001def4
mov r8d, 0x38
movzx edx, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x14001ded7
lea ecx, [r8 - 0x20]
shl edx, cl
or r13d, edx
jmp 0x14001dedf
mov ecx, r8d
shl edx, cl
or r10d, edx
inc r9d
sub r8d, 8
cmp r9d, eax
jl 0x14001dec0
mov dword [rsp + 0x78], r13d
mov dword [rbp - 0x28], r10d
mov r9d, r13d
xor r9d, 0xb17a307a
xor r10d, 0x42f6b18d
mov ecx, r9d
mov edx, r10d
xor r13d, r13d
mov r8d, r13d
test eax, eax
jne 0x14001df1a
mov rdx, r11
jmp 0x14001df4e
lea r13, [r11 + 1]
mov qword [rbp - 0x58], r13
cmp r8d, 4
jge 0x14001df30
rol ecx, 8
mov r13d, ecx
jmp 0x14001df36
rol edx, 8
mov r13d, edx
mov byte [r11], r13b
inc r8d
mov r13, qword [rbp - 0x58]
mov r11, r13
cmp r8d, eax
jl 0x14001df1a
mov rdx, r13
xor r13d, r13d
cmp eax, 4
jbe 0x14001e454
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov r8, qword [rbp + 8]
mov r13, r14
shr r13, 3
test r13, r13
je 0x14001e2aa
mov r11d, dword [rbp + 0xc2c]
mov eax, r11d
shr eax, 0x10
mov dword [rsp + 0x70], eax
movzx eax, bx
mov dword [rbp - 0x10], eax
movzx eax, bx
mov dword [rbp - 0x60], eax
movzx eax, r11w
mov dword [rbp - 0x50], eax
mov eax, r11d
xor eax, ebx
add rdx, 7
mov qword [rbp - 0x18], rdx
lea rcx, [rdi + 2]
mov esi, dword [rsp + 0x70]
mov r12d, dword [rbp - 0x28]
mov r14d, dword [rsp + 0x78]
mov r15d, eax
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r10d, edi
add rcx, 8
mov qword [rbp - 0x58], rcx
mov eax, r10d
sub eax, dword [rbp - 0x60]
xor eax, r11d
xor eax, r8d
xor r9d, eax
mov edx, r11d
xor edx, r9d
ror edx, 0xf
mov ecx, r9d
ror ecx, 7
movzx eax, word [rbp + 0xc2a]
imul eax, edx
add ecx, eax
xor r10d, ecx
lea edx, [r10 + rbx]
ror edx, 9
mov ecx, r10d
ror ecx, 0xa
mov eax, dword [rbp - 0x50]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov edx, r9d
xor edx, dword [rbp - 0x50]
rol edx, 4
mov ecx, r9d
rol ecx, 5
mov eax, esi
imul eax, edx
add ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, ebx
mov eax, r11d
sub eax, ecx
xor r9d, eax
mov ecx, r9d
sub ecx, dword [rbp - 0x10]
movzx edx, word [rbp + 0xc2a]
imul ecx, edx
mov eax, r9d
shr eax, 6
sub ecx, eax
xor r10d, ecx
mov eax, r10d
ror eax, 0xf
xor eax, dword [rbp - 0x50]
imul eax, dword [rbp - 0x10]
xor r9d, eax
mov eax, r9d
not eax
ror eax, 3
add eax, esi
imul eax, dword [rbp - 0x50]
xor r10d, eax
mov eax, r10d
sub eax, r11d
sub eax, dword [rbp - 0x60]
xor r9d, eax
mov ecx, r9d
ror ecx, 0xa
mov eax, r9d
xor eax, esi
imul eax, edx
xor ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, dword [rbp - 0x10]
rol edx, 6
mov ecx, r10d
ror ecx, 3
mov eax, dword [rbp - 0x50]
imul eax, edx
xor ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
sub eax, esi
imul eax, dword [rbp - 0x10]
xor r10d, eax
mov ecx, r10d
xor ecx, esi
imul ecx, dword [rbp - 0x60]
mov eax, r10d
shr eax, 1
xor ecx, eax
xor r9d, ecx
mov eax, r10d
sub eax, dword [rbp - 0x50]
rol eax, 3
mov ecx, dword [rbp - 0x60]
imul ecx, eax
mov eax, r10d
shr eax, 0xf
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
sub ecx, dword [rbp - 0x50]
movzx eax, word [rbp + 0xc2a]
imul ecx, eax
mov eax, r9d
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
mov edx, ebx
sub edx, r10d
ror edx, 9
mov ecx, r10d
ror ecx, 0xb
mov eax, dword [rbp - 0x50]
imul eax, edx
xor ecx, eax
xor r9d, ecx
mov eax, r9d
sub eax, esi
sub eax, ebx
xor r10d, eax
mov ecx, r10d
ror ecx, 7
movzx eax, word [rbp + 0xc2a]
xor eax, r10d
imul eax, dword [rbp - 0x60]
sub eax, ecx
xor r9d, eax
mov edx, esi
xor edx, r9d
rol edx, 4
mov ecx, r9d
ror ecx, 0x10
movzx eax, word [rbp + 0xc2a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov edx, ebx
sub edx, r10d
ror edx, 0xa
mov ecx, r10d
ror ecx, 4
mov eax, dword [rbp - 0x50]
imul eax, edx
add ecx, eax
xor r9d, ecx
mov edx, r9d
sub edx, ebx
ror edx, 4
mov ecx, r9d
ror ecx, 9
mov eax, esi
imul eax, edx
xor ecx, eax
xor r10d, ecx
mov edx, r11d
xor edx, r10d
rol edx, 8
mov ecx, r10d
rol ecx, 2
mov eax, dword [rbp - 0x60]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov edx, r11d
sub edx, r9d
ror edx, 0xb
mov ecx, r9d
ror ecx, 0xc
movzx eax, word [rbp + 0xc2a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
movzx eax, word [rbp + 0xc2a]
xor ecx, eax
imul ecx, dword [rbp - 0x50]
mov eax, r10d
shr eax, 8
xor ecx, eax
xor r9d, ecx
xor r10d, r9d
xor r10d, r15d
xor r9d, r14d
xor r10d, r12d
mov rax, qword [rbp - 0x18]
mov byte [rax - 4], r9b
ror r9d, 8
mov byte [rax], r10b
ror r10d, 8
mov byte [rax - 5], r9b
ror r9d, 8
mov byte [rax - 1], r10b
ror r10d, 8
mov byte [rax - 6], r9b
ror r9d, 8
mov byte [rax - 2], r10b
ror r10d, 8
mov byte [rax - 7], r9b
mov byte [rax - 3], r10b
ror r9d, 8
ror r10d, 8
mov r14d, r8d
mov r12d, edi
add rax, 8
mov qword [rbp - 0x18], rax
sub r13, 1
mov rcx, qword [rbp - 0x58]
jne 0x14001dfc0
movabs rsi, 0x7f1137fab69605e
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r14, qword [rbp + 0x10]
mov r8, qword [rbp + 8]
movzx eax, byte [rbp - 0x20]
mov qword [r8 + r14], rax
mov qword [rbp + 0x2e0], r8
mov r14, qword [rbp + 0x30]
mov qword [rbp + 0x230], r14
lea rax, [0x14005b4c0]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x2f8], 8
lea r13, [0x14005b420]
mov qword [rbp + 0x300], r13
mov qword [rbp + 0x308], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x14001e529
mov r14d, r14d
mov dword [rax], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r14d
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e47a
mov qword [rdi + 8], rax
mov r8d, r14d
mov rdx, qword [rbp + 8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rdi + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e47a
mov qword [rdi + 0x18], rax
movups xmm0, xmmword [r13]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r13 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r13 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r13 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r13 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r13 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r13 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r13 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rdi + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001e47a
mov qword [rdi + 0x28], rax
xor edx, edx
mov r13d, edx
mov rcx, qword [0x14005b4c0]
mov qword [rax], rcx
mov r14, rdi
jmp 0x14001e535
mov r10d, r13d
jae 0x14001df67
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x14001df67
mov rdx, r8
jmp 0x14001df6b
mov r14, qword [rdi + 8]
test r14, r14
je 0x14001e4ac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r13d, r13d
mov qword [rdi + 8], r13
jmp 0x14001e4af
xor r13d, r13d
mov r14, qword [rdi + 0x18]
test r14, r14
je 0x14001e4dc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r13
mov r14, qword [rdi + 0x28]
test r14, r14
je 0x14001e509
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r14, qword [rbp - 0x78]
mov r13d, 0xc0000017
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
test r13d, r13d
js 0x14001e574
mov qword [rbp + 0x478], r14
mov r14, rdx
jmp 0x14001e574
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
mov r13d, 0xc0000001
mov r14, qword [rbp - 0x78]
mov rax, qword [rbp + 0x2e0]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x14001e5bf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10d, eax
mov r11d, eax
test r14, r14
je 0x14001e687
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001e5f7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001e626
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001e655
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
mov r10, qword [rbp - 0x40]
mov r11, r10
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fadb
mov r14, qword [rbp + 0x478]
mov dword [rbp + 0x11c], 4
lea r8, [rbp + 0x11c]
mov edx, dword [r14]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001e74f
lea r8, [rbp + 0x11c]
mov edx, ecx
mov ecx, dword [rbp + 0x11c]
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001e74f
lea r8, [rbp + 0x11c]
mov edx, dword [r14 + 0x10]
mov ecx, dword [rbp + 0x11c]
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001e74f
lea r8, [rbp + 0x11c]
mov edx, 4
mov ecx, dword [rbp + 0x11c]
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001e74f
lea r8, [rbp + 0x11c]
mov edx, dword [r14 + 0x20]
mov ecx, dword [rbp + 0x11c]
call fcn.14000d628
mov r13d, eax
mov eax, dword [rbp + 0x120]
test r13d, r13d
cmovns eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
jmp 0x14001e755
mov eax, dword [rbp + 0x120]
test r13d, r13d
js 0x14001e8f2
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x14001e79a
mov r13d, 0xc0000017
jmp 0x14001e8e0
mov qword [rbp + 0x310], rcx
mov eax, dword [r14]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov r8d, dword [r14]
mov rdx, qword [r14 + 8]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov eax, dword [r14 + 0x10]
mov rcx, qword [rbp + 0x310]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov r8d, dword [r14 + 0x10]
mov rdx, qword [r14 + 0x18]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x10]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov eax, dword [r14 + 0x20]
mov rcx, qword [rbp + 0x310]
mov dword [rcx], eax
lea r8, [rbp + 0x310]
mov edx, 4
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov r8d, dword [r14 + 0x20]
mov rdx, qword [r14 + 0x28]
mov rcx, qword [rbp + 0x310]
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x20]
lea r8, [rbp + 0x310]
mov rcx, qword [rbp + 0x310]
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001e8bf
mov r11, qword [rbp - 0x18]
mov qword [rbp - 0x38], r11
mov eax, dword [rbp + 0x120]
mov dword [rbp - 0x48], eax
mov r10, qword [rbp - 0x40]
jmp 0x14001e8e7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r11, r10
mov edi, dword [rbp + 0x5f0]
mov r9d, dword [rsp + 0x74]
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001fadb
xor eax, eax
mov qword [rbp + 0x318], rax
mov r11d, eax
mov dword [rbp + 0x124], eax
mov qword [rbp + 0x320], rax
mov r14d, eax
mov dword [rbp + 0x128], eax
mov dword [rbp + 0x12c], 8
lea r8, [rbp + 0x12c]
mov edx, r9d
lea ecx, [rax + 8]
call fcn.14000d628
mov r13d, eax
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001eaa8
mov eax, dword [rbp + 0x12c]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14001e979
mov r13d, 0xc0000095
mov dword [rbp - 0x20], r13d
mov r9d, dword [rbp + 0x130]
jmp 0x14001e9ae
mov dword [rbp + 0x134], ecx
lea r8, [rbp + 0x134]
mov edx, 8
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov r9d, dword [rbp + 0x130]
test eax, eax
cmovns r9d, dword [rbp + 0x134]
mov dword [rbp + 0x130], r9d
test r13d, r13d
js 0x14001fad5
cmp qword [rbp + 0x5f8], r11
jne 0x14001e9cf
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x14001eaa8
cmp edi, 1
ja 0x14001e9e3
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x14001eaa8
mov rcx, qword [rbp + 0x5f8]
mov qword [rbp + 0x328], rcx
xor eax, eax
mov r10d, eax
mov eax, dword [rcx]
mov dword [rbp - 0x58], eax
lea r8, [rbp + 0x328]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ea8f
mov edx, dword [rbp - 0x58]
lea r8, [rbp + 0x328]
mov rcx, qword [rbp + 0x328]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ea8f
inc r10d
mov rcx, qword [rbp + 0x328]
cmp r10d, 1
jb 0x14001e9f6
mov r10d, dword [rcx]
lea r8, [rbp + 0x328]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ea8f
mov r11d, r10d
mov dword [rbp + 0x124], r10d
mov rax, qword [rbp + 0x328]
test r10d, r10d
mov rdx, r14
cmove rax, rdx
mov qword [rbp + 0x328], rax
mov qword [rbp + 0x318], rax
jmp 0x14001ea91
xor edx, edx
test r13d, r13d
js 0x14001eaa5
cmp edi, 2
ja 0x14001eaf2
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
mov r10, r14
test r13d, r13d
js 0x14001fad5
mov edi, dword [rbp + 0x110]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x14001ec91
mov r13d, 0xd0000017
mov rdi, qword [rbp - 8]
jmp 0x14001ec9e
mov rcx, qword [rbp + 0x5f8]
mov qword [rbp + 0x330], rcx
mov edi, edx
mov r10d, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb94
mov edx, r10d
lea r8, [rbp + 0x330]
mov rcx, qword [rbp + 0x330]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb94
inc edi
mov rcx, qword [rbp + 0x330]
cmp edi, 2
jb 0x14001eb02
mov edi, dword [rcx]
lea r8, [rbp + 0x330]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001eb94
mov r14d, edi
mov dword [rbp + 0x128], edi
mov rax, qword [rbp + 0x330]
test edi, edi
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x320], rax
test r13d, r13d
js 0x14001ec88
mov dword [rbp + 0x138], 4
lea r8, [rbp + 0x138]
mov edx, r9d
mov ecx, 4
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec5a
lea r8, [rbp + 0x138]
mov edx, ecx
mov ecx, dword [rbp + 0x138]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec5a
lea r8, [rbp + 0x138]
mov edx, r11d
mov ecx, dword [rbp + 0x138]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec5a
lea r8, [rbp + 0x138]
mov edx, 4
mov ecx, dword [rbp + 0x138]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ec5a
lea r8, [rbp + 0x138]
mov edx, r14d
mov ecx, dword [rbp + 0x138]
call fcn.14000d628
mov r13d, eax
mov dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x13c]
test r13d, r13d
cmovns eax, dword [rbp + 0x138]
mov dword [rbp + 0x13c], eax
jmp 0x14001ec60
mov eax, dword [rbp + 0x13c]
test r13d, r13d
js 0x14001ec88
cmp eax, 0x400000
jbe 0x14001ec82
mov r13d, 0x8000ffff
mov dword [rbp - 0x20], r13d
mov rdi, qword [rbp - 8]
mov r10, rdi
jmp 0x14001faf3
mov dword [rbp + 0x110], eax
mov r10, qword [rbp - 0x40]
jmp 0x14001eaa8
mov rdi, rax
mov qword [rbp - 8], rax
mov r13d, 0x10000000
mov dword [rbp - 0x20], r13d
mov r11, qword [rbp - 0x38]
test r13d, r13d
js 0x14001ecba
test r11, r11
jne 0x14001ecc3
mov r13d, 0x80070057
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
jmp 0x14001faf7
test rdi, rdi
jne 0x14001ecdb
mov r13d, 0x80070057
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
jmp 0x14001faf7
mov qword [rbp + 0x700], r11
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0x710], eax
mov qword [rbp + 0x708], rdi
mov eax, dword [rbp + 0x110]
mov dword [rbp + 0x714], eax
xor r14d, r14d
mov dword [rbp + 0x718], r14d
lea r8, [rbp + 0x338]
lea rdx, [0x14004d220]
lea ecx, [r14 + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14001ed87
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
jle 0x14001ed4f
movzx r13d, ax
or r13d, 0x80070000
mov dword [rbp - 0x20], r13d
mov edx, dword [rbp + 0x110]
test r13d, r13d
js 0x14001edf7
mov r13d, r15d
mov dword [rbp - 0x20], r15d
test r13d, r13d
js 0x14001ee0e
cmp edx, 4
jae 0x14001ee16
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f237
lea rdx, [0x14004de80]
mov rcx, qword [rbp + 0x338]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
jne 0x14001edbe
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
jle 0x14001ed4f
jmp 0x14001ed40
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x700]
lea ecx, [r8 + 0x66]
call qword [case.0x140037fef.0]
mov r13d, eax
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
mov edx, dword [rbp + 0x110]
cmovge edx, dword [rbp + 0x714]
mov dword [rbp + 0x110], edx
cmp r13d, 0xd0000023
jne 0x14001ed65
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
mov r10, r14
jmp 0x14001faf3
mov r9d, dword [rdi]
mov dword [rbp - 0x58], r9d
lea rcx, [rdi + 4]
cmp rcx, rdi
jb 0x14001f2f7
lea eax, [rdx - 4]
cmp eax, r9d
jae 0x14001ee42
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f237
mov qword [rbp - 0x18], r9
lea rdi, [r9 + rcx]
cmp rdi, rcx
jb 0x14001f2e7
lea ecx, [r9 + 4]
cmp ecx, 4
jb 0x14001f2e7
mov eax, edx
sub eax, ecx
cmp eax, 4
jae 0x14001ee79
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
mov r13d, dword [rdi]
lea r8, [rdi + 4]
mov qword [rbp + 8], r8
cmp r8, rdi
jb 0x14001f2e7
lea edi, [rcx + 4]
cmp edi, ecx
jb 0x14001f2e7
mov eax, edx
sub eax, edi
cmp eax, r13d
jae 0x14001eeb1
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
lea rcx, [r8 + r13]
cmp rcx, r8
jb 0x14001f2e7
lea r8d, [rdi + r13]
cmp r8d, edi
jb 0x14001f2e7
mov eax, edx
sub eax, r8d
cmp eax, 4
jae 0x14001eee5
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
mov edi, dword [rcx]
mov dword [rbp - 0x50], edi
lea rax, [rcx + 4]
mov qword [rbp + 0x30], rax
cmp rax, rcx
jb 0x14001f2e7
lea ecx, [r8 + 4]
cmp ecx, r8d
jb 0x14001f2e7
mov eax, edx
sub eax, ecx
cmp eax, edi
jae 0x14001ef20
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
lea r8d, [rdi + rcx]
cmp r8d, ecx
jb 0x14001f2e7
cmp edx, r8d
je 0x14001ef42
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
lea ecx, [rdi + r13]
add ecx, r9d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
je 0x14001ef64
mov r13d, 0xc000003e
mov rax, r14
xor edx, edx
jmp 0x14001f233
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14001ef9d
xor edx, edx
mov r13d, 0xc0000017
jmp 0x14001f166
mov rax, qword [rbp - 8]
add rax, 4
je 0x14001eff5
mov eax, dword [rbp - 0x58]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14001f0a2
mov qword [rdi + 8], rax
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 8]
add rdx, 4
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001effd
xor edx, edx
mov dword [rdi], edx
mov qword [rdi + 8], rdx
cmp qword [rbp + 8], r14
je 0x14001f046
mov dword [rdi + 0x10], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001f0a2
mov qword [rdi + 0x18], rax
mov r8, r13
mov rdx, qword [rbp + 8]
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001f04d
mov dword [rdi + 0x10], edx
mov qword [rdi + 0x18], rdx
cmp qword [rbp + 0x30], r14
je 0x14001f159
mov eax, dword [rbp - 0x50]
mov dword [rdi + 0x20], eax
mov r13d, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, r13d
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14001f0a2
mov qword [rdi + 0x28], rax
mov r8d, r13d
mov rdx, qword [rbp + 0x30]
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor edx, edx
jmp 0x14001f160
mov r13, qword [rdi + 8]
test r13, r13
je 0x14001f0d1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 8], rax
mov r13, qword [rdi + 0x18]
test r13, r13
je 0x14001f100
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x18], rax
mov r13, qword [rdi + 0x28]
test r13, r13
je 0x14001f12f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r13d, 0xc0000017
jmp 0x14001f166
mov dword [rdi + 0x20], edx
mov qword [rdi + 0x28], rdx
mov r14, rdi
mov r13d, edx
test r13d, r13d
js 0x14001f177
mov rax, r14
mov qword [rbp + 0x28], rax
jmp 0x14001f233
test r14, r14
je 0x14001f22f
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001f1af
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001f1de
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001f20d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rax, qword [rbp + 0x28]
mov rdi, qword [rbp - 8]
or r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jl 0x14001faef
mov rdi, rdx
mov qword [rbp + 0x340], rdx
test rax, rax
je 0x14001fae1
mov r13, qword [rax + 8]
mov qword [rbp - 0x18], r13
test r13, r13
je 0x14001fae1
mov eax, dword [rax]
test eax, eax
je 0x14001fae1
mov r14d, eax
add r14, 0xfffffffffffffff8
mov qword [rbp + 8], r14
mov rcx, r14
call fcn.140009ce0
mov r8, rax
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14001f7c8
xor cl, cl
mov dword [rbp - 0x58], ecx
mov qword [rbp + 0xc30], rsi
mov rdi, r13
mov r13, rax
mov rdx, r14
and edx, 7
je 0x14001f790
xor eax, eax
mov r11d, eax
mov dword [rbp - 0x50], eax
mov r10d, eax
mov dword [rbp - 0x60], eax
mov r9d, eax
test edx, edx
je 0x14001f323
lea r8d, [rax + 0x38]
movzx eax, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x14001f307
lea ecx, [r8 - 0x20]
shl eax, cl
or r10d, eax
jmp 0x14001f30f
mov r13d, 0xc0000095
mov rax, r14
xor edx, edx
jmp 0x14001f233
mov r13d, 0xc0000095
mov rax, r14
xor edx, edx
jmp 0x14001f237
mov ecx, r8d
shl eax, cl
or r11d, eax
inc r9d
sub r8d, 8
cmp r9d, edx
jl 0x14001f2d0
mov dword [rbp - 0x60], r10d
mov dword [rbp - 0x50], r11d
xor r10d, 0x92f65a5
xor r11d, 0x699a899c
mov eax, r10d
mov ecx, r11d
xor r9d, r9d
mov r8d, r9d
test edx, edx
je 0x14001f373
lea r9, [r13 + 1]
mov qword [rbp + 0x10], r9
cmp r8d, 4
jge 0x14001f357
rol eax, 8
mov r9d, eax
jmp 0x14001f35d
rol ecx, 8
mov r9d, ecx
mov byte [r13], r9b
inc r8d
mov r9, qword [rbp + 0x10]
mov r13, r9
cmp r8d, edx
jl 0x14001f341
xor r9d, r9d
cmp edx, 4
jbe 0x14001f772
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov r8, qword [rbp + 0x30]
mov ecx, dword [rbp - 0x58]
xor edx, edx
mov rax, r14
shr rax, 3
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14001f6af
mov ebx, dword [rbp + 0xc34]
mov eax, ebx
shr eax, 0x10
mov dword [rbp - 0x10], eax
movzx edx, bx
mov dword [rsp + 0x70], edx
mov eax, ebx
xor eax, esi
mov dword [rsp + 0x78], eax
movzx eax, si
mov dword [rbp - 0x20], eax
add r13, 7
mov qword [rbp - 0x78], r13
lea rcx, [rdi + 2]
mov r13, qword [rbp + 0x10]
mov r12d, dword [rbp - 0x10]
mov r14d, dword [rbp - 0x50]
mov r15d, dword [rbp - 0x60]
movzx r9d, byte [rcx - 2]
shl r9d, 8
movzx eax, byte [rcx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rcx + 1]
or r9d, eax
movzx r8d, byte [rcx + 2]
shl r8d, 8
movzx eax, byte [rcx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
add rcx, 8
mov qword [rbp + 0x10], rcx
mov edi, ebx
xor edi, r11d
xor edi, r10d
xor edi, esi
mov ecx, edi
sub ecx, esi
rol ecx, 5
mov eax, edi
rol eax, 0xa
imul ecx, edx
add eax, ecx
xor r10d, eax
lea ecx, [rbx + r10]
ror ecx, 9
mov eax, r10d
rol eax, 2
movzx r11d, word [rbp + 0xc32]
imul ecx, r11d
sub ecx, eax
xor edi, ecx
mov ecx, edi
sub ecx, edx
imul ecx, dword [rbp - 0x20]
mov eax, edi
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, r11d
rol edx, 6
mov ecx, r10d
rol ecx, 2
mov eax, r12d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, esi
mov eax, ebx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 6
mov eax, r10d
xor eax, dword [rsp + 0x70]
imul eax, r11d
xor ecx, eax
xor edi, ecx
lea ecx, [rbx + rdi]
ror ecx, 0xf
mov edx, edi
rol edx, 2
mov eax, dword [rbp - 0x20]
imul eax, ecx
add edx, eax
xor r10d, edx
mov edx, r10d
sub edx, esi
ror edx, 0xe
mov ecx, r10d
rol ecx, 8
mov eax, r12d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, esi
ror ecx, 0xc
mov eax, edi
ror eax, 0xa
mov edx, dword [rsp + 0x70]
imul ecx, edx
xor eax, ecx
xor r10d, eax
mov ecx, r12d
xor ecx, r10d
imul ecx, r11d
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, dword [rbp - 0x20]
imul eax, r12d
xor r10d, eax
mov r11d, r10d
sub r11d, r12d
xor r11d, edi
xor r11d, esi
mov ecx, r12d
xor ecx, r11d
rol ecx, 2
imul ecx, edx
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, ebx
ror ecx, 6
mov eax, r10d
rol eax, 7
movzx edi, word [rbp + 0xc32]
imul ecx, edi
add eax, ecx
xor r11d, eax
mov ecx, r11d
ror ecx, 9
mov eax, r11d
xor eax, edx
imul eax, dword [rbp - 0x20]
add ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, edi
rol edx, 5
mov ecx, r10d
rol ecx, 7
mov eax, r12d
imul eax, edx
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, dword [rsp + 0x78]
mov eax, r10d
ror eax, 3
sub eax, edi
imul eax, dword [rsp + 0x70]
xor r11d, eax
mov edx, r11d
sub edx, ebx
ror edx, 1
mov ecx, r11d
ror ecx, 6
mov eax, dword [rbp - 0x20]
imul eax, edx
sub eax, ecx
xor r10d, eax
lea ecx, [r10 + rsi]
rol ecx, 3
mov eax, r10d
rol eax, 0xe
imul ecx, r12d
add eax, ecx
xor r11d, eax
lea ecx, [r11 + rsi]
rol ecx, 0xf
mov eax, r11d
ror eax, 0xe
mov edx, dword [rsp + 0x70]
imul ecx, edx
sub ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, dword [rbp - 0x20]
imul ecx, edi
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov ecx, ebx
xor ecx, r11d
rol ecx, 4
mov eax, r11d
rol eax, 2
imul ecx, dword [rbp - 0x20]
xor eax, ecx
xor eax, r15d
xor r10d, eax
xor r11d, r14d
mov rax, qword [rbp - 0x78]
mov byte [rax - 4], r10b
ror r10d, 8
mov byte [rax], r11b
ror r11d, 8
mov byte [rax - 5], r10b
ror r10d, 8
mov byte [rax - 1], r11b
ror r11d, 8
mov byte [rax - 6], r10b
ror r10d, 8
mov byte [rax - 2], r11b
ror r11d, 8
mov byte [rax - 7], r10b
mov byte [rax - 3], r11b
ror r10d, 8
ror r11d, 8
mov r15d, r9d
mov r14d, r8d
add rax, 8
mov qword [rbp - 0x78], rax
sub r13, 1
mov rcx, qword [rbp + 0x10]
jne 0x14001f3e8
movabs rbx, 0xc81ecb17b1b54a58
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r14, qword [rbp + 8]
mov r8, qword [rbp + 0x30]
mov ecx, dword [rbp - 0x58]
xor edx, edx
mov rax, rdx
test r14, r14
je 0x14001f741
cmp r14, 0x20
jb 0x14001f730
mov rcx, r14
and rcx, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax + r8]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r8 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x14001f6ce
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, r14
jae 0x14001f741
xor cl, byte [rax + r8]
inc rax
cmp rax, r14
jb 0x14001f735
movzx eax, cl
mov rcx, qword [rbp - 0x18]
cmp rax, qword [r14 + rcx]
jne 0x14001f7a7
mov qword [rbp + 0x350], r14
mov r10, r8
mov qword [rbp - 0x40], r8
mov dword [rbp + 0x114], r14d
mov r13d, 0x10000000
mov dword [rbp - 0x20], r13d
jmp 0x14001f80d
mov r11d, r9d
jae 0x14001f38c
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
jmp 0x14001f38c
xor edx, edx
mov dword [rbp - 0x60], edx
mov dword [rbp - 0x50], 0xffffffff
mov r11d, edx
mov r10d, edx
jmp 0x14001f395
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x30]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rdi, qword [rbp + 0x340]
mov r13d, 0xd0000001
mov dword [rbp - 0x20], r13d
test rdi, rdi
je 0x14001f802
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r10, qword [rbp - 0x40]
mov r14d, dword [rbp + 0x114]
test r13d, r13d
js 0x14001fad5
mov dword [rbp + 0x140], edx
mov qword [rbp + 0x358], r10
cmp r14d, 4
jb 0x14001fac6
mov r9d, dword [r10]
mov dword [rbp - 0x58], r9d
lea r8, [rbp + 0x358]
mov edx, 4
mov rcx, r10
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001facc
lea r8, [rbp + 0x140]
mov edx, 4
xor ecx, ecx
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001facc
mov eax, r14d
mov edi, dword [rbp + 0x140]
sub eax, edi
cmp eax, 4
jb 0x14001fac6
mov rcx, qword [rbp + 0x358]
mov r11d, dword [rcx]
lea r8, [rbp + 0x358]
mov edx, 4
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001facc
lea r8, [rbp + 0x140]
mov edx, 4
mov ecx, edi
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001facc
mov eax, r14d
mov ecx, dword [rbp + 0x140]
sub eax, ecx
cmp eax, r11d
jb 0x14001fac6
lea r8, [rbp + 0x140]
mov edx, r11d
call fcn.14000d628
mov r13d, eax
test eax, eax
js 0x14001facc
mov edi, r14d
mov edx, r11d
mov qword [rbp - 0x18], rdx
lea rcx, [r10 + rdi]
mov r14, qword [rbp + 0x358]
lea rax, [r14 + r11]
cmp rcx, rax
jb 0x14001fac6
mov rax, r10
sub rax, r14
sub rax, rdx
add rax, rdi
cmp rax, 8
jae 0x14001fac6
xor ecx, ecx
mov edi, ecx
mov qword [rbp + 8], rcx
mov r13d, ecx
mov eax, ecx
mov dword [rbp - 0x50], ecx
test r14, r14
je 0x14001fa40
mov rdi, r14
lea r8, [rbp + 0x360]
mov rcx, r14
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001fab8
mov r10, qword [rbp + 0x360]
cmp r14, r10
jae 0x14001fa18
mov r9d, dword [rbp + 0x144]
lea r8, [rbp + 0x368]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001fa2f
cmp qword [rbp + 0x368], r10
ja 0x14001fa09
lea r8, [rbp + 0x148]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14000d628
mov r13d, eax
test eax, eax
cmovns r9d, dword [rbp + 0x148]
mov dword [rbp + 0x144], r9d
js 0x14001fa2f
mov edx, r9d
lea r8, [rbp + 0x370]
mov rcx, rdi
call fcn.14000d648
mov r13d, eax
test eax, eax
js 0x14001fa2f
mov rdi, qword [rbp + 0x370]
cmp rdi, r10
ja 0x14001fa09
mov eax, dword [rbp - 0x50]
inc eax
mov dword [rbp - 0x50], eax
cmp rdi, r10
jb 0x14001f97c
mov r9d, dword [rbp - 0x58]
jmp 0x14001fa1b
mov r13d, 0xc000000d
mov r10, qword [rbp - 0x40]
jmp 0x14001facc
mov eax, dword [rbp - 0x50]
cmp rdi, r10
mov r10, qword [rbp - 0x40]
je 0x14001fa39
mov r13d, 0xc000000d
jmp 0x14001facc
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
jmp 0x14001fab8
mov rdx, r11
mov rdi, qword [rbp + 8]
test r11d, r11d
je 0x14001fa8d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
test rax, rax
jne 0x14001fa81
mov r13d, 0xc0000017
jmp 0x14001fab8
xor eax, eax
mov r13d, eax
mov rdx, qword [rbp - 0x18]
mov eax, dword [rbp - 0x50]
test r14, r14
je 0x14001faab
mov r8, rdx
mov rdx, r14
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 0x50]
mov r9d, dword [rbp - 0x58]
mov r10, qword [rbp - 0x40]
mov qword [rbp + 0x608], rdi
mov dword [rbp + 0x600], eax
test r13d, r13d
js 0x14001facc
cmp r9d, dword [rbp + 0x600]
je 0x14001facc
mov r13d, 0xc000003e
bts r13d, 0x1c
mov dword [rbp - 0x20], r13d
mov rdi, qword [rbp - 8]
jmp 0x14001faf3
mov rdi, qword [rbp - 8]
jmp 0x14001faf7
mov r13d, 0xd000000d
mov rdi, qword [rbp - 8]
mov dword [rbp - 0x20], r13d
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
mov r14, qword [rbp - 0x80]
test r14, r14
je 0x14001fb28
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
mov r14, qword [rbp + 0x478]
test r14, r14
je 0x14001fbfa
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001fb67
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001fb96
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001fbc5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x478], rax
mov rdi, qword [rbp - 8]
mov r10, qword [rbp - 0x40]
mov r11, qword [rbp - 0x38]
test r11, r11
je 0x14001fc24
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x38]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
test rdi, rdi
je 0x14001fc4d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
mov r14, qword [rbp + 0x28]
test r14, r14
je 0x14001fd0b
mov rdi, qword [r14 + 8]
test rdi, rdi
je 0x14001fc89
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rdi, qword [r14 + 0x18]
test rdi, rdi
je 0x14001fcb8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rdi, qword [r14 + 0x28]
test rdi, rdi
je 0x14001fce7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r10, qword [rbp - 0x40]
test r10, r10
je 0x14001fd31
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x40]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r13d, r13d
js 0x14002033f
cmp dword [rbp + 0x600], 1
jae 0x14001fd4e
mov r13d, 0xc004d501
jmp 0x14002033b
cmp qword [rbp + 0x608], 0
je 0x14001fdf5
cmp dword [rbp + 0x600], 0
jbe 0x14001fdf5
mov rdi, qword [rbp + 0x608]
mov qword [rbp + 0x378], rdi
mov r9d, dword [rdi]
lea r8, [rbp + 0x378]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fdc3
mov dword [rbp + 0x14c], r9d
mov rax, qword [rbp + 0x378]
test r9d, r9d
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x378], rax
mov qword [rbp + 0x380], rax
jmp 0x14001fdd4
mov r9d, dword [rbp + 0x14c]
mov rax, qword [rbp + 0x380]
xor r14d, r14d
test r13d, r13d
js 0x14001fe02
cmp r9d, 4
je 0x14001fdee
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov eax, dword [rax]
mov dword [rbp + 0x6c], eax
jmp 0x14001fe05
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
xor r14d, r14d
mov eax, dword [rbp + 0x6c]
test r13d, r13d
js 0x140020342
cmp eax, 0xd0000023
jne 0x14001fe1e
mov dword [rbp + 0x6c], 0x8007007a
jmp 0x14001fe33
cmp eax, 0x8007007a
je 0x14001fe33
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020342
cmp dword [rbp + 0x600], 6
je 0x14001fe4b
mov r13d, 0xc004d501
mov dword [rbp - 0x20], r13d
jmp 0x140020342
cmp qword [rbp + 0x608], 0
jne 0x14001fe64
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x14001ff35
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x388], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x388]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ff01
mov edx, r9d
lea r8, [rbp + 0x388]
mov rcx, qword [rbp + 0x388]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ff01
inc edi
mov rcx, qword [rbp + 0x388]
cmp edi, 1
jb 0x14001fe75
mov edi, dword [rcx]
lea r8, [rbp + 0x388]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001ff01
mov dword [rbp + 0x150], edi
mov rax, qword [rbp + 0x388]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x390], rax
jmp 0x14001ff0e
mov edi, dword [rbp + 0x150]
mov rax, qword [rbp + 0x390]
test r13d, r13d
js 0x140020342
cmp edi, 8
je 0x14001ff2b
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov rax, qword [rax]
mov qword [rbp + 0x398], rax
test r13d, r13d
js 0x140020342
cmp qword [rbp + 0x608], 0
jne 0x14001ff57
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x140020026
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x2e8], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x2e8]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff4
mov edx, r9d
lea r8, [rbp + 0x2e8]
mov rcx, qword [rbp + 0x2e8]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff4
inc edi
mov rcx, qword [rbp + 0x2e8]
cmp edi, 2
jb 0x14001ff68
mov edi, dword [rcx]
lea r8, [rbp + 0x2e8]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14001fff4
mov dword [rbp + 0x154], edi
mov rax, qword [rbp + 0x2e8]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x2e8], rax
mov qword [rbp + 0x3a8], rax
jmp 0x140020001
mov edi, dword [rbp + 0x154]
mov rax, qword [rbp + 0x3a8]
test r13d, r13d
js 0x140020342
cmp edi, 4
je 0x14002001e
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov eax, dword [rax]
mov dword [rbp + 0x158], eax
test r13d, r13d
js 0x140020342
cmp qword [rbp + 0x608], 0
jne 0x140020048
mov r13d, 0xc000000d
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3b0], rcx
mov edi, r14d
mov r9d, dword [rcx]
lea r8, [rbp + 0x3b0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e8
mov edx, r9d
lea r8, [rbp + 0x3b0]
mov rcx, qword [rbp + 0x3b0]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e8
inc edi
mov rcx, qword [rbp + 0x3b0]
cmp edi, 3
jb 0x140020059
mov r11d, dword [rcx]
lea r8, [rbp + 0x3b0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x1400200e8
mov dword [rbp + 0x15c], r11d
mov r9, qword [rbp + 0x3b0]
test r11d, r11d
cmove r9, r14
mov qword [rbp + 0x3b0], r9
mov qword [rbp + 0x3b8], r9
jmp 0x1400200f6
mov r11d, dword [rbp + 0x15c]
mov r9, qword [rbp + 0x3b8]
test r13d, r13d
js 0x140020342
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3c0], rcx
mov edi, r14d
mov r10d, dword [rcx]
lea r8, [rbp + 0x3c0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002019c
mov edx, r10d
lea r8, [rbp + 0x3c0]
mov rcx, qword [rbp + 0x3c0]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002019c
inc edi
mov rcx, qword [rbp + 0x3c0]
cmp edi, 4
jb 0x140020110
mov edi, dword [rcx]
lea r8, [rbp + 0x3c0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x14002019c
mov dword [rbp + 0x160], edi
mov rax, qword [rbp + 0x3c0]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x3c8], rax
jmp 0x1400201a9
mov edi, dword [rbp + 0x160]
mov rax, qword [rbp + 0x3c8]
test r13d, r13d
js 0x1400201ce
cmp edi, 4
je 0x1400201c2
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov r10d, dword [rax]
mov dword [rbp + 0x164], r10d
jmp 0x1400201d5
mov r10d, dword [rbp + 0x164]
test r13d, r13d
js 0x140020342
mov rcx, qword [rbp + 0x608]
mov qword [rbp + 0x3d0], rcx
mov edi, r14d
mov r14d, dword [rcx]
lea r8, [rbp + 0x3d0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020281
mov edx, r14d
lea r8, [rbp + 0x3d0]
mov rcx, qword [rbp + 0x3d0]
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020281
inc edi
mov rcx, qword [rbp + 0x3d0]
cmp edi, 5
jb 0x1400201ef
mov edi, dword [rcx]
lea r8, [rbp + 0x3d0]
mov edx, 4
call fcn.14000d648
mov r13d, eax
mov dword [rbp - 0x20], eax
test eax, eax
js 0x140020281
mov dword [rbp + 0x168], edi
mov rax, qword [rbp + 0x3d0]
test edi, edi
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x3d8], rax
jmp 0x140020291
mov edi, dword [rbp + 0x168]
mov rax, qword [rbp + 0x3d8]
xor r14d, r14d
test r13d, r13d
js 0x1400202b1
cmp edi, 4
je 0x1400202aa
mov r13d, 0xc0000023
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov ecx, dword [rax]
mov dword [rbp + 0x68], ecx
jmp 0x1400202b4
mov ecx, dword [rbp + 0x68]
test r13d, r13d
js 0x140020342
mov rax, qword [rbp + 0x398]
cmp qword [rbp + 0x290], rax
je 0x1400202d9
mov r13d, 0xc004d501
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov dword [rbp + 0x58], r10d
mov dword [rbp + 0x5c], ecx
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0x54], eax
cmp r10d, 4
jbe 0x1400202fb
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
jmp 0x140020342
cmp r11d, 4
jbe 0x14002030d
mov r13d, 0x8007007a
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov r8d, r11d
mov rdx, r9
mov rcx, qword [rbp - 0x30]
call sub.msvcrt.dll_memcpy
jmp 0x140020321
xor r14d, r14d
test r13d, r13d
js 0x140020342
mov eax, dword [rbp + 0x6c]
test eax, eax
cmovne r13d, eax
mov dword [rbp - 0x20], r13d
jmp 0x140020342
mov r13d, 0xc0000017
mov dword [rbp - 0x20], r13d
xor r14d, r14d
mov dword [rbp + 0x5f4], r14d
mov dword [rbp + 0x5f0], r14d
mov rdi, qword [rbp + 0x5f8]
test rdi, rdi
je 0x140020383
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x5f8], r14
mov dword [rbp + 0x604], r14d
mov dword [rbp + 0x600], r14d
mov rdi, qword [rbp + 0x608]
test rdi, rdi
je 0x1400203c4
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x608], r14
mov rdi, qword [rbp - 0x70]
test rdi, rdi
je 0x1400203ed
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x68]
test rdi, rdi
je 0x140020416
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r13d, r13d
js 0x140028a61
mov eax, dword [rbp + 0x5c]
test eax, eax
je 0x14002652e
mov qword [rbp + 0x3e0], r14
mov dword [0x14005bd08], eax
mov r8d, 0x104
lea rdx, [rbp + 0x17c0]
lea rcx, [0x140000000]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
nop dword [rax + rax]
test eax, eax
je 0x140026126
cmp eax, 0x104
jne 0x14002047b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
je 0x140026126
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x1400204ac
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140026126
mov rax, qword [0x14005b098]
call qword [case.0x140037fef.0]
mov qword [0x14005bea0], rax
mov edi, dword [0x14005bd08]
mov dword [rbp - 0x58], edi
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rbp + 0xba0]
call sub.msvcrt.dll_memset
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
mov ecx, 1
mov dword [rbp + 0x16c], ecx
mov qword [rbp + 8], r14
mov qword [rbp + 0x30], r14
xor eax, eax
movups xmmword [rbp + 0xdb8], xmm0
movups xmmword [rbp + 0xdc8], xmm0
mov qword [rbp + 0xdd8], rax
mov dword [rbp + 0xde0], eax
mov qword [rbp + 0x10], r14
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x140020519
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x140020def
mov dword [rbp - 0x50], r14d
mov dword [rbp - 0x60], r14d
mov dword [rbp - 0x10], r14d
mov qword [rbp + 0x3e8], r14
mov ecx, 0x338
call fcn.140009ce0
mov r14, rax
test rax, rax
je 0x140020ace
xor eax, eax
mov r12d, eax
mov edi, 0xffffffff
mov r11d, eax
mov r10d, eax
lea rsi, [r14 + 7]
lea rbx, [0x14004d862]
lea r13d, [rax + 0x67]
movzx r9d, byte [rbx - 2]
shl r9d, 8
movzx eax, byte [rbx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx + 1]
or r9d, eax
movzx r8d, byte [rbx + 2]
shl r8d, 8
movzx eax, byte [rbx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rbx, [rbx + 8]
xor r11d, r10d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
mov ecx, r11d
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r11d, eax
mov eax, r11d
shr eax, 0xd
imul ecx, r11d, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r11d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, r11d
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, ecx
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r12d
xor r10d, ecx
xor r11d, edi
mov byte [rsi - 4], r10b
ror r10d, 8
mov byte [rsi], r11b
ror r11d, 8
mov byte [rsi - 5], r10b
ror r10d, 8
mov byte [rsi - 1], r11b
ror r11d, 8
mov byte [rsi - 6], r10b
ror r10d, 8
mov byte [rsi - 2], r11b
ror r11d, 8
mov byte [rsi - 7], r10b
mov byte [rsi - 3], r11b
ror r10d, 8
ror r11d, 8
mov r12d, r9d
mov edi, r8d
lea rsi, [rsi + 8]
sub r13, 1
jne 0x14002057b
xor eax, eax
xorps xmm2, xmm2
xorps xmm1, xmm1
mov edi, dword [rbp - 0x58]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
movdqu xmm0, xmmword [r14 + rax]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [r14 + rax + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140020890
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14002090c
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x1400208fd
movzx eax, cl
cmp rax, qword [0x14004db98]
jne 0x140020aae
mov qword [rbp + 0x3e8], r14
mov qword [rbp + 0x3f0], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
je 0x140020ad8
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x14002095a
lea r14, [r14 + rax*2]
mov eax, dword [rbp - 0x10]
lea rcx, [rax + rax*2]
lea rax, [0x14005c0a0]
lea r8, [rax + rcx*8]
mov qword [rbp - 0x78], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140020ace
xor r9d, r9d
mov ecx, r9d
mov dword [rbp - 0x60], ecx
mov r8, qword [rbp - 0x78]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x1400209b9
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020a29
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jb 0x1400209cf
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020a29
add rdx, qword [r8]
cmp rdx, qword [r8]
jae 0x1400209e1
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020a29
cmp dword [rdx], 0x4550
je 0x1400209f3
mov ecx, 0xc000007b
mov dword [rbp - 0x60], ecx
jmp 0x140020a29
movzx eax, word [rdx + 0x18]
mov r10d, 0x10b
sub ax, r10w
mov r10d, 0xfeff
test r10w, ax
je 0x140020a17
mov ecx, 0xc000000d
mov dword [rbp - 0x60], ecx
jmp 0x140020a29
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rsp + 0x70], eax
add r14, 6
mov edx, r9d
mov dword [rsp + 0x78], edx
test eax, eax
je 0x140020aa0
mov r9, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140020a4a
inc r14
add r14, rax
test ecx, ecx
js 0x140020a91
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140020ad8
mov ecx, dword [rbp - 0x50]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov ecx, dword [rbp - 0x60]
mov r8, qword [rbp - 0x78]
mov edx, dword [rsp + 0x78]
inc dword [rbp - 0x50]
inc edx
mov dword [rsp + 0x78], edx
cmp edx, dword [rsp + 0x70]
jb 0x140020a40
inc dword [rbp - 0x10]
cmp byte [r14], r12b
jne 0x140020950
jmp 0x140020adb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, 0xc000007a
mov dword [rbp - 0x60], ecx
jmp 0x140020adb
mov ecx, dword [rbp - 0x60]
cmp qword [rbp + 0x3e8], 0
je 0x140020b0c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x3e8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, dword [rbp - 0x60]
test ecx, ecx
jns 0x140020de2
lea r14, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x78], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x140020b3c
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x78]
add r14, 0x18
sub rax, 1
mov qword [rbp - 0x78], rax
jne 0x140020b24
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
xor r14d, r14d
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
lea ecx, [r14 + 1]
jmp 0x140020df7
mov eax, dword [0x14005bea8]
xor r14d, r14d
lea ecx, [r14 + 1]
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
mov dword [rbp - 0x50], r14d
mov dword [rbp - 0x60], r14d
mov qword [rbp + 0x3f8], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x30], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x140020e25
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x140021702
mov dword [rbp - 0x10], r14d
mov dword [rsp + 0x70], r14d
mov dword [rsp + 0x78], r14d
mov qword [rbp + 0x400], r14
mov ecx, 0x338
call fcn.140009ce0
mov r14, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400213e6
xor eax, eax
mov edi, eax
mov dword [rsp + 0x74], 0xffffffff
mov ebx, eax
mov r11d, eax
lea rsi, [r14 + 7]
lea r12, [0x14004d862]
lea r13d, [rax + 0x67]
mov r14d, dword [rsp + 0x74]
movzx r10d, byte [r12 - 2]
shl r10d, 8
movzx eax, byte [r12 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r12]
or r10d, eax
shl r10d, 8
movzx eax, byte [r12 + 1]
or r10d, eax
movzx r9d, byte [r12 + 2]
shl r9d, 8
movzx eax, byte [r12 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r12 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r12 + 5]
or r9d, eax
xor r11d, r10d
xor ebx, r9d
lea r12, [r12 + 8]
xor ebx, r11d
xor ebx, 0xac987321
mov r8d, ebx
lea eax, [rbx + 0x54969fa2]
rol eax, 5
rol ebx, 0xa
imul eax, eax, 0x137f
add ebx, eax
xor r11d, ebx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r8d, eax
mov eax, r8d
shr eax, 0xd
imul ecx, r8d, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov ecx, r8d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r11d, eax
mov edx, r11d
ror edx, 6
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r8d, edx
lea eax, [r8 + 0x7f1137f]
ror eax, 0xf
mov ecx, r8d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov ecx, r11d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov eax, r8d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r8d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor r8d, ecx
mov eax, r8d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea ebx, [r11 - 0x7f1]
xor ebx, r8d
xor ebx, 0xab69605e
mov eax, ebx
xor eax, 0x7f1
rol eax, 2
mov ecx, ebx
shr ecx, 2
imul eax, eax, 0x137f
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor ebx, ecx
mov edx, ebx
ror edx, 9
mov eax, ebx
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor ebx, ecx
xor r11d, ebx
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor ebx, ecx
lea eax, [rbx - 0x7f1137f]
ror eax, 1
mov ecx, ebx
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r11d, eax
lea eax, [r11 - 0x54969fa2]
rol eax, 3
mov ecx, r11d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor ebx, ecx
lea eax, [rbx - 0x54969fa2]
rol eax, 0xf
mov ecx, ebx
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor ecx, eax
xor ebx, ecx
mov eax, ebx
xor eax, 0x7f1137f
rol eax, 4
mov ecx, ebx
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, edi
xor r11d, ecx
xor ebx, r14d
mov byte [rsi - 4], r11b
ror r11d, 8
mov byte [rsi], bl
ror ebx, 8
mov byte [rsi - 5], r11b
ror r11d, 8
mov byte [rsi - 1], bl
ror ebx, 8
mov byte [rsi - 6], r11b
ror r11d, 8
mov byte [rsi - 2], bl
ror ebx, 8
mov byte [rsi - 7], r11b
mov byte [rsi - 3], bl
ror r11d, 8
ror ebx, 8
mov edi, r10d
mov r14d, r9d
lea rsi, [rsi + 8]
sub r13, 1
jne 0x140020e93
xor eax, eax
xorps xmm1, xmm1
xorps xmm2, xmm2
mov edi, dword [rbp - 0x58]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp - 0x70]
movdqu xmm0, xmmword [rax + r14]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r14 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x1400211a1
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14002121d
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x14002120e
movzx eax, cl
cmp rax, qword [0x14004db98]
jne 0x1400213c6
mov qword [rbp + 0x400], r14
mov qword [rbp + 0x408], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
je 0x1400213f1
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x14002126b
lea r14, [r14 + rax*2]
mov eax, dword [rsp + 0x78]
lea rcx, [rax + rax*2]
lea rax, [0x14005c0a0]
lea r8, [rax + rcx*8]
mov qword [rbp - 0x70], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x1400213e6
xor r9d, r9d
mov ecx, r9d
mov dword [rsp + 0x70], ecx
mov r8, qword [rbp - 0x70]
mov rax, qword [r8]
mov edx, 0x5a4d
cmp word [rax], dx
je 0x1400212cd
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021341
movsxd rdx, dword [rax + 0x3c]
cmp edx, 0x10000000
jb 0x1400212e4
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021341
add rdx, qword [r8]
cmp rdx, qword [r8]
jae 0x1400212f7
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021341
cmp dword [rdx], 0x4550
je 0x14002130a
mov ecx, 0xc000007b
mov dword [rsp + 0x70], ecx
jmp 0x140021341
movzx eax, word [rdx + 0x18]
mov r10d, 0x10b
sub ax, r10w
mov r10d, 0xfeff
test r10w, ax
je 0x14002132f
mov ecx, 0xc000000d
mov dword [rsp + 0x70], ecx
jmp 0x140021341
mov rax, qword [rdx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rdx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rbp - 0x58], eax
add r14, 6
mov edx, r9d
mov dword [rsp + 0x74], edx
test eax, eax
je 0x1400213b7
mov r9, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140021361
inc r14
add r14, rax
test ecx, ecx
js 0x1400213a9
mov rdx, r9
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400213f1
mov ecx, dword [rbp - 0x10]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov ecx, dword [rsp + 0x70]
mov r8, qword [rbp - 0x70]
mov edx, dword [rsp + 0x74]
inc dword [rbp - 0x10]
inc edx
mov dword [rsp + 0x74], edx
cmp edx, dword [rbp - 0x58]
jb 0x140021357
inc dword [rsp + 0x78]
cmp byte [r14], r12b
jne 0x140021261
jmp 0x1400213f5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, 0xc000007a
mov dword [rsp + 0x70], ecx
jmp 0x1400213f5
mov ecx, dword [rsp + 0x70]
cmp qword [rbp + 0x400], 0
je 0x140021427
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x400]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov ecx, dword [rsp + 0x70]
test ecx, ecx
jns 0x1400216f9
lea r14, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x70], rax
mov rcx, qword [r14]
test rcx, rcx
je 0x140021457
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
add r14, 0x18
sub rax, 1
mov qword [rbp - 0x70], rax
jne 0x14002143f
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
xor r14d, r14d
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
jmp 0x14002170a
mov eax, dword [0x14005bea8]
xor r14d, r14d
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
mov eax, edi
and eax, 0xf
mov dword [rbp - 0x58], eax
mov eax, edi
shr eax, 4
and ax, 0xf
mov word [rbp + 0x1700], ax
mov eax, edi
shr eax, 8
and ax, 0xf
mov word [rbp + 0x1702], ax
shr edi, 0xc
and di, 0xf
mov word [rbp + 0x1704], di
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x10], 0xffffff
test rax, rax
jne 0x1400217a9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140021798
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400232f0
mov r14d, r15d
jmp 0x1400232f0
mov rdi, r14
mov qword [rbp + 0x410], r14
mov qword [rbp + 0x418], r14
mov qword [rbp + 0x420], r14
mov qword [rbp + 0x428], r14
mov qword [rbp + 0x430], r14
mov qword [rbp + 0x228], r14
xor eax, eax
mov dword [rbp + 0x170], eax
lea r9, [rbp + 0x170]
xor r8d, r8d
lea rdx, [rbp - 0x24]
lea ecx, [rax + 8]
mov rax, qword [0x14005b0a0]
call qword [case.0x140037fef.0]
test eax, eax
jne 0x14002182f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x14002181e
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140021995
mov r14d, r15d
jmp 0x140021995
mov ecx, dword [rbp + 0x170]
add rcx, rcx
call fcn.140009ce0
mov qword [rbp - 0x68], rax
lea rcx, [rbp + 0x430]
call fcn.140046a14
mov rax, qword [rbp - 0x68]
test rax, rax
jne 0x140021868
mov qword [rbp + 0x430], rax
mov r14d, 0x8007000e
jmp 0x140021995
mov qword [rbp + 0x430], rax
mov ecx, dword [rbp - 0x24]
inc ecx
shl rcx, 2
call fcn.140009ce0
mov qword [rbp - 0x80], rax
lea rcx, [rbp + 0x228]
call fcn.140046a14
mov rax, qword [rbp - 0x80]
test rax, rax
jne 0x1400218a8
mov qword [rbp + 0x228], rax
mov r14d, 0x8007000e
jmp 0x140021995
mov qword [rbp + 0x228], rax
lea r9, [rbp + 0x170]
mov r8, qword [rbp - 0x68]
lea rdx, [rbp - 0x24]
mov ecx, 8
mov rax, qword [0x14005b0a0]
call qword [case.0x140037fef.0]
test eax, eax
jne 0x140021903
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x1400218f2
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140021995
mov r14d, r15d
jmp 0x140021995
mov rax, qword [rbp - 0x80]
xor ecx, ecx
cmp dword [rbp - 0x24], ecx
jbe 0x140021972
mov rdi, qword [rbp - 0x68]
mov rsi, rax
mov ebx, ecx
xor edx, edx
mov rcx, rdi
mov rax, qword [0x14005b0b0]
call qword [case.0x140037fef.0]
mov dword [rsi], eax
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rdi + rax*2], 0
jne 0x140021932
lea rdi, [rdi + rax*2]
add rdi, 2
add rsi, 4
inc ebx
cmp ebx, dword [rbp - 0x24]
jb 0x140021917
mov qword [rbp + 0x228], rsi
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov rax, qword [rbp + 0x228]
mov dword [rax], 0x409
xor eax, eax
mov qword [rbp + 0x228], rax
mov rdi, qword [rbp - 0x80]
mov qword [rbp + 0x410], rdi
mov eax, dword [rbp - 0x24]
inc eax
mov dword [rsp + 0x70], eax
lea rcx, [rbp + 0x228]
call fcn.140046a14
lea rcx, [rbp + 0x430]
call fcn.140046a14
test r14d, r14d
js 0x1400227f0
xor r14d, r14d
mov ecx, r14d
mov dword [rsp + 0x78], ecx
mov r10d, r14d
lea r11, [0x140053570]
cmp dword [rsp + 0x70], ecx
jbe 0x140021a03
mov r9d, r14d
mov edx, r14d
mov r8, r11
mov eax, dword [r8]
cmp dword [r9 + rdi], eax
je 0x1400219fd
inc edx
add r8, 4
cmp edx, 0x26
jb 0x1400219d9
inc r10d
add r9, 4
cmp r10d, dword [rsp + 0x70]
jb 0x1400219d3
jmp 0x140021a03
mov ecx, edx
mov dword [rsp + 0x78], edx
mov edi, ecx
mov dword [rsp + 0x70], r14d
xor r9d, r9d
lea r8d, [r9 + 0x55]
lea rdx, [rbp + 0x1710]
mov ecx, dword [r11 + rdi*4]
mov rax, qword [0x14005b0a8]
call qword [case.0x140037fef.0]
test eax, eax
je 0x140021a6d
mov r9d, 0x10
lea r8, [rbp + 0xc88]
lea edx, [r9 + 0x48]
lea rcx, [rbp + 0x1710]
mov rax, qword [0x14005b090]
call qword [case.0x140037fef.0]
test eax, eax
jle 0x140021a6d
mov r14d, dword [rbp + 0xc94]
shr r14d, 0x1b
and r14d, 1
mov dword [rsp + 0x70], r14d
xor r14d, r14d
lea rcx, str.Segoe_UI_Light
mov qword [rbp + 0x1660], rcx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140021a82
lea rcx, [rcx + rax*2]
add rcx, 2
mov qword [rbp + 0x1668], rcx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x140021aa3
lea rcx, [rcx + rax*2]
add rcx, 2
mov qword [rbp + 0x1670], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021ac4
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1678], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021ae3
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x1680], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021b02
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1688], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021b21
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x1690], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021b40
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x1698], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021b5f
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16a0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021b7e
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16a8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021b9d
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16b0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021bbc
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16b8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021bdb
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16c0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021bfa
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16c8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021c19
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16d0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021c38
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16d8], rdx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x140021c57
inc rax
lea rcx, [rdx + rax*2]
mov qword [rbp + 0x16e0], rcx
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x140021c76
inc rax
lea rdx, [rcx + rax*2]
mov qword [rbp + 0x16e8], rdx
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [rdx + rax*2], 0
jne 0x140021c95
add rdx, 2
lea rax, [rdx + rax*2]
mov qword [rbp + 0x16f0], rax
lea rcx, [rdi + rdi*2]
lea rdx, [0x140000000]
movzx eax, byte [rcx + rdx + 0x4feb0]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x78], rax
movzx eax, byte [rcx + rdx + 0x4feb1]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x40], rax
movzx eax, byte [rcx + rdx + 0x4feb2]
mov rax, qword [rbp + rax*8 + 0x1660]
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x74], r14d
mov ecx, 0x1c90
call fcn.140009ce0
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140021d19
mov r14d, 0x8007000e
jmp 0x1400227f0
xor ecx, ecx
mov r13d, ecx
mov r14d, 0xffffffff
mov r11d, ecx
mov r10d, ecx
lea rbx, [rax + 7]
lea rsi, [0x1400518d2]
mov r12d, 0x392
movzx r9d, byte [rsi - 2]
shl r9d, 8
movzx eax, byte [rsi - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi + 1]
or r9d, eax
movzx r8d, byte [rsi + 2]
shl r8d, 8
movzx eax, byte [rsi + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rsi, [rsi + 8]
xor r11d, r10d
xor r11d, 0xac987321
mov edi, r11d
lea eax, [r11 + 0x54969fa2]
rol eax, 5
rol r11d, 0xa
imul eax, eax, 0x137f
add r11d, eax
xor r10d, r11d
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
mov eax, edi
shr eax, 0xd
imul ecx, edi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor edi, ecx
mov eax, edi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, edi
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r13d
xor r10d, ecx
xor r11d, r14d
mov byte [rbx - 4], r10b
ror r10d, 8
mov byte [rbx], r11b
ror r11d, 8
mov byte [rbx - 5], r10b
ror r10d, 8
mov byte [rbx - 1], r11b
ror r11d, 8
mov byte [rbx - 6], r10b
ror r10d, 8
mov byte [rbx - 2], r11b
ror r11d, 8
mov byte [rbx - 7], r10b
mov byte [rbx - 3], r11b
ror r10d, 8
ror r11d, 8
mov r13d, r9d
mov r14d, r8d
lea rbx, [rbx + 8]
sub r12, 1
jne 0x140021d3b
xor eax, eax
xorps xmm1, xmm1
xorps xmm2, xmm2
mov rdi, qword [rbp - 0x68]
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rsp + 0x74]
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + rdi + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x1c80
jb 0x14002204c
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x1c90
jae 0x1400220c5
xor cl, byte [rax + rdi]
inc rax
cmp rax, 0x1c90
jb 0x1400220b7
movzx eax, cl
cmp rax, qword [0x140053560]
je 0x1400220f9
mov r14d, 0xc004d501
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
jmp 0x14002210b
mov qword [rbp + 0x418], rdi
mov qword [rbp + 0x420], 0x1c90
test r14d, r14d
js 0x1400227f0
mov rdi, qword [rbp + 0x418]
lea rax, [rbp + 0x15f0]
mov r8d, 6
mov ecx, dword [rsp + 0x78]
test ecx, ecx
jne 0x140022133
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002213a
inc rdi
add rdi, rdx
cmp ecx, 1
jne 0x140022151
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022158
inc rdi
add rdi, rdx
cmp ecx, 2
jne 0x14002216f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022176
inc rdi
add rdi, rdx
cmp ecx, 3
jne 0x14002218d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022194
inc rdi
add rdi, rdx
cmp ecx, 4
jne 0x1400221ab
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400221b2
inc rdi
add rdi, rdx
cmp ecx, 5
jne 0x1400221c9
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400221d0
inc rdi
add rdi, rdx
cmp ecx, 6
jne 0x1400221e7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400221ee
inc rdi
add rdi, rdx
cmp ecx, 7
jne 0x140022205
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002220c
inc rdi
add rdi, rdx
cmp ecx, 8
jne 0x140022223
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002222a
inc rdi
add rdi, rdx
cmp ecx, 9
jne 0x140022241
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022248
inc rdi
add rdi, rdx
cmp ecx, 0xa
jne 0x14002225f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022266
inc rdi
add rdi, rdx
cmp ecx, 0xb
jne 0x14002227d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022284
inc rdi
add rdi, rdx
cmp ecx, 0xc
jne 0x14002229b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222a2
inc rdi
add rdi, rdx
cmp ecx, 0xd
jne 0x1400222b9
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222c0
inc rdi
add rdi, rdx
cmp ecx, 0xe
jne 0x1400222d7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222de
inc rdi
add rdi, rdx
cmp ecx, 0xf
jne 0x1400222f5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400222fc
inc rdi
add rdi, rdx
cmp ecx, 0x10
jne 0x140022313
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002231a
inc rdi
add rdi, rdx
cmp ecx, 0x11
jne 0x140022331
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022338
inc rdi
add rdi, rdx
cmp ecx, 0x12
jne 0x14002234f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022356
inc rdi
add rdi, rdx
cmp ecx, 0x13
jne 0x14002236d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022374
inc rdi
add rdi, rdx
cmp ecx, 0x14
jne 0x14002238b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022392
inc rdi
add rdi, rdx
cmp ecx, 0x15
jne 0x1400223a9
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223b0
inc rdi
add rdi, rdx
cmp ecx, 0x16
jne 0x1400223c7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223ce
inc rdi
add rdi, rdx
cmp ecx, 0x17
jne 0x1400223e5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400223ec
inc rdi
add rdi, rdx
cmp ecx, 0x18
jne 0x140022403
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x14002240a
inc rdi
add rdi, rdx
cmp ecx, 0x19
jne 0x140022421
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022428
inc rdi
add rdi, rdx
cmp ecx, 0x1a
jne 0x14002243f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022446
inc rdi
add rdi, rdx
cmp ecx, 0x1b
jne 0x14002245d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022464
inc rdi
add rdi, rdx
cmp ecx, 0x1c
jne 0x14002247b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022482
inc rdi
add rdi, rdx
cmp ecx, 0x1d
jne 0x140022499
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224a0
inc rdi
add rdi, rdx
cmp ecx, 0x1e
jne 0x1400224b7
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224be
inc rdi
add rdi, rdx
cmp ecx, 0x1f
jne 0x1400224d5
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224dc
inc rdi
add rdi, rdx
cmp ecx, 0x20
jne 0x1400224f3
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x1400224fa
inc rdi
add rdi, rdx
cmp ecx, 0x21
jne 0x140022511
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022518
inc rdi
add rdi, rdx
cmp ecx, 0x22
jne 0x14002252f
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022536
inc rdi
add rdi, rdx
cmp ecx, 0x23
jne 0x14002254d
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022554
inc rdi
add rdi, rdx
cmp ecx, 0x24
jne 0x14002256b
mov qword [rax], rdi
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rdi + rdx], r12b
jne 0x140022572
inc rdi
add rdi, rdx
cmp ecx, 0x25
jne 0x140022589
mov rdi, qword [rbp + 0x418]
test rdi, rdi
je 0x140022807
xor eax, eax
mov rcx, qword [rbp + 0x420]
rep stosb byte [rdi], al
lea rcx, [rbp + 0x428]
call fcn.140046a14
lea rcx, [rbp + 0x418]
call fcn.140046a14
lea rcx, [rbp + 0x410]
call fcn.140046a14
test r14d, r14d
js 0x1400232dd
mov rax, qword [rbp + 0x3f8]
mov rcx, qword [rax]
mov qword [rbp + 0xba8], rcx
mov rcx, qword [rax + 8]
mov qword [rbp + 0xbb0], rcx
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0xbb8], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a0], xmm0
xor eax, eax
mov edi, eax
mov r14d, eax
mov dword [rbp + 0x6a0], 0x10
xor r9d, r9d
lea r8, [rbp + 0x6a0]
xor edx, edx
lea ecx, [rax + 0x42]
mov rax, qword [0x14005b168]
call qword [case.0x140037fef.0]
test eax, eax
jne 0x1400228be
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x1400228b4
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400228c7
mov r14d, r15d
jmp 0x1400228c7
mov edi, dword [rbp + 0x6a4]
and edi, 1
mov dword [rbp + 0xba4], edi
test r14d, r14d
js 0x1400232dd
mov r14d, dword [rbp - 0x58]
mov ecx, r14d
mov eax, 0x2a
mov dword [rsp + 0x70], eax
sub ecx, 1
je 0x14002290f
sub ecx, 1
je 0x1400228ff
cmp ecx, 1
jne 0x140022919
mov eax, 0xe1
mov dword [rbp - 0x60], eax
jmp 0x140022916
mov dword [rbp - 0x50], 0xf
mov dword [rbp - 0x60], 0xb
jmp 0x140022919
mov dword [rbp - 0x60], 0xb
mov dword [rbp - 0x50], eax
mov edi, 0x60
mov dword [rsp + 0x78], edi
xor edx, edx
lea r8d, [rdi + 0x7c]
lea rcx, [rbp + 0x1290]
call sub.msvcrt.dll_memset
mov eax, 0xdc
mov word [rbp + 0x12d4], ax
lea r8, [rbp + 0x1290]
mov edx, 0xffffffff
xor ecx, ecx
mov rax, qword [0x14005b0e0]
call qword [case.0x140037fef.0]
test eax, eax
je 0x14002298d
movzx edi, word [rbp + 0x1336]
mov eax, dword [rbp + 0x133c]
mov dword [rbp + 0x698], eax
mov eax, dword [rbp + 0x1340]
mov dword [rbp + 0x69c], eax
cmp edi, 0x60
mov eax, 0x60
cmovb edi, eax
mov dword [rsp + 0x78], edi
mov rax, qword [rbp - 0x78]
cmp r14d, 1
cmovne rax, qword [rbp - 0x30]
mov qword [rbp - 0x68], rax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xe50]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140022a04
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x1400229f3
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400232dd
mov r14d, r15d
jmp 0x140022aa5
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rbp - 0x50]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
neg eax
mov dword [rbp + 0xe50], eax
mov dword [rbp + 0xe60], 0x190
mov byte [rbp + 0xe6a], 5
mov r8, qword [rbp - 0x68]
mov edx, 0x20
lea rcx, [rbp + 0xe6c]
call fcn.140002dc0
lea rcx, [rbp + 0xe50]
mov rax, qword [0x14005b020]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x140022a8b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022a81
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140022a92
mov r14d, r15d
jmp 0x140022a92
mov qword [rbp + 0xbc0], rax
mov rdx, qword [rbp - 0x80]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
cmp dword [rbp - 0x58], 1
mov rax, qword [rbp - 0x78]
cmovne rax, qword [rbp - 0x30]
mov qword [rbp - 0x78], rax
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xeb0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x140022b25
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022b14
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400232dd
mov r14d, r15d
jmp 0x140022bc6
mov r8d, 0x48
mov edx, edi
mov ecx, dword [rbp - 0x60]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
neg eax
mov dword [rbp + 0xeb0], eax
mov dword [rbp + 0xec0], 0x190
mov byte [rbp + 0xeca], 5
mov r8, qword [rbp - 0x78]
mov edx, 0x20
lea rcx, [rbp + 0xecc]
call fcn.140002dc0
lea rcx, [rbp + 0xeb0]
mov rax, qword [0x14005b020]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x140022bac
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022ba2
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140022bb3
mov r14d, r15d
jmp 0x140022bb3
mov qword [rbp + 0xbc8], rax
mov rdx, qword [rbp - 0x30]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
xor r9d, r9d
mov ecx, r9d
mov edi, r9d
mov r8d, dword [rbp - 0x58]
mov edx, r8d
sub edx, 1
je 0x140022bee
sub edx, 1
je 0x140022c24
cmp edx, 1
jne 0x140022bfa
mov ecx, dword [rbp + 0x698]
mov edi, dword [rbp + 0x69c]
mov dword [rbp + 0x688], ecx
mov dword [rbp + 0x68c], edi
cmp r8d, 1
je 0x140022c4c
lea eax, [r8 - 2]
cmp eax, 1
ja 0x140022c36
mov edx, r9d
mov dword [rsp + 0x70], r9d
mov dword [rsp + 0x74], r9d
jmp 0x140022c59
mov eax, dword [rbp + 0x698]
cdq
and edx, 3
lea ecx, [rdx + rax]
sar ecx, 2
jmp 0x140022bfa
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x74], eax
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x24]
mov edx, dword [rbp - 0x24]
jmp 0x140022c5c
mov edx, 0x96
mov dword [rsp + 0x74], 0x20
mov eax, r9d
mov dword [rbp - 0x50], edx
mov dword [rbp - 0x60], eax
sub ecx, edx
sub ecx, eax
mov dword [rbp - 0x48], ecx
mov dword [rbp + 0xbf4], ecx
mov dword [rbp + 0xbe4], ecx
mov rdi, qword [rbp + 0xba8]
mov r14d, r9d
mov rdx, qword [rbp + 0xbc0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0xbdc]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140022cee
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
mov rdi, qword [rbp + 0xbb0]
xor eax, eax
mov r14d, eax
mov rdx, qword [rbp + 0xbc8]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0xbec]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140022d72
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
mov eax, dword [rbp - 0x58]
add eax, 0xfffffffe
mov ecx, dword [rbp + 0xbe4]
cmp eax, 1
ja 0x140022d99
mov edi, dword [rbp + 0xbf4]
cmp ecx, edi
cmovg edi, ecx
jmp 0x140022d9c
mov edi, dword [rbp - 0x48]
mov r8d, dword [rsp + 0x70]
mov rax, qword [0x14005b150]
cmp dword [rbp + 0xba0], 0
je 0x140022dd6
mov r14d, dword [rbp - 0x60]
mov edx, r14d
sub edx, ecx
add edx, edi
lea rcx, [rbp + 0xbdc]
call qword [case.0x140037fef.0]
sub r14d, dword [rbp + 0xbf4]
lea edx, [rdi + r14]
jmp 0x140022de9
mov edx, dword [rbp - 0x50]
lea rcx, [rbp + 0xbdc]
call qword [case.0x140037fef.0]
mov edx, dword [rbp - 0x50]
mov r8d, dword [rsp + 0x74]
add r8d, dword [rbp + 0xbe8]
lea rcx, [rbp + 0xbec]
mov rax, qword [0x14005b150]
call qword [case.0x140037fef.0]
mov ecx, dword [rbp - 0x58]
lea eax, [rcx - 2]
cmp eax, 1
jbe 0x1400230d8
cmp ecx, 1
jne 0x1400230f4
mov dword [rbp + 0xbd8], 0xffffff
xor edx, edx
lea r8d, [rcx + 0x5b]
lea rcx, [rbp + 0xdf0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r14d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x14005b0f8]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140022e91
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022e80
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x1400232dd
mov r14d, r15d
jmp 0x140022f35
mov r8d, 0x48
mov edx, dword [rsp + 0x78]
lea ecx, [r8 - 0x3d]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
neg eax
mov dword [rbp + 0xdf0], eax
mov dword [rbp + 0xe00], 0x190
mov byte [rbp + 0xe0a], 5
mov r8, qword [rbp - 0x40]
mov edx, 0x20
lea rcx, [rbp + 0xe0c]
call fcn.140002dc0
lea rcx, [rbp + 0xdf0]
mov rax, qword [0x14005b020]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x140022f1b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140022f11
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140022f22
mov r14d, r15d
jmp 0x140022f22
mov qword [rbp + 0xbd0], rax
mov rdx, qword [rbp - 0x78]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
mov dword [rbp + 0xc04], edi
mov rdi, qword [rbp + 0xbb8]
xor eax, eax
mov r14d, eax
mov rdx, qword [rbp + 0xbd0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x460
lea r9, [rbp + 0xbfc]
lea r8d, [rax - 1]
mov rdx, rdi
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
test eax, eax
cmove r14d, r15d
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140022fbf
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400232dd
mov eax, dword [rbp + 0xc04]
add eax, 0x18
mov ecx, 0x5a
cmp eax, ecx
cmovl eax, ecx
mov dword [rbp + 0xc04], eax
mov eax, 0x20
mov dword [rbp + 0xc08], eax
mov r14d, 0x60
mov r8d, r14d
mov edi, dword [rsp + 0x78]
mov edx, edi
mov ecx, dword [rbp + 0xbfc]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xbfc], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc00]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xc00], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc04]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xc04], eax
mov r8d, r14d
mov edx, edi
mov ecx, dword [rbp + 0xc08]
mov rax, qword [0x14005b0b8]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xc08], eax
mov r8d, dword [rbp + 0xbf8]
lea rcx, [rbp + 0xbfc]
mov rax, qword [0x14005b150]
add r8d, 0x24
cmp dword [rbp + 0xba0], 0
je 0x1400230ae
mov edx, dword [rbp + 0xbdc]
cmp edx, dword [rbp + 0xbec]
cmovge edx, dword [rbp + 0xbec]
call qword [case.0x140037fef.0]
mov ecx, dword [rbp - 0x58]
jmp 0x1400230f4
mov edx, dword [rbp + 0xbe4]
cmp edx, dword [rbp + 0xbf4]
cmovle edx, dword [rbp + 0xbf4]
sub edx, dword [rbp + 0xc04]
add edx, dword [rbp + 0xbfc]
call qword [case.0x140037fef.0]
mov ecx, dword [rbp - 0x58]
jmp 0x1400230f4
mov dword [rbp + 0x688], edi
mov eax, dword [rbp + 0xbf8]
mov dword [rbp + 0x68c], eax
mov dword [rbp + 0xbd8], 0xffa8a8a8
mov eax, dword [rbp + 0xba0]
mov dword [rbp - 0x50], eax
mov r14d, dword [rbp + 0x68c]
mov edi, dword [rbp + 0x688]
sub ecx, 1
je 0x1400232c6
sub ecx, 1
je 0x1400231d7
cmp ecx, 1
jne 0x1400232da
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm0
mov qword [rbp + 0xcf0], rax
mov edx, ecx
xor ecx, ecx
mov rax, qword [0x14005b148]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xcd0], 0x28
lea rdx, [rbp + 0xcd0]
mov rcx, rax
mov rax, qword [0x14005b108]
call qword [case.0x140037fef.0]
test eax, eax
je 0x1400232da
lea rdx, [rbp + 0xce4]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x140037fef.0]
lea rdx, [rbp + 0xcec]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x140037fef.0]
mov eax, dword [rbp + 0xcec]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0xcec]
shr rcx, 0x20
sub ecx, r14d
imul ecx, ecx, 0x32
jmp 0x1400232a7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xca8], xmm0
movups xmmword [rbp + 0xcb8], xmm0
mov qword [rbp + 0xcc8], rax
lea edx, [rax + 1]
xor ecx, ecx
mov rax, qword [0x14005b148]
call qword [case.0x140037fef.0]
mov dword [rbp + 0xca8], 0x28
lea rdx, [rbp + 0xca8]
mov rcx, rax
mov rax, qword [0x14005b108]
call qword [case.0x140037fef.0]
test eax, eax
je 0x1400232da
lea rdx, [rbp + 0xcbc]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x140037fef.0]
lea rdx, [rbp + 0xcc4]
xor ecx, ecx
mov rax, qword [0x14005b140]
call qword [case.0x140037fef.0]
mov eax, dword [rbp + 0xcc4]
cmp dword [rbp - 0x50], 0
je 0x140023280
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0xcbc]
jmp 0x140023296
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0xcc4]
shr rax, 0x20
sub eax, r14d
imul ecx, eax, 0x5f
mov dword [rbp + 0x680], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0x684], edx
jmp 0x1400232da
mov dword [rbp + 0x680], 0
mov dword [rbp + 0x684], 0
xor r14d, r14d
mov rdx, qword [rbp - 0x70]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x140037fef.0]
mov ecx, 1
xor eax, eax
lock cmpxchg dword [0x14005c480], ecx
jne 0x1400232f5
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x1400235e6
sub eax, ecx
mov dword [0x14005bea8], eax
jne 0x1400235e6
lea rdi, [0x14005c0a0]
mov eax, 4
mov qword [rbp - 0x78], rax
mov rcx, qword [rdi]
test rcx, rcx
je 0x140023345
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
mov rax, qword [rbp - 0x78]
add rdi, 0x18
sub rax, 1
mov qword [rbp - 0x78], rax
jne 0x14002332d
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], 0
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
xor eax, eax
xchg dword [0x14005c480], eax
lea rcx, [rbp + 0x3f8]
call fcn.140046a14
test r14d, r14d
js 0x140025063
mov rdi, qword [rbp + 0x680]
mov qword [rbp + 0x440], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x820]
call sub.msvcrt.dll_memset
mov edx, 7
lea r14d, [rdx - 6]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b050]
call qword [case.0x140037fef.0]
test rax, rax
je 0x140023687
lea r8, [rbp + 0x820]
lea edx, [r14 + 0x67]
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
test eax, eax
je 0x140023687
cmp word [rbp + 0x832], 0x20
jne 0x140023687
cmp qword [rbp + 0x838], 0
je 0x140023687
cmp dword [rbp + 0x824], 0
jle 0x140023687
cmp dword [rbp + 0x828], 0
jg 0x14002368c
xor eax, eax
mov r14d, eax
mov dword [rbp + 0x16c], r14d
test r14d, r14d
jne 0x14002379c
cmp dword [rbp - 0x58], 1
je 0x14002379c
mov edi, dword [rbp - 0x58]
xor r14d, r14d
mov edx, 1
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
mov dword [rbp - 0x50], eax
mov eax, 0x810
mov ecx, 0x20812
cmp dword [rbp + 0xba0], 0
cmovne eax, ecx
mov dword [rbp - 0x60], eax
cmp dword [rbp + 0x16c], 0
je 0x14002424b
mov eax, dword [rbp + 0xba4]
mov dword [rsp + 0x70], eax
mov rax, qword [rbp + 0xbc0]
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0xba8]
mov qword [rbp - 0x40], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x890]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x900]
call sub.msvcrt.dll_memset
mov qword [rbp - 0x30], r14
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x74], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xcf8], xmm0
movups xmmword [rbp + 0xd08], xmm0
mov qword [rbp + 0xd18], rax
mov dword [rbp + 0xd20], eax
movups xmmword [rbp + 0xc78], xmm0
test rdi, rdi
je 0x140025048
lea edx, [rax + 7]
mov rdi, qword [rbp - 0x18]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x14002380e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025048
mov r8d, dword [rbp + 0x444]
mov edx, edi
lea rcx, [rbp + 0xbdc]
mov rax, qword [0x14005b150]
call qword [case.0x140037fef.0]
mov r8d, dword [rbp + 0x444]
mov edx, edi
lea rcx, [rbp + 0xbec]
mov rax, qword [0x14005b150]
call qword [case.0x140037fef.0]
mov edi, dword [rbp - 0x58]
cmp edi, 1
jne 0x1400236a9
mov ecx, 0xb26720
cmp dword [rbp + 0xba4], 0
mov r14d, 0
cmovne ecx, r14d
mov rax, qword [0x14005b028]
call qword [case.0x140037fef.0]
mov qword [rbp + 0x10], rax
jmp 0x1400236ac
lea r8, [rbp + 0x890]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
test eax, eax
je 0x14002384d
mov rax, qword [rbp + 0x8a8]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x894]
mov dword [rsp + 0x78], eax
mov eax, dword [rbp + 0x898]
mov dword [rsp + 0x74], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x140037fef.0]
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x14002387a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025048
mov ecx, dword [rbp + 0xbe8]
sub ecx, dword [rbp + 0xbe0]
mov eax, dword [rbp + 0xbe4]
sub eax, dword [rbp + 0xbdc]
mov qword [rbp + 0x448], r14
mov dword [rbp - 0x48], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd08], xmm0
xor edx, edx
mov qword [rbp + 0xd18], rdx
mov dword [rbp + 0xd20], edx
mov dword [rbp + 0xcf8], 0x28
mov dword [rbp + 0xcfc], eax
neg ecx
mov dword [rbp + 0xd00], ecx
mov eax, 1
mov word [rbp + 0xd04], ax
mov eax, 0x20
mov word [rbp + 0xd06], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x448]
xor r8d, r8d
lea rdx, [rbp + 0xcf8]
mov rcx, rdi
mov rax, qword [0x14005b018]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140023949
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140023938
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x140023cbc
mov r14d, r15d
jmp 0x140023cbc
lea r8, [rbp + 0x900]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0x918]
mov qword [rbp - 0x80], rcx
mov eax, dword [rbp + 0xbe4]
sub eax, dword [rbp + 0xbdc]
mov dword [rbp + 0xc80], eax
mov eax, dword [rbp + 0xbe8]
sub eax, dword [rbp + 0xbe0]
mov dword [rbp + 0xc84], eax
mov rdx, qword [rbp - 0x68]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x140037fef.0]
mov r8, rax
lea rdx, [rbp + 0xc78]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x140037fef.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc78]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x58], 1
jne 0x140023a61
cmp dword [rsp + 0x70], 0
je 0x140023a57
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x140037fef.0]
mov dword [rsp + 0x70], eax
jmp 0x140023a69
mov dword [rsp + 0x70], 0xffffff
jmp 0x140023a69
mov dword [rsp + 0x70], 0xffa8a8a8
mov eax, dword [rbp + 0xbdc]
mov edx, eax
neg edx
test eax, eax
mov ecx, 0
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0xbe0]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc80]
sub ecx, edx
mov eax, dword [rsp + 0x78]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 0x28], ecx
mov r10d, dword [rbp + 0xc84]
sub r10d, r8d
mov eax, dword [rsp + 0x74]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x140023c8f
test r10d, r10d
jle 0x140023c8f
movsxd rbx, dword [rbp + 0xc80]
mov eax, ebx
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x80]
lea rdi, [rax + rcx*4]
mov qword [rbp - 0x40], rdi
movsxd rdx, dword [rsp + 0x78]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x30], rax
xor r14d, r14d
mov dword [rsp + 0x78], r14d
mov rcx, rbx
shl rcx, 2
mov qword [rbp - 0x80], rcx
mov rcx, rdx
shl rcx, 2
mov esi, dword [rbp - 0x28]
mov ebx, dword [rsp + 0x70]
mov r12, qword [rbp - 0x80]
mov r13, rcx
mov r8d, r14d
mov dword [rsp + 0x74], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140023c2e
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rsp + 0x71]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rsp + 0x72]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rsp + 0x74]
add r9, 4
inc r8d
mov dword [rsp + 0x74], r8d
cmp r8d, esi
jl 0x140023b59
mov rdi, qword [rbp - 0x40]
add rdi, r12
mov qword [rbp - 0x40], rdi
mov rax, qword [rbp - 0x30]
add rax, r13
mov qword [rbp - 0x30], rax
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
cmp ecx, r10d
jl 0x140023b47
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x48]
mov rdi, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140023cbc
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400242ab
mov eax, dword [rbp + 0xba4]
mov dword [rsp + 0x70], eax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0xbb0]
mov qword [rbp - 0x40], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x970]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x7b0]
call sub.msvcrt.dll_memset
xor r14d, r14d
mov qword [rbp - 0x30], r14
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x74], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd28], xmm0
movups xmmword [rbp + 0xd38], xmm0
mov qword [rbp + 0xd48], rax
mov dword [rbp + 0xd50], eax
movups xmmword [rbp + 0xc58], xmm0
test rdi, rdi
je 0x140025048
lea edx, [rax + 7]
mov rdi, qword [rbp - 0x18]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x140023d87
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025048
lea r8, [rbp + 0x970]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
test eax, eax
je 0x140023dc6
mov rax, qword [rbp + 0x988]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x974]
mov dword [rsp + 0x78], eax
mov eax, dword [rbp + 0x978]
mov dword [rsp + 0x74], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x140037fef.0]
mov rdi, rax
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x140023df3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140025048
mov ecx, dword [rbp + 0xbf8]
sub ecx, dword [rbp + 0xbf0]
mov eax, dword [rbp + 0xbf4]
sub eax, dword [rbp + 0xbec]
mov qword [rbp + 0x450], r14
mov dword [rbp - 0x48], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd38], xmm0
xor edx, edx
mov qword [rbp + 0xd48], rdx
mov dword [rbp + 0xd50], edx
mov dword [rbp + 0xd28], 0x28
mov dword [rbp + 0xd2c], eax
neg ecx
mov dword [rbp + 0xd30], ecx
mov eax, 1
mov word [rbp + 0xd34], ax
mov eax, 0x20
mov word [rbp + 0xd36], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x450]
xor r8d, r8d
lea rdx, [rbp + 0xd28]
mov rcx, rdi
mov rax, qword [0x14005b018]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140023ec2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140023eb1
movzx r14d, ax
or r14d, 0x80070000
test r14d, r14d
js 0x14002422a
mov r14d, r15d
jmp 0x14002422a
lea r8, [rbp + 0x7b0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0x7c8]
mov qword [rbp - 0x80], rcx
mov eax, dword [rbp + 0xbf4]
sub eax, dword [rbp + 0xbec]
mov dword [rbp + 0xc60], eax
mov eax, dword [rbp + 0xbf8]
sub eax, dword [rbp + 0xbf0]
mov dword [rbp + 0xc64], eax
mov rdx, qword [rbp - 0x68]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x140037fef.0]
mov r8, rax
lea rdx, [rbp + 0xc58]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x140037fef.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc58]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x58], 1
jne 0x140023fd5
cmp dword [rsp + 0x70], r14d
je 0x140023fcc
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x140037fef.0]
jmp 0x140023fda
mov dword [rbp - 0x58], 0xffffff
jmp 0x140023fe0
mov eax, 0xffa8a8a8
mov dword [rbp - 0x58], eax
mov dword [rbp - 0x10], eax
mov eax, dword [rbp + 0xbec]
mov edx, eax
neg edx
test eax, eax
mov rcx, r14
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0xbf0]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc60]
sub ecx, edx
mov eax, dword [rsp + 0x78]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 0x60], ecx
mov r10d, dword [rbp + 0xc64]
sub r10d, r8d
mov eax, dword [rsp + 0x74]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x1400241fd
test r10d, r10d
jle 0x1400241fd
movsxd rsi, dword [rbp + 0xc60]
mov eax, esi
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x80]
lea rdi, [rax + rcx*4]
mov qword [rbp - 0x40], rdi
movsxd rdx, dword [rsp + 0x78]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x70], r14d
mov rcx, rsi
shl rcx, 2
mov qword [rbp - 0x80], rcx
mov rcx, rdx
shl rcx, 2
mov esi, dword [rbp - 0x60]
mov rbx, qword [rbp - 0x80]
mov r12, rcx
mov r13d, dword [rbp - 0x10]
mov r8d, r14d
mov dword [rbp - 0x60], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14002419d
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x57]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x56]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rbp - 0x60]
add r9, 4
inc r8d
mov dword [rbp - 0x60], r8d
cmp r8d, esi
jl 0x1400240ca
mov rdi, qword [rbp - 0x40]
add rdi, rbx
mov qword [rbp - 0x40], rdi
mov rax, qword [rbp - 0x30]
add rax, r12
mov qword [rbp - 0x30], rax
mov ecx, dword [rsp + 0x70]
inc ecx
mov dword [rsp + 0x70], ecx
cmp ecx, r10d
jl 0x1400240b9
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x48]
mov rdi, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x68]
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14002422a
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x1400242ab
mov rdi, qword [rbp + 8]
xor r14d, r14d
jmp 0x140024ff1
cmp dword [rbp + 0xba4], 0
jne 0x14002425b
cmp edi, 1
mov al, 0xc0
jne 0x14002425d
mov al, 0xff
mov byte [rsp + 0x70], 0
mov byte [rsp + 0x71], 0
mov byte [rsp + 0x72], al
mov byte [rsp + 0x73], 1
mov dword [rbp + 0x6d0], r14d
xor eax, eax
mov dword [rbp + 0x6d4], eax
mov dword [rbp + 0x6e0], eax
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b010]
call qword [case.0x140037fef.0]
mov qword [rbp + 8], rax
test rax, rax
jne 0x1400242b3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
jmp 0x140025048
cmp edi, 1
jne 0x14002438a
mov r8d, dword [rbp + 0xbe4]
mov eax, r8d
mov r9d, dword [rbp + 0xbdc]
sub eax, r9d
mov r10d, dword [rbp + 0xbf4]
mov ecx, r10d
mov r11d, dword [rbp + 0xbec]
sub ecx, r11d
cmp ecx, eax
cmovle ecx, eax
mov dword [rsp + 0x78], ecx
mov eax, dword [rbp + 0xbf8]
sub eax, dword [rbp + 0xbe0]
mov dword [rsp + 0x74], eax
xor eax, eax
mov edi, eax
mov edx, eax
cmp dword [rbp + 0xba0], eax
je 0x14002432e
mov r14d, ecx
sub r14d, r8d
add r14d, r9d
mov dword [rbp + 0x6d0], r14d
mov eax, ecx
sub eax, r10d
add eax, r11d
mov dword [rbp + 0x6e0], eax
mov edi, r14d
mov edx, eax
sub edi, r9d
add edi, r8d
mov dword [rbp + 0x6d8], edi
mov eax, dword [rbp + 0xbe8]
sub eax, dword [rbp + 0xbe0]
mov dword [rbp - 0x48], eax
mov dword [rbp + 0x6dc], eax
sub edx, r11d
add edx, r10d
mov dword [rbp - 0x28], edx
mov dword [rbp + 0x6e8], edx
mov edx, dword [rbp + 0xbf0]
sub edx, dword [rbp + 0xbe0]
mov dword [rbp + 0x28], edx
mov dword [rbp + 0x6e4], edx
sub edx, dword [rbp + 0xbf0]
add edx, dword [rbp + 0xbf8]
mov dword [rbp - 8], edx
mov dword [rbp + 0x6ec], edx
jmp 0x1400243eb
mov ecx, dword [rbp + 0x688]
mov dword [rsp + 0x78], ecx
mov eax, dword [rbp + 0x68c]
mov dword [rsp + 0x74], eax
movups xmm0, xmmword [rbp + 0xbdc]
movups xmmword [rbp + 0x6d0], xmm0
movups xmm1, xmmword [rbp + 0xbec]
movups xmmword [rbp + 0x6e0], xmm1
mov eax, dword [rbp + 0x6dc]
mov dword [rbp - 0x48], eax
mov edi, dword [rbp + 0x6d8]
mov r14d, dword [rbp + 0x6d0]
mov eax, dword [rbp + 0x6ec]
mov dword [rbp - 8], eax
mov eax, dword [rbp + 0x6e8]
mov dword [rbp - 0x28], eax
mov eax, dword [rbp + 0x6e4]
mov dword [rbp + 0x28], eax
xor edx, edx
mov qword [rbp + 0x458], rdx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xdc8], xmm0
mov qword [rbp + 0xdd8], rdx
mov dword [rbp + 0xde0], edx
mov dword [rbp + 0xdb8], 0x28
mov dword [rbp + 0xdbc], ecx
mov eax, dword [rsp + 0x74]
neg eax
mov dword [rbp + 0xdc0], eax
mov eax, 1
mov word [rbp + 0xdc4], ax
mov eax, 0x20
mov word [rbp + 0xdc6], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x458]
xor r8d, r8d
lea rdx, [rbp + 0xdb8]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b018]
call qword [case.0x140037fef.0]
mov qword [rbp + 0x30], rax
test rax, rax
jne 0x14002448c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rdi, qword [rbp + 8]
xor r14d, r14d
jmp 0x140025033
mov rdx, rax
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x58], 1
jne 0x1400244e9
mov r8, qword [rbp + 0x10]
test r8, r8
je 0x1400244e9
xor eax, eax
mov dword [rbp + 0xc48], eax
mov dword [rbp + 0xc4c], eax
mov eax, dword [rsp + 0x78]
mov dword [rbp + 0xc50], eax
mov eax, dword [rsp + 0x74]
mov dword [rbp + 0xc54], eax
lea rdx, [rbp + 0xc48]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b0e8]
call qword [case.0x140037fef.0]
mov eax, dword [rbp + 0xba4]
mov dword [rbp - 0x38], eax
mov rax, qword [rbp + 0xbc0]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp + 0xba8]
mov qword [rbp - 0x40], rax
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x9e0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xa50]
call sub.msvcrt.dll_memset
xor ecx, ecx
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0x80], ecx
mov dword [rbp - 0x68], ecx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd58], xmm0
movups xmmword [rbp + 0xd68], xmm0
mov qword [rbp + 0xd78], rax
mov dword [rbp + 0xd80], eax
movups xmmword [rbp + 0xc68], xmm0
cmp qword [rbp - 0x40], rax
je 0x140025013
lea edx, [rcx + 7]
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b050]
call qword [case.0x140037fef.0]
test rax, rax
je 0x140025007
lea r8, [rbp + 0x9e0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
test eax, eax
je 0x1400245c3
mov rax, qword [rbp + 0x9f8]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp + 0x9e4]
mov dword [rbp - 0x80], eax
mov eax, dword [rbp + 0x9e8]
mov dword [rbp - 0x68], eax
mov rcx, qword [rbp + 8]
mov rax, qword [0x14005b010]
call qword [case.0x140037fef.0]
mov rcx, rax
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140025007
mov eax, dword [rbp - 0x48]
sub eax, dword [rbp + 0x6d4]
mov dword [rbp - 0x48], eax
sub edi, r14d
xor edx, edx
mov qword [rbp + 0x468], rdx
mov dword [rbp - 0x70], edx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd68], xmm0
mov qword [rbp + 0xd78], rdx
mov dword [rbp + 0xd80], edx
mov dword [rbp + 0xd58], 0x28
mov dword [rbp + 0xd5c], edi
neg eax
mov dword [rbp + 0xd60], eax
mov eax, 1
mov word [rbp + 0xd64], ax
mov eax, 0x20
mov word [rbp + 0xd66], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x468]
xor r8d, r8d
lea rdx, [rbp + 0xd58]
mov rax, qword [0x14005b018]
call qword [case.0x140037fef.0]
mov qword [rbp], rax
test rax, rax
jne 0x1400246aa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [rbp - 0x70], eax
test eax, eax
jle 0x140024697
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x70], eax
test eax, eax
mov rdi, qword [rbp + 0x20]
js 0x1400249f1
mov dword [rbp - 0x70], r15d
jmp 0x1400249f1
lea r8, [rbp + 0xa50]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0xa68]
mov qword [rbp + 0x18], rcx
mov dword [rbp + 0xc70], edi
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0xc74], eax
mov rdx, qword [rbp]
mov rdi, qword [rbp + 0x20]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
mov rdx, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x140037fef.0]
mov r8, rax
lea rdx, [rbp + 0xc68]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x140037fef.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc68]
mov r8d, 0xffffffff
mov rdx, qword [rbp - 0x40]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x58], 1
jne 0x1400247ae
cmp dword [rbp - 0x38], 0
je 0x1400247a5
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x140037fef.0]
mov dword [rbp - 0x38], eax
jmp 0x1400247b5
mov dword [rbp - 0x38], 0xffffff
jmp 0x1400247b5
mov dword [rbp - 0x38], 0xffa8a8a8
mov edx, r14d
neg edx
test r14d, r14d
mov r9d, 0
cmovns edx, r9d
mov r8d, r9d
cmovns r8d, r14d
mov eax, dword [rbp + 0x6d4]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r9d
cmovns r9d, eax
mov r14d, dword [rbp + 0xc70]
sub r14d, edx
movsxd r10, dword [rbp - 0x80]
mov eax, r10d
sub eax, r8d
cmp r14d, eax
cmovge r14d, eax
mov r11d, dword [rbp + 0xc74]
sub r11d, ecx
mov eax, dword [rbp - 0x68]
sub eax, r9d
cmp r11d, eax
cmovge r11d, eax
test r14d, r14d
jle 0x1400249c4
test r11d, r11d
jle 0x1400249c4
movsxd rsi, dword [rbp + 0xc70]
mov eax, esi
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp + 0x18]
lea rdi, [rax + rcx*4]
mov qword [rbp + 0x18], rdi
mov eax, r10d
imul eax, r9d
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rax, [rax + rcx*4]
mov qword [rbp - 0x40], rax
xor r13d, r13d
mov dword [rbp - 0x68], r13d
mov rcx, rsi
shl rcx, 2
mov qword [rbp - 0x30], rcx
mov rcx, r10
shl rcx, 2
mov esi, dword [rbp - 0x38]
mov rbx, qword [rbp - 0x30]
mov r12, rcx
mov r8d, r13d
mov dword [rbp - 0x80], r13d
lea r9, [rdi + 2]
mov r10, rax
sub r10, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14002496a
movzx edi, byte [r10 + r9]
movzx r8d, dl
movzx ecx, sil
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
movzx ecx, byte [rbp - 0x37]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
movzx ecx, byte [rbp - 0x36]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
mov r8d, dword [rbp - 0x80]
add r9, 4
inc r8d
mov dword [rbp - 0x80], r8d
cmp r8d, r14d
jl 0x140024897
mov rdi, qword [rbp + 0x18]
add rdi, rbx
mov qword [rbp + 0x18], rdi
mov rax, qword [rbp - 0x40]
add rax, r12
mov qword [rbp - 0x40], rax
mov ecx, dword [rbp - 0x68]
inc ecx
mov dword [rbp - 0x68], ecx
cmp ecx, r11d
jl 0x140024886
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r13d
mov r13d, dword [rbp - 0x20]
mov rdi, qword [rbp + 0x20]
mov rcx, qword [rbp]
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x1400249f1
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x70], 0
jl 0x140025013
mov eax, dword [rbp + 0xba4]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0x18], rax
mov rdi, qword [rbp + 0xbb0]
mov qword [rbp], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xac0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xb30]
call sub.msvcrt.dll_memset
xor r14d, r14d
mov qword [rbp + 0x20], r14
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x80], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xd88], xmm0
movups xmmword [rbp + 0xd98], xmm0
mov qword [rbp + 0xda8], rax
mov dword [rbp + 0xdb0], eax
movups xmmword [rbp + 0xc38], xmm0
test rdi, rdi
je 0x140025016
lea edx, [rax + 7]
mov rdi, qword [rbp + 8]
mov rcx, rdi
mov rax, qword [0x14005b050]
call qword [case.0x140037fef.0]
test rax, rax
jne 0x140024aba
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14002501a
lea r8, [rbp + 0xac0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
test eax, eax
je 0x140024af7
mov rax, qword [rbp + 0xad8]
mov qword [rbp + 0x20], rax
mov eax, dword [rbp + 0xac4]
mov dword [rbp - 0x68], eax
mov eax, dword [rbp + 0xac8]
mov dword [rbp - 0x80], eax
mov rcx, rdi
mov rax, qword [0x14005b010]
call qword [case.0x140037fef.0]
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x140024b24
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
jmp 0x14002501a
mov eax, dword [rbp - 8]
sub eax, dword [rbp + 0x28]
mov dword [rbp - 8], eax
mov edi, dword [rbp - 0x28]
sub edi, dword [rbp + 0x6e0]
mov qword [rbp + 0x480], r14
mov dword [rbp - 0x38], r14d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd98], xmm0
xor edx, edx
mov qword [rbp + 0xda8], rdx
mov dword [rbp + 0xdb0], edx
mov dword [rbp + 0xd88], 0x28
mov dword [rbp + 0xd8c], edi
neg eax
mov dword [rbp + 0xd90], eax
mov eax, 1
mov word [rbp + 0xd94], ax
mov eax, 0x20
mov word [rbp + 0xd96], ax
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x480]
xor r8d, r8d
lea rdx, [rbp + 0xd88]
mov rax, qword [0x14005b018]
call qword [case.0x140037fef.0]
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x140024bee
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r14d, eax
test eax, eax
jle 0x140024bd9
movzx r14d, ax
or r14d, 0x80070000
mov rdi, qword [rbp - 0x78]
test r14d, r14d
js 0x140024f3b
mov r14d, r15d
jmp 0x140024f3b
lea r8, [rbp + 0xb30]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x14005b068]
call qword [case.0x140037fef.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0xb48]
mov qword [rbp - 0x30], rcx
mov dword [rbp + 0xc40], edi
mov eax, dword [rbp - 8]
mov dword [rbp + 0xc44], eax
mov rdx, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
mov rdx, qword [rbp + 0x18]
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov qword [rbp + 0x18], rax
xor ecx, ecx
mov rax, qword [0x14005b070]
call qword [case.0x140037fef.0]
mov r8, rax
lea rdx, [rbp + 0xc38]
mov rcx, rdi
mov rax, qword [0x14005b0e8]
call qword [case.0x140037fef.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x60]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xc38]
mov r8d, 0xffffffff
mov rdx, qword [rbp]
mov rcx, rdi
mov rax, qword [0x14005b0d8]
call qword [case.0x140037fef.0]
cmp dword [rbp - 0x58], 1
jne 0x140024cef
cmp dword [rbp - 0x70], r14d
je 0x140024ce6
mov ecx, 8
mov rax, qword [0x14005b118]
call qword [case.0x140037fef.0]
jmp 0x140024cf4
mov dword [rbp - 0x70], 0xffffff
jmp 0x140024cfa
mov eax, 0xffa8a8a8
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x10], eax
mov eax, dword [rbp + 0x6e0]
mov edx, eax
neg edx
test eax, eax
mov rcx, r14
cmovns edx, ecx
mov r9d, ecx
cmovns r9d, eax
mov eax, dword [rbp + 0x28]
mov r8d, eax
neg r8d
test eax, eax
cmovns r8d, ecx
mov r11d, ecx
cmovns r11d, eax
mov ecx, dword [rbp + 0xc40]
sub ecx, edx
mov eax, dword [rbp - 0x68]
sub eax, r9d
cmp ecx, eax
cmovge ecx, eax
mov dword [rbp - 8], ecx
mov r10d, dword [rbp + 0xc44]
sub r10d, r8d
mov eax, dword [rbp - 0x80]
sub eax, r11d
cmp r10d, eax
cmovge r10d, eax
test ecx, ecx
jle 0x140024f0e
test r10d, r10d
jle 0x140024f0e
movsxd rbx, dword [rbp + 0xc40]
mov eax, ebx
imul eax, r8d
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
mov rax, qword [rbp - 0x30]
lea rdi, [rax + rcx*4]
mov qword [rbp], rdi
movsxd rdx, dword [rbp - 0x68]
mov eax, edx
imul eax, r11d
movsxd rcx, eax
movsxd rax, r9d
add rcx, rax
mov rax, qword [rbp + 0x20]
lea rax, [rax + rcx*4]
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x68], r14d
mov rcx, rbx
shl rcx, 2
mov qword [rbp - 0x30], rcx
mov rcx, rdx
shl rcx, 2
mov ebx, dword [rbp - 8]
mov rsi, qword [rbp - 0x30]
mov r13, rcx
mov r12d, dword [rbp - 0x10]
mov r8d, r14d
mov dword [rbp - 0x80], r14d
lea r9, [rdi + 2]
mov r11, rax
sub r11, rdi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140024eb0
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r12b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x6f]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x6e]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
mov r8d, dword [rbp - 0x80]
add r9, 4
inc r8d
mov dword [rbp - 0x80], r8d
cmp r8d, ebx
jl 0x140024ddd
mov rdi, qword [rbp]
add rdi, rsi
mov qword [rbp], rdi
mov rax, qword [rbp + 0x20]
add rax, r13
mov qword [rbp + 0x20], rax
mov ecx, dword [rbp - 0x68]
inc ecx
mov dword [rbp - 0x68], ecx
cmp ecx, r10d
jl 0x140024dcc
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, r14d
mov r13d, dword [rbp - 0x20]
mov r14d, dword [rbp - 0x38]
mov rdi, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x40]
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x140024f3b
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14005b078]
call qword [case.0x140037fef.0]
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x140037fef.0]
test r14d, r14d
js 0x140025013
xor r14d, r14d
mov rdi, qword [rbp + 8]
cmp dword [rbp - 0x58], 1
jne 0x140024fa5
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x78]
mov r8d, dword [rbp + 0xbe0]
mov edx, dword [rbp + 0xbdc]
mov rcx, qword [rbp - 0x18]
mov rax, qword [section..data]
call qword [case.0x140037fef.0]
jmp 0x140024ff1
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x50], ecx
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], ecx
mov r9d, eax
mov r8d, dword [rbp + 0x684]
mov edx, dword [rbp + 0x680]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b040]
call qword [case.0x140037fef.0]
mov edx, dword [rbp - 0x50]
mov rcx, qword [rbp - 0x18]
mov rax, qword [0x14005b080]
call qword [case.0x140037fef.0]
jmp 0x14002501a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
xor r14d, r14d
mov rdi, qword [rbp + 8]
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x140025033
mov rcx, rax
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
test rdi, rdi
je 0x140025048
mov rcx, rdi
mov rax, qword [0x14005b030]
call qword [case.0x140037fef.0]
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x140025066
mov rcx, rax
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
jmp 0x140025066
xor r14d, r14d
mov rax, qword [rbp + 0xba8]
test rax, rax
je 0x1400250c5
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x140025079
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0xba8]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xba8]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xba8], r14
mov rax, qword [rbp + 0xbb0]
test rax, rax
je 0x140025124
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x1400250d8
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0xbb0]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xbb0]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xbb0], r14
mov rdi, qword [rbp + 0xbb8]
test rdi, rdi
je 0x14002517c
mov rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rdi + rcx*2], 0
jne 0x140025137
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0xbb8]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0xbb8], r14
mov rcx, qword [rbp + 0xbc0]
test rcx, rcx
je 0x14002519c
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov qword [rbp + 0xbc0], r14
mov rcx, qword [rbp + 0xbc8]
test rcx, rcx
je 0x1400251bc
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov qword [rbp + 0xbc8], r14
mov rcx, qword [rbp + 0xbd0]
test rcx, rcx
je 0x1400251dc
mov rax, qword [0x14005b038]
call qword [case.0x140037fef.0]
mov qword [rbp + 0xbd0], r14
mov edi, 1
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x1400251e1
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x1400254c7
sub eax, edi
mov dword [0x14005bea8], eax
jne 0x1400254c7
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14002522a
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025216
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
lea edi, [r14 + 1]
mov eax, r14d
xchg dword [0x14005c480], eax
mov eax, dword [0x14005bd08]
mov dword [rbp - 0x70], eax
mov rax, qword [0x14005b098]
call qword [case.0x140037fef.0]
sub eax, dword [0x14005bea0]
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1628], xmm0
movups xmmword [rbp + 0x1638], xmm0
movups xmmword [rbp + 0x1648], xmm0
mov qword [rbp + 0x1658], rax
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x140025511
mov eax, dword [0x14005bea8]
test eax, eax
jne 0x140025db4
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x80], r14d
mov dword [rbp - 0x38], r14d
mov qword [rbp + 0x488], r14
mov ecx, 0x338
call fcn.140009ce0
mov r14, rax
mov qword [rbp], rax
test rax, rax
je 0x140025aac
xor eax, eax
mov esi, eax
mov r12d, 0xffffffff
mov r11d, eax
mov r10d, eax
lea rbx, [r14 + 7]
lea r13, [0x14004d862]
lea r14d, [rax + 0x67]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea r13, [r13 + 8]
mov edi, r10d
xor edi, r11d
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
mov ecx, edi
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
imul ecx, edi, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r11d, [r10 - 0x7f1]
xor r11d, ecx
xor r11d, 0xab69605e
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r11d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r11d, ecx
mov edx, r11d
ror edx, 9
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
xor r10d, r11d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
mov ecx, r11d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
mov ecx, r11d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor r10d, ecx
xor r11d, r12d
mov byte [rbx - 4], r10b
ror r10d, 8
mov byte [rbx], r11b
ror r11d, 8
mov byte [rbx - 5], r10b
ror r10d, 8
mov byte [rbx - 1], r11b
ror r11d, 8
mov byte [rbx - 6], r10b
ror r10d, 8
mov byte [rbx - 2], r11b
ror r11d, 8
mov byte [rbx - 7], r10b
mov byte [rbx - 3], r11b
ror r10d, 8
ror r11d, 8
mov esi, r9d
mov r12d, r8d
lea rbx, [rbx + 8]
sub r14, 1
jne 0x140025577
xor eax, eax
xorps xmm2, xmm2
xorps xmm1, xmm1
movabs rbx, 0xc81ecb17b1b54a58
movabs rsi, 0x7f1137fab69605e
mov r12d, eax
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp]
movdqu xmm0, xmmword [r14 + rax]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [r14 + rax + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140025887
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x140025903
xor cl, byte [rax + r14]
inc rax
cmp rax, 0x338
jb 0x1400258f4
movzx eax, cl
cmp rax, qword [0x14004db98]
jne 0x140025a8c
mov qword [rbp + 0x488], r14
mov qword [rbp + 0x490], 0x338
mov byte [r14 + 0x337], r12b
xor edx, edx
lea r8d, [rdx + 0x60]
lea rdi, [0x14005c0a0]
mov rcx, rdi
call sub.msvcrt.dll_memset
cmp byte [r14], r12b
jne 0x140025955
mov edi, dword [rbp - 0x80]
jmp 0x140025ab1
lea rdi, [0x14005c0a0]
mov rdx, r14
mov rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp word [r14 + rax*2], r12w
jne 0x14002595f
lea r14, [r14 + rax*2]
mov eax, dword [rbp - 0x38]
lea rcx, [rax + rax*2]
lea r8, [rdi + rcx*8]
mov qword [rbp], r8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140025aac
xor edx, edx
mov edi, edx
mov r8, qword [rbp]
mov rax, qword [r8]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x1400259af
mov edi, 0xc000007b
jmp 0x140025a13
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x1400259c2
mov edi, 0xc000007b
jmp 0x140025a13
add rcx, qword [r8]
cmp rcx, qword [r8]
jae 0x1400259d1
mov edi, 0xc000007b
jmp 0x140025a13
cmp dword [rcx], 0x4550
je 0x1400259e0
mov edi, 0xc000007b
jmp 0x140025a13
movzx eax, word [rcx + 0x18]
mov r9d, 0x10b
sub ax, r9w
mov r9d, 0xfeff
test r9w, ax
je 0x140025a01
mov edi, 0xc000000d
jmp 0x140025a13
mov rax, qword [rcx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r14 + 2]
mov dword [rbp - 0x80], eax
add r14, 6
mov ecx, edx
mov dword [rbp - 8], edx
test eax, eax
je 0x140025a7e
mov rdx, r14
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], r12b
jne 0x140025a31
inc r14
add r14, rax
test edi, edi
js 0x140025a71
mov rcx, qword [r8]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140025ab1
mov ecx, dword [rbp - 0x68]
lea rdx, [0x140000000]
mov qword [rdx + rcx*8 + 0x5b000], rax
mov r8, qword [rbp]
mov ecx, dword [rbp - 8]
inc dword [rbp - 0x68]
inc ecx
mov dword [rbp - 8], ecx
cmp ecx, dword [rbp - 0x80]
jb 0x140025a27
inc dword [rbp - 0x38]
cmp byte [r14], r12b
jne 0x14002594e
jmp 0x140025ab1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, 0xc000007a
cmp qword [rbp + 0x488], 0
je 0x140025adf
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 0x488]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
jns 0x140025da7
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025b08
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025af4
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
lea edi, [r14 + 1]
jmp 0x140025dbc
mov eax, dword [0x14005bea8]
xor r14d, r14d
lea edi, [r14 + 1]
inc eax
mov dword [0x14005bea8], eax
mov eax, r14d
xchg dword [0x14005c480], eax
mov rcx, qword [rbp + 0x18]
mov dword [rbp + 0x1628], ecx
mov dword [rbp + 0x1620], edi
mov dword [rbp + 0x1638], 0x9966f291
mov dword [rbp + 0x1630], edi
mov dword [rbp + 0x1648], edi
mov dword [rbp + 0x1640], edi
mov eax, dword [rbp - 0x70]
mov dword [rbp + 0x1658], eax
mov dword [rbp + 0x1650], edi
lea r9, [rbp + 0x1620]
mov edx, 0x2021
xor ecx, ecx
lea r8d, [rcx + 4]
mov rax, qword [0x14005b0d0]
call qword [case.0x140037fef.0]
xor eax, eax
lock cmpxchg dword [0x14005c480], edi
jne 0x140025e1f
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x140026102
sub eax, 1
mov dword [0x14005bea8], eax
jne 0x140026102
lea rdi, [0x14005c0a0]
mov r14d, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025e69
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub r14, 1
jne 0x140025e55
xor edx, edx
lea r8d, [r14 + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
mov eax, r14d
xchg dword [0x14005c480], eax
mov rdx, qword [rbp - 0x18]
xor ecx, ecx
mov rax, qword [0x14005b160]
call qword [case.0x140037fef.0]
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x30], rax
lea rcx, [rbp + 0x3e0]
call fcn.1400469e4
cmp dword [rbp + 0x5c], 0
je 0x14002652e
mov qword [rbp + 0x18], r14
mov qword [rbp], r14
mov qword [rbp + 0x6f8], r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x6c0], xmm0
lea rax, [0x14005b4d0]
mov qword [rbp + 0x498], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x140026457
mov rcx, qword [rbp + 0x498]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rax + 0x90], xmm1
mov qword [rbp + 0x18], rax
lea rax, [0x14005b410]
mov qword [rbp + 0x4a0], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140026457
mov rcx, qword [rbp + 0x4a0]
mov rdx, qword [rcx]
mov qword [rax], rdx
mov qword [rbp], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x4a8], rax
xor eax, eax
mov dword [rbp + 0x174], eax
lea r8, [rbp + 0x178]
mov edx, 4
mov ecx, edx
call fcn.14000d628
test eax, eax
js 0x140026457
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x178]
xor ecx, ecx
call fcn.14000d628
or eax, 0x10000000
jl 0x140026457
lea r8, [rbp + 0x17c]
mov edx, 0xa0
mov ecx, 4
call fcn.14000d628
test eax, eax
js 0x140026457
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x17c]
mov ecx, dword [rbp + 0x174]
call fcn.14000d628
or eax, 0x10000000
jl 0x140026457
lea r8, [rbp + 0x180]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
test eax, eax
js 0x140026457
lea r8, [rbp + 0x174]
mov edx, dword [rbp + 0x180]
mov ecx, dword [rbp + 0x174]
call fcn.14000d628
or eax, 0x10000000
jl 0x140026457
lea r8, [rbp + 0x184]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
test eax, eax
js 0x140026457
mov edx, dword [rbp + 0x184]
mov dword [rbp + 0x188], edx
lea r8, [rbp + 0x174]
mov ecx, dword [rbp + 0x174]
call fcn.14000d628
or eax, 0x10000000
jl 0x140026457
mov eax, dword [rbp + 0x174]
mov dword [rbp + 0x6f4], eax
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x140026457
mov qword [rbp + 0x6f8], rax
xor r9d, r9d
mov dword [rbp + 0x6f0], r9d
mov dword [rbp + 0x190], 4
lea r8, [rbp + 0x638]
lea edx, [r9 + 4]
mov rcx, rax
call fcn.14000d648
test eax, eax
js 0x140026457
mov ecx, dword [rbp + 0x6f4]
add rcx, rdi
lea rax, [rdi + 8]
cmp rax, rcx
ja 0x140026457
mov dword [rdi], 4
mov ecx, dword [rbp + 0x190]
mov rax, qword [rbp + 0x638]
mov dword [rax], ecx
mov r10d, dword [rbp + 0x6f0]
inc r10d
mov dword [rbp + 0x6f0], r10d
cmp qword [rbp + 0x6f8], r9
jne 0x140026553
lea r8, [rbp + 0x198]
mov edx, 0xa0
lea ecx, [r9 + 4]
call fcn.14000d628
test eax, eax
js 0x140026457
mov edx, dword [rbp + 0x198]
mov dword [rbp + 0x19c], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d628
test eax, eax
jns 0x14002665f
xor r14d, r14d
mov dword [rbp + 0x6f4], r14d
mov dword [rbp + 0x6f0], r14d
mov rdi, qword [rbp + 0x6f8]
test rdi, rdi
je 0x14002649b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x6f8], r14
mov dword [rbp + 0x6c4], r14d
mov dword [rbp + 0x6c0], r14d
mov rdi, qword [rbp + 0x6c8]
test rdi, rdi
je 0x1400264dc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x6c8], r14
mov rdi, qword [rbp + 0x18]
test rdi, rdi
je 0x140026505
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp]
test rdi, rdi
je 0x14002652e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov eax, dword [rbp + 0x58]
mov dword [rbp + 0x210], eax
mov edi, dword [rbp + 0x54]
mov qword [rbp + 0x40], r14
mov rax, qword [rbp - 0x30]
mov qword [rbp + 0x248], rax
mov ebx, 1
jmp 0x140028a69
mov rdi, qword [rbp + 0x6f8]
mov qword [rbp + 0x4b0], rdi
test r10d, r10d
je 0x1400265b5
lea r8, [rbp + 0x1a0]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14000d628
test eax, eax
js 0x140026457
mov eax, dword [rbp + 0x1a0]
mov dword [rbp + 0x19c], eax
mov edx, eax
lea r8, [rbp + 0x4b0]
mov rcx, rdi
call fcn.14000d648
test eax, eax
js 0x140026457
inc r9d
mov rdi, qword [rbp + 0x4b0]
cmp r9d, r10d
jb 0x140026566
lea r8, [rbp + 0x6b8]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
test eax, eax
js 0x140026457
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [rdi + 0xa4]
cmp rax, rcx
ja 0x140026457
mov dword [rdi], 0xa0
mov rax, qword [rbp + 0x6b8]
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov edi, dword [rbp + 0x6f0]
inc edi
mov dword [rbp + 0x6f0], edi
cmp qword [rbp + 0x6f8], 0
jne 0x1400266c9
lea r8, [rbp + 0x1a4]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
test eax, eax
js 0x140026457
mov edx, dword [rbp + 0x1a4]
mov dword [rbp + 0x1a8], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d628
test eax, eax
js 0x140026457
mov edi, dword [rbp + 0x6f0]
inc edi
xor r14d, r14d
jmp 0x140026787
mov r9, qword [rbp + 0x6f8]
mov qword [rbp + 0x4b8], r9
xor r14d, r14d
mov r10d, r14d
test edi, edi
je 0x140026731
lea r8, [rbp + 0x1ac]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
test eax, eax
js 0x14002645a
mov eax, dword [rbp + 0x1ac]
mov dword [rbp + 0x1a8], eax
mov edx, eax
lea r8, [rbp + 0x4b8]
mov rcx, r9
call fcn.14000d648
test eax, eax
js 0x14002645a
inc r10d
mov r9, qword [rbp + 0x4b8]
cmp r10d, edi
jb 0x1400266e1
lea r8, [rbp + 0x628]
mov edx, 4
mov rcx, r9
call fcn.14000d648
test eax, eax
js 0x14002645a
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x14002645a
mov dword [r9], 8
mov rcx, qword [rbp + 0x20]
mov rcx, qword [rcx]
mov rax, qword [rbp + 0x628]
mov qword [rax], rcx
mov edi, dword [rbp + 0x6f0]
inc edi
mov dword [rbp + 0x6f0], edi
mov rax, qword [rbp + 0x4a8]
mov qword [rbp + 0x4c0], rax
cmp qword [rbp + 0x6f8], 0
jne 0x1400267ec
lea r8, [rbp + 0x1b0]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14000d628
test eax, eax
js 0x14002645a
mov edx, dword [rbp + 0x1b0]
mov dword [rbp + 0x1b4], edx
lea r8, [rbp + 0x6f4]
mov ecx, dword [rbp + 0x6f4]
call fcn.14000d628
test eax, eax
jns 0x14002689f
jmp 0x14002645a
mov r9, qword [rbp + 0x6f8]
mov qword [rbp + 0x4c8], r9
mov r10d, r14d
test edi, edi
je 0x140026851
lea r8, [rbp + 0x1b8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
test eax, eax
js 0x14002645a
mov eax, dword [rbp + 0x1b8]
mov dword [rbp + 0x1b4], eax
mov edx, eax
lea r8, [rbp + 0x4c8]
mov rcx, r9
call fcn.14000d648
test eax, eax
js 0x14002645a
inc r10d
mov r9, qword [rbp + 0x4c8]
cmp r10d, edi
jb 0x140026801
lea r8, [rbp + 0x5d8]
mov edx, 4
mov rcx, r9
call fcn.14000d648
test eax, eax
js 0x14002645a
mov ecx, dword [rbp + 0x6f4]
add rcx, qword [rbp + 0x6f8]
lea rax, [r9 + 0xc]
cmp rax, rcx
ja 0x14002645a
mov dword [r9], 8
mov rcx, qword [rbp + 0x4c0]
mov rax, qword [rbp + 0x5d8]
mov qword [rax], rcx
inc dword [rbp + 0x6f0]
lea r8, [rbp + 0x1bc]
mov edx, 4
mov ecx, edx
call fcn.14000d628
test eax, eax
js 0x14002645a
mov edi, dword [rbp + 0x1bc]
mov dword [rbp + 0x1c0], edi
lea r8, [rbp + 0x1c4]
mov edx, 8
call fcn.14000d628
test eax, eax
js 0x14002645a
mov edx, dword [rbp + 0x1c4]
mov dword [rbp + 0x1c8], edx
lea r8, [rbp + 0x1c0]
mov ecx, edi
call fcn.14000d628
test eax, eax
js 0x14002645a
mov r10d, dword [rbp + 0x1c0]
mov dword [rbp - 0x70], r10d
mov qword [rbp + 0x20], r14
mov r9d, r14d
mov dword [rbp - 0x68], r14d
mov qword [rbp + 0x4d0], r14
mov qword [rbp - 0x18], r14
mov dword [rbp - 0x80], r14d
mov r11, r14
mov qword [rbp + 8], r14
mov dword [rbp + 0x1cc], r14d
mov qword [rbp + 0x30], r14
xor eax, eax
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x1d0], eax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x4d8], rax
mov dword [rbp + 0x1d4], 8
lea r8, [rbp + 0x1d4]
mov edx, dword [rbp + 0x6f4]
mov ecx, 8
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x140026a95
mov eax, dword [rbp + 0x1d4]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x1400269a0
mov edi, 0xc0000095
jmp 0x140026a95
mov dword [rbp + 0x1d4], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
jne 0x1400269dd
mov edi, 0xc0000017
jmp 0x140026a86
mov qword [rbp + 0x4e0], r14
mov eax, dword [rbp + 0x6f0]
mov dword [r14], eax
lea r8, [rbp + 0x4e0]
mov edx, 4
mov rcx, r14
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140026a66
mov rcx, qword [rbp + 0x4e0]
mov eax, dword [rbp + 0x6f4]
mov dword [rcx], eax
lea r8, [rbp + 0x4e0]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140026a66
mov ecx, dword [rbp + 0x1d4]
mov rax, qword [rbp + 0x4d8]
mov qword [rcx + r14 - 8], rax
mov r8d, dword [rbp + 0x6f4]
mov rdx, qword [rbp + 0x6f8]
mov rcx, qword [rbp + 0x4e0]
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0x20], r14
mov r9d, dword [rbp + 0x1d4]
jmp 0x140026a8a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r9d, dword [rbp - 0x68]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
or edi, 0x10000000
jl 0x1400286d6
xor eax, eax
mov qword [rbp + 0x4e8], rax
mov qword [rbp - 0x78], rax
mov rdi, qword [rbp + 0x20]
test rdi, rdi
jne 0x140026ac4
mov edi, 0xc000000d
xor r9d, r9d
jmp 0x14002733b
mov r14d, r9d
mov qword [rbp - 0x40], r14
test r9d, r9d
je 0x140027225
lea rcx, [r14 + 8]
call fcn.140009ce0
mov rdx, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14002721d
xor al, al
mov dword [rbp - 0x68], eax
xor r8d, r8d
mov ecx, r8d
test r14, r14
je 0x140026b8e
cmp r14, 0x20
jb 0x140026b7b
mov edx, r14d
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
movdqu xmm0, xmmword [rcx + rdi]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + rdi + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x140026b14
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
mov dword [rbp - 0x68], eax
mov rdx, qword [rbp + 0x40]
cmp rcx, r14
jae 0x140026b8e
xor al, byte [rcx + rdi]
inc rcx
cmp rcx, r14
jb 0x140026b80
mov dword [rbp - 0x68], eax
mov qword [rbp + 0xc20], rbx
mov r11, rdx
mov r10d, r8d
mov r9d, 0xffffffff
mov dword [rbp - 0x38], r8d
mov dword [rbp - 8], r8d
mov rax, r14
and eax, 7
je 0x140026c90
mov dword [rbp - 0x38], r8d
mov ecx, r8d
mov dword [rbp - 8], ecx
mov r9d, r8d
test eax, eax
je 0x140026c06
mov r8d, 0x38
movzx edx, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x140026be8
lea ecx, [r8 - 0x20]
shl edx, cl
mov ecx, dword [rbp - 8]
or ecx, edx
mov dword [rbp - 8], ecx
jmp 0x140026bf3
mov ecx, r8d
shl edx, cl
or r10d, edx
mov ecx, dword [rbp - 8]
inc r9d
sub r8d, 8
cmp r9d, eax
jl 0x140026bcc
mov dword [rbp - 0x38], r10d
xor r8d, r8d
mov r10d, ecx
xor r10d, 0xb17a307a
mov r9d, dword [rbp - 0x38]
xor r9d, 0x42f6b18d
mov ecx, r10d
mov edx, r9d
test eax, eax
je 0x140026c5b
lea rsi, [r11 + 1]
mov qword [rbp + 0x28], rsi
cmp r8d, 4
jge 0x140026c3a
rol ecx, 8
mov esi, ecx
jmp 0x140026c3f
rol edx, 8
mov esi, edx
mov byte [r11], sil
inc r8d
mov rsi, qword [rbp + 0x28]
mov r11, rsi
cmp r8d, eax
jl 0x140026c25
movabs rsi, 0x7f1137fab69605e
cmp eax, 4
jbe 0x140026c72
mov ecx, 8
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x140026c8c
xor ecx, ecx
mov r9d, ecx
cmp eax, 4
jae 0x140026c8c
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rdx, qword [rbp + 0x40]
mov rax, r14
shr rax, 3
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140026fa8
mov edx, dword [rbp + 0xc24]
mov esi, edx
shr esi, 0x10
movzx eax, bx
mov dword [rbp + 0x28], eax
movzx eax, bx
mov dword [rbp - 0x58], eax
movzx eax, word [rbp + 0xc22]
mov dword [rbp - 0x50], eax
movzx eax, dx
lea r15, [r11 + 7]
lea rcx, [rdi + 2]
mov r11, qword [rbp - 0x10]
mov r12d, dword [rbp - 0x38]
mov r14d, dword [rbp - 8]
mov r13d, eax
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r9d, edi
add rcx, 8
mov qword [rbp - 0x38], rcx
mov eax, r9d
sub eax, dword [rbp - 0x58]
xor eax, r8d
xor r10d, eax
xor r10d, edx
mov ecx, r10d
xor ecx, edx
ror ecx, 0xf
mov eax, r10d
ror eax, 7
imul ecx, dword [rbp - 0x50]
add eax, ecx
xor r9d, eax
lea ecx, [r9 + rbx]
ror ecx, 9
mov eax, r9d
ror eax, 0xa
imul ecx, r13d
sub ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, r13d
rol ecx, 4
mov eax, r10d
rol eax, 5
imul ecx, esi
add eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, ebx
mov eax, edx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, dword [rbp + 0x28]
movzx eax, word [rbp + 0xc22]
imul ecx, eax
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
xor eax, r13d
imul eax, dword [rbp + 0x28]
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, esi
imul eax, r13d
xor r9d, eax
mov eax, r9d
sub eax, dword [rbp - 0x58]
sub eax, edx
xor r10d, eax
mov ecx, r10d
ror ecx, 0xa
mov eax, r10d
xor eax, esi
imul eax, dword [rbp - 0x50]
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
xor ecx, dword [rbp + 0x28]
rol ecx, 6
mov eax, r9d
ror eax, 3
imul ecx, r13d
xor eax, ecx
xor r10d, eax
mov eax, r10d
ror eax, 0xf
sub eax, esi
imul eax, dword [rbp + 0x28]
xor r9d, eax
mov ecx, r9d
xor ecx, esi
imul ecx, dword [rbp - 0x58]
mov eax, r9d
shr eax, 1
xor ecx, eax
xor r10d, ecx
mov ecx, r9d
sub ecx, r13d
rol ecx, 3
imul ecx, dword [rbp - 0x58]
mov eax, r9d
shr eax, 0xf
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, r13d
movzx eax, word [rbp + 0xc22]
imul ecx, eax
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, ebx
sub ecx, r9d
ror ecx, 9
mov eax, r9d
ror eax, 0xb
imul ecx, r13d
xor eax, ecx
xor r10d, eax
mov eax, r10d
sub eax, ebx
sub eax, esi
xor r9d, eax
mov ecx, r9d
ror ecx, 7
mov eax, r9d
xor eax, dword [rbp - 0x50]
imul eax, dword [rbp - 0x58]
sub eax, ecx
xor r10d, eax
mov ecx, r10d
xor ecx, esi
rol ecx, 4
mov eax, r10d
ror eax, 0x10
imul ecx, dword [rbp - 0x50]
sub ecx, eax
xor r9d, ecx
mov ecx, ebx
sub ecx, r9d
ror ecx, 0xa
mov eax, r9d
ror eax, 4
imul ecx, r13d
add eax, ecx
xor r10d, eax
mov ecx, r10d
sub ecx, ebx
ror ecx, 4
mov eax, r10d
ror eax, 9
imul ecx, esi
xor eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, edx
rol ecx, 8
mov eax, r9d
rol eax, 2
imul ecx, dword [rbp - 0x58]
sub ecx, eax
xor r10d, ecx
sub edx, r10d
ror edx, 0xb
mov ecx, r10d
ror ecx, 0xc
movzx eax, word [rbp + 0xc22]
imul eax, edx
sub eax, ecx
xor r9d, eax
mov ecx, r9d
movzx eax, word [rbp + 0xc22]
xor ecx, eax
imul ecx, r13d
mov eax, r9d
shr eax, 8
xor ecx, eax
xor r10d, ecx
xor r9d, r10d
mov edx, dword [rbp + 0xc24]
xor r9d, edx
xor r9d, ebx
xor r10d, r14d
xor r9d, r12d
mov byte [r15 - 4], r10b
ror r10d, 8
mov byte [r15], r9b
ror r9d, 8
mov byte [r15 - 5], r10b
ror r10d, 8
mov byte [r15 - 1], r9b
ror r9d, 8
mov byte [r15 - 6], r10b
ror r10d, 8
mov byte [r15 - 2], r9b
ror r9d, 8
mov byte [r15 - 7], r10b
mov byte [r15 - 3], r9b
ror r10d, 8
ror r9d, 8
mov r14d, r8d
mov r12d, edi
lea r15, [r15 + 8]
sub r11, 1
mov rcx, qword [rbp - 0x38]
jne 0x140026cdf
movabs rsi, 0x7f1137fab69605e
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r13d, dword [rbp - 0x20]
mov r14, qword [rbp - 0x40]
mov rdx, qword [rbp + 0x40]
movzx eax, byte [rbp - 0x68]
mov qword [rdx + r14], rax
mov qword [rbp + 0x4e8], rdx
lea rdi, [r14 + 8]
mov qword [rbp + 0x4f8], rdi
lea rax, [0x14005b4c0]
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], 8
lea r14, [0x14005b420]
mov qword [rbp + 0x510], r14
mov qword [rbp + 0x518], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
je 0x1400271fa
mov edi, edi
mov dword [rax], edi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002714b
mov qword [rbx + 8], rax
mov r8d, edi
mov rdx, qword [rbp + 0x40]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rbx + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002714b
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rbx + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002714b
mov qword [rbx + 0x28], rax
xor edx, edx
mov edi, edx
mov rcx, qword [0x14005b4c0]
mov qword [rax], rcx
jmp 0x140027205
mov rdi, qword [rbx + 8]
test rdi, rdi
je 0x14002717d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r14d, r14d
mov qword [rbx + 8], r14
jmp 0x140027180
xor r14d, r14d
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x1400271ad
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 0x18], r14
mov rdi, qword [rbx + 0x28]
test rdi, rdi
je 0x1400271da
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbx + 0x28], r14
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov rbx, qword [rbp - 0x78]
mov edi, 0xc0000017
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
test edi, edi
js 0x14002722e
mov qword [rbp + 0x4d0], rbx
mov rbx, rdx
jmp 0x14002722e
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
mov edi, 0xc0000001
mov rbx, qword [rbp - 0x78]
mov r14, qword [rbp + 0x4e8]
test r14, r14
je 0x14002726e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor r9d, r9d
mov qword [rbp + 0x4e8], r9
mov r10d, dword [rbp - 0x70]
mov r11, qword [rbp + 8]
jmp 0x140027271
xor r9d, r9d
test rbx, rbx
je 0x140027337
mov r14, qword [rbx + 8]
test r14, r14
je 0x1400272a9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x1400272d8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x140027307
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
xor r9d, r9d
jmp 0x14002733b
mov r14, qword [rbp + 0x30]
or edi, 0x10000000
jl 0x1400286d6
mov rbx, qword [rbp + 0x4d0]
mov dword [rbp + 0x1d8], 4
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx]
mov ecx, 4
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400273f5
lea r8, [rbp + 0x1d8]
mov edx, ecx
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400273f5
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx + 0x10]
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400273f5
lea r8, [rbp + 0x1d8]
mov edx, 4
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400273f5
lea r8, [rbp + 0x1d8]
mov edx, dword [rbx + 0x20]
mov ecx, dword [rbp + 0x1d8]
call fcn.14000d628
mov edi, eax
mov eax, dword [rbp + 0x1dc]
test edi, edi
cmovns eax, dword [rbp + 0x1d8]
mov dword [rbp + 0x1dc], eax
jmp 0x1400273fb
mov eax, dword [rbp + 0x1dc]
test edi, edi
js 0x14002759b
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
jne 0x14002746d
mov edi, 0xc0000017
jmp 0x140027457
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
mov rcx, r14
xor r9d, r9d
jmp 0x14002759f
mov qword [rbp + 0x520], r14
mov eax, dword [rbx]
mov dword [r14], eax
lea r8, [rbp + 0x520]
mov edx, 4
mov rcx, r14
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov r8d, dword [rbx]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov eax, dword [rbx + 0x10]
mov rcx, qword [rbp + 0x520]
mov dword [rcx], eax
lea r8, [rbp + 0x520]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x10]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov eax, dword [rbx + 0x20]
mov rcx, qword [rbp + 0x520]
mov dword [rcx], eax
lea r8, [rbp + 0x520]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov r8d, dword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, qword [rbp + 0x520]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x20]
lea r8, [rbp + 0x520]
mov rcx, qword [rbp + 0x520]
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027437
mov rcx, r14
mov qword [rbp - 0x18], rcx
mov eax, dword [rbp + 0x1dc]
mov dword [rbp - 0x80], eax
mov r14, qword [rbp + 0x30]
mov r10d, dword [rbp - 0x70]
mov r11, r14
xor r9d, r9d
jmp 0x14002759f
mov rcx, qword [rbp - 0x18]
or edi, 0x10000000
jl 0x14002790c
mov qword [rbp + 0x528], r9
mov r11d, r9d
mov dword [rbp + 0x1e0], r9d
mov qword [rbp + 0x530], r9
mov ebx, r9d
mov dword [rbp + 0x1e4], ebx
mov dword [rbp + 0x1e8], 8
lea r8, [rbp + 0x1e8]
mov edx, r10d
mov ecx, 8
call fcn.14000d628
mov edi, eax
or edi, 0x10000000
jl 0x14002772f
mov eax, dword [rbp + 0x1e8]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x140027617
mov edi, 0xc0000095
mov r9d, dword [rbp + 0x1ec]
jmp 0x140027648
mov dword [rbp + 0x1f0], ecx
lea r8, [rbp + 0x1f0]
mov edx, 8
call fcn.14000d628
mov edi, eax
mov r9d, dword [rbp + 0x1ec]
test eax, eax
cmovns r9d, dword [rbp + 0x1f0]
mov dword [rbp + 0x1ec], r9d
test edi, edi
js 0x1400286d2
cmp qword [rbp + 0x6f8], 0
jne 0x140027664
mov edi, 0xc000000d
jmp 0x14002772f
cmp dword [rbp + 0x6f0], 1
ja 0x140027677
mov edi, 0xc000000d
jmp 0x14002772f
mov rcx, qword [rbp + 0x6f8]
mov qword [rbp + 0x538], rcx
xor eax, eax
mov r10d, eax
mov r14d, dword [rcx]
lea r8, [rbp + 0x538]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027717
mov edx, r14d
lea r8, [rbp + 0x538]
mov rcx, qword [rbp + 0x538]
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027717
inc r10d
mov rcx, qword [rbp + 0x538]
cmp r10d, 1
jb 0x14002768a
mov r10d, dword [rcx]
lea r8, [rbp + 0x538]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027717
mov r11d, r10d
mov dword [rbp + 0x1e0], r10d
mov rax, qword [rbp + 0x538]
test r10d, r10d
mov edx, 0
cmove rax, rdx
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x528], rax
jmp 0x140027719
xor edx, edx
test edi, edi
js 0x14002772b
cmp dword [rbp + 0x6f0], 2
ja 0x140027777
mov edi, 0xc000000d
mov r14, qword [rbp + 0x30]
test edi, edi
js 0x1400286d2
mov edi, dword [rbp + 0x1cc]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x1400278ee
mov edi, 0xd0000017
mov r11, qword [rbp + 8]
jmp 0x1400278fa
mov rcx, qword [rbp + 0x6f8]
mov qword [rbp + 0x540], rcx
mov r10d, edx
mov r14d, dword [rcx]
lea r8, [rbp + 0x540]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027812
mov edx, r14d
lea r8, [rbp + 0x540]
mov rcx, qword [rbp + 0x540]
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027812
inc r10d
mov rcx, qword [rbp + 0x540]
cmp r10d, 2
jb 0x140027788
mov r10d, dword [rcx]
lea r8, [rbp + 0x540]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140027812
mov ebx, r10d
mov dword [rbp + 0x1e4], ebx
mov rax, qword [rbp + 0x540]
test r10d, r10d
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x540], rax
mov qword [rbp + 0x530], rax
test edi, edi
js 0x14002772b
mov dword [rbp + 0x1f4], 4
lea r8, [rbp + 0x1f4]
mov edx, r9d
mov ecx, 4
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400278bd
lea r8, [rbp + 0x1f4]
mov edx, ecx
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400278bd
lea r8, [rbp + 0x1f4]
mov edx, r11d
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400278bd
lea r8, [rbp + 0x1f4]
mov edx, 4
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x1400278bd
lea r8, [rbp + 0x1f4]
mov edx, ebx
mov ecx, dword [rbp + 0x1f4]
call fcn.14000d628
mov edi, eax
mov eax, dword [rbp + 0x1f8]
test edi, edi
cmovns eax, dword [rbp + 0x1f4]
mov dword [rbp + 0x1f8], eax
jmp 0x1400278c3
mov eax, dword [rbp + 0x1f8]
test edi, edi
js 0x14002772b
mov r14, qword [rbp + 0x30]
cmp eax, 0x400000
jbe 0x1400278e3
mov edi, 0x8000ffff
mov r11, r14
jmp 0x1400286d6
mov dword [rbp + 0x1cc], eax
jmp 0x14002772f
mov r11, rax
mov qword [rbp + 8], rax
mov edi, 0x10000000
mov rcx, qword [rbp - 0x18]
test edi, edi
js 0x14002790c
test rcx, rcx
jne 0x140027915
mov edi, 0x80070057
mov rsi, qword [rbp + 0x10]
jmp 0x1400286de
test r11, r11
jne 0x140027928
mov edi, 0x80070057
mov rsi, qword [rbp + 0x10]
jmp 0x1400286de
mov qword [rbp + 0x720], rcx
mov eax, dword [rbp - 0x80]
mov dword [rbp + 0x730], eax
mov qword [rbp + 0x728], r11
mov eax, dword [rbp + 0x1cc]
mov dword [rbp + 0x734], eax
xor ebx, ebx
mov dword [rbp + 0x738], ebx
lea r8, [rbp + 0x548]
lea rdx, [0x14004d220]
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x1400279df
lea rdx, [0x14004de80]
mov rcx, qword [rbp + 0x548]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400279df
xor r9d, r9d
lea r8d, [rbx + 0x20]
lea rdx, [rbp + 0x720]
lea ecx, [r8 + 0x66]
call qword [case.0x140037fef.0]
mov edi, eax
or edi, 0x10000000
mov edx, dword [rbp + 0x1cc]
cmovge edx, dword [rbp + 0x734]
mov dword [rbp + 0x1cc], edx
cmp edi, 0xd0000023
jne 0x140027a07
mov edi, 0x8007007a
mov r11, qword [rbp + 8]
mov rsi, rbx
jmp 0x1400286da
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
test eax, eax
jle 0x1400279fa
movzx edi, ax
or edi, 0x80070000
mov edx, dword [rbp + 0x1cc]
test edi, edi
js 0x1400279c6
mov edi, r15d
test edi, edi
js 0x1400279d3
mov r11, qword [rbp + 8]
cmp edx, 4
jae 0x140027a20
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027e38
mov edi, dword [r11]
mov dword [rbp - 0x70], edi
lea rcx, [r11 + 4]
cmp rcx, r11
jb 0x140027e24
lea eax, [rdx - 4]
cmp eax, edi
jae 0x140027a46
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027e38
mov qword [rbp - 0x78], rdi
lea r9, [rdi + rcx]
mov qword [rbp - 0x40], r9
cmp r9, rcx
jb 0x140027e24
lea r8d, [rdi + 4]
cmp r8d, 4
jb 0x140027e24
mov eax, edx
sub eax, r8d
cmp eax, 4
jae 0x140027a7f
mov edi, 0xc000003e
xor edx, edx
jmp 0x140027e38
mov r14d, dword [r9]
lea rcx, [r9 + 4]
cmp rcx, r9
jb 0x140027e1d
lea r9d, [r8 + 4]
cmp r9d, r8d
jb 0x140027e1d
mov eax, edx
sub eax, r9d
cmp eax, r14d
jb 0x140027e2d
lea r8, [rcx + r14]
cmp r8, rcx
jb 0x140027e1d
lea r10d, [r9 + r14]
cmp r10d, r9d
jb 0x140027e1d
mov eax, edx
sub eax, r10d
cmp eax, 4
jb 0x140027e2d
mov ecx, dword [r8]
mov dword [rbp - 0x68], ecx
lea rax, [r8 + 4]
mov qword [rbp + 0x40], rax
cmp rax, r8
jb 0x140027e1d
lea r8d, [r10 + 4]
cmp r8d, r10d
jb 0x140027e1d
mov eax, edx
sub eax, r8d
cmp eax, ecx
jb 0x140027e2d
lea r9d, [r8 + rcx]
cmp r9d, r8d
jb 0x140027e1d
cmp edx, r9d
jne 0x140027e2d
lea eax, [r14 + rdi]
add ecx, eax
add rcx, 0xc
mov eax, edx
cmp rcx, rax
jne 0x140027e2d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rdi, rax
mov r11, qword [rbp + 8]
test rax, rax
jne 0x140027b6a
mov edi, 0xc0000017
xor edx, edx
jmp 0x140027d51
lea rax, [r11 + 4]
test rax, rax
je 0x140027bc5
mov eax, dword [rbp - 0x70]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x78]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140027c8b
mov qword [rdi + 8], rax
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp + 8]
add rdx, 4
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027bcd
xor edx, edx
mov dword [rdi], edx
mov qword [rdi + 8], rdx
mov rax, qword [rbp - 0x40]
add rax, 4
je 0x140027c26
mov dword [rdi + 0x10], r14d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x140027c8b
mov qword [rdi + 0x18], rax
mov r8, r14
mov rdx, qword [rbp - 0x40]
add rdx, 4
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027c2d
mov dword [rdi + 0x10], edx
mov qword [rdi + 0x18], rdx
mov r14, qword [rbp + 0x40]
test r14, r14
je 0x140027d45
mov eax, dword [rbp - 0x68]
mov dword [rdi + 0x20], eax
mov qword [rbp - 0x78], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x78]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x140027c8b
mov qword [rdi + 0x28], rax
mov r8, qword [rbp - 0x78]
mov rdx, r14
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027d4c
mov r14, qword [rdi + 8]
test r14, r14
je 0x140027cba
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 8], rax
mov r14, qword [rdi + 0x18]
test r14, r14
je 0x140027ce9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x18], rax
mov r14, qword [rdi + 0x28]
test r14, r14
je 0x140027d18
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rdi + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov edi, 0xc0000017
mov r11, qword [rbp + 8]
xor edx, edx
jmp 0x140027d51
mov dword [rdi + 0x20], edx
mov qword [rdi + 0x28], rdx
mov rbx, rdi
mov edi, edx
test edi, edi
js 0x140027d61
mov r14, rbx
mov qword [rbp + 0x30], rbx
jmp 0x140027e38
test rbx, rbx
je 0x140027e34
mov r14, qword [rbx + 8]
test r14, r14
je 0x140027d99
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov r14, qword [rbx + 0x18]
test r14, r14
je 0x140027dc8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov r14, qword [rbx + 0x28]
test r14, r14
je 0x140027df7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
jmp 0x140027e32
mov edi, 0xc0000095
jmp 0x140027e32
mov edi, 0xc0000095
xor edx, edx
jmp 0x140027e38
mov edi, 0xc000003e
xor edx, edx
mov r14, qword [rbp + 0x30]
or edi, 0x10000000
jl 0x1400286d6
mov rbx, rdx
mov qword [rbp + 0x550], rdx
test r14, r14
jne 0x140027e5d
mov edi, 0xd000000d
jmp 0x1400286d6
mov rdi, qword [r14 + 8]
mov qword [rbp - 0x78], rdi
test rdi, rdi
jne 0x140027e74
mov edi, 0xd000000d
jmp 0x1400286d6
mov eax, dword [r14]
test eax, eax
jne 0x140027e85
mov edi, 0xd000000d
jmp 0x1400286d6
lea rbx, [rax - 8]
mov qword [rbp - 0x40], rbx
mov rcx, rbx
call fcn.140009ce0
mov r14, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400283c2
xor cl, cl
mov dword [rbp - 0x70], ecx
mov qword [rbp + 0xc18], rsi
mov r8, rax
mov rdx, rbx
and edx, 7
je 0x14002838b
xor eax, eax
mov r10d, eax
mov dword [rbp - 0x68], eax
mov r11d, eax
mov dword [rbp - 0x80], eax
mov r9d, eax
test edx, edx
je 0x140027f12
lea esi, [rax + 0x38]
movzx eax, byte [rdi]
inc rdi
cmp r9d, 4
jge 0x140027eee
lea ecx, [rsi - 0x20]
shl eax, cl
or r11d, eax
jmp 0x140027ef5
mov ecx, esi
shl eax, cl
or r10d, eax
inc r9d
sub esi, 8
cmp r9d, edx
jl 0x140027ed8
mov dword [rbp - 0x80], r11d
mov dword [rbp - 0x68], r10d
movabs rsi, 0x7f1137fab69605e
mov r9d, r11d
xor r9d, 0x92f65a5
xor r10d, 0x699a899c
mov eax, r9d
mov ecx, r10d
xor r11d, r11d
test edx, edx
je 0x140027f66
lea rsi, [r8 + 1]
mov qword [rbp - 0x38], rsi
cmp r11d, 4
jge 0x140027f45
rol eax, 8
mov esi, eax
jmp 0x140027f4a
rol ecx, 8
mov esi, ecx
mov byte [r8], sil
inc r11d
mov rsi, qword [rbp - 0x38]
mov r8, rsi
cmp r11d, edx
jl 0x140027f30
movabs rsi, 0x7f1137fab69605e
cmp edx, 4
jbe 0x140028368
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov ecx, dword [rbp - 0x70]
xor edx, edx
mov rax, rbx
shr rax, 3
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400282a3
mov r11d, dword [rbp + 0xc1c]
mov eax, r11d
shr eax, 0x10
mov dword [rbp - 0x38], eax
movzx eax, r11w
mov dword [rbp - 8], eax
movzx eax, si
mov dword [rbp + 0x28], eax
movzx eax, word [rbp + 0xc1a]
mov dword [rbp - 0x58], eax
lea r13, [r8 + 7]
lea rcx, [rdi + 2]
mov r14d, dword [rbp - 0x38]
mov rbx, qword [rbp - 0x50]
mov r12d, dword [rbp - 0x68]
mov r15d, dword [rbp - 0x80]
movzx r8d, byte [rcx - 2]
shl r8d, 8
movzx eax, byte [rcx - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx]
or r8d, eax
shl r8d, 8
movzx eax, byte [rcx + 1]
or r8d, eax
movzx edi, byte [rcx + 2]
shl edi, 8
movzx eax, byte [rcx + 3]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 4]
or edi, eax
shl edi, 8
movzx eax, byte [rcx + 5]
or edi, eax
xor r9d, r8d
xor r10d, edi
add rcx, 8
mov qword [rbp - 0x68], rcx
xor r10d, r9d
xor r10d, r11d
xor r10d, esi
mov edx, r10d
mov eax, r10d
sub eax, esi
rol eax, 5
rol r10d, 0xa
imul eax, dword [rbp - 8]
add r10d, eax
xor r9d, r10d
lea ecx, [r9 + r11]
ror ecx, 9
mov eax, r9d
rol eax, 2
movzx r10d, word [rbp + 0xc1a]
imul ecx, r10d
sub ecx, eax
xor edx, ecx
mov ecx, edx
mov r10d, dword [rbp - 8]
sub ecx, r10d
imul ecx, dword [rbp + 0x28]
mov eax, edx
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, r9d
movzx eax, word [rbp + 0xc1a]
xor ecx, eax
rol ecx, 6
mov eax, r9d
rol eax, 2
imul ecx, r14d
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, esi
mov eax, r11d
sub eax, ecx
xor r9d, eax
mov ecx, r9d
ror ecx, 6
mov eax, r9d
xor eax, r10d
imul eax, dword [rbp - 0x58]
xor ecx, eax
xor edx, ecx
lea ecx, [rdx + r11]
ror ecx, 0xf
mov eax, edx
rol eax, 2
imul ecx, dword [rbp + 0x28]
add eax, ecx
xor r9d, eax
mov ecx, r9d
sub ecx, esi
ror ecx, 0xe
mov eax, r9d
rol eax, 8
imul ecx, r14d
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, esi
ror ecx, 0xc
mov eax, edx
ror eax, 0xa
imul ecx, r10d
xor eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, r14d
movzx eax, word [rbp + 0xc1a]
imul ecx, eax
mov eax, r9d
shr eax, 0xa
xor ecx, eax
xor edx, ecx
mov eax, edx
not eax
ror eax, 5
add eax, dword [rbp + 0x28]
imul eax, r14d
xor r9d, eax
mov r10d, r9d
sub r10d, r14d
xor r10d, edx
xor r10d, esi
mov ecx, r10d
xor ecx, r14d
rol ecx, 2
mov edx, dword [rbp - 8]
imul ecx, edx
mov eax, r10d
shr eax, 2
add ecx, eax
xor r9d, ecx
mov ecx, r9d
sub ecx, r11d
ror ecx, 6
mov eax, r9d
rol eax, 7
imul ecx, dword [rbp - 0x58]
add eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 9
mov eax, r10d
xor eax, edx
imul eax, dword [rbp + 0x28]
add ecx, eax
xor r9d, ecx
mov ecx, r9d
movzx eax, word [rbp + 0xc1a]
xor ecx, eax
rol ecx, 5
mov eax, r9d
rol eax, 7
imul ecx, r14d
add eax, ecx
xor r10d, eax
xor r9d, r10d
xor r9d, r11d
xor r9d, esi
mov eax, r9d
ror eax, 3
movzx ecx, word [rbp + 0xc1a]
sub eax, ecx
imul eax, edx
xor r10d, eax
mov ecx, r10d
sub ecx, r11d
ror ecx, 1
mov eax, r10d
ror eax, 6
imul ecx, dword [rbp + 0x28]
sub ecx, eax
xor r9d, ecx
lea ecx, [r9 + rsi]
rol ecx, 3
mov eax, r9d
rol eax, 0xe
imul ecx, r14d
add eax, ecx
xor r10d, eax
lea ecx, [r10 + rsi]
rol ecx, 0xf
mov eax, r10d
ror eax, 0xe
imul ecx, edx
sub ecx, eax
xor r9d, ecx
mov ecx, dword [rbp + 0x28]
xor ecx, r9d
movzx eax, word [rbp + 0xc1a]
imul ecx, eax
mov eax, r9d
shr eax, 3
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
xor ecx, r11d
rol ecx, 4
mov eax, r10d
rol eax, 2
imul ecx, dword [rbp + 0x28]
xor eax, ecx
xor eax, r15d
xor r9d, eax
xor r10d, r12d
mov byte [r13 - 4], r9b
ror r9d, 8
mov byte [r13], r10b
ror r10d, 8
mov byte [r13 - 5], r9b
ror r9d, 8
mov byte [r13 - 1], r10b
ror r10d, 8
mov byte [r13 - 6], r9b
ror r9d, 8
mov byte [r13 - 2], r10b
ror r10d, 8
mov byte [r13 - 7], r9b
mov byte [r13 - 3], r10b
ror r9d, 8
ror r10d, 8
mov r15d, r8d
mov r12d, edi
lea r13, [r13 + 8]
sub rbx, 1
mov rcx, qword [rbp - 0x68]
jne 0x140027fd7
mov r15d, 0x80004005
mov r12d, dword [rbp + 0x50]
mov r13d, dword [rbp - 0x20]
mov rbx, qword [rbp - 0x40]
mov r14, qword [rbp + 0x40]
mov ecx, dword [rbp - 0x70]
xor edx, edx
mov rax, rdx
test rbx, rbx
je 0x140028335
cmp rbx, 0x20
jb 0x140028324
mov rcx, rbx
and rcx, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
movdqu xmm0, xmmword [rax + r14]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rax + r14 + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x1400282c2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, rbx
jae 0x140028335
xor cl, byte [rax + r14]
inc rax
cmp rax, rbx
jb 0x140028329
movzx eax, cl
mov rcx, qword [rbp - 0x78]
cmp rax, qword [rbx + rcx]
jne 0x1400283a2
mov qword [rbp + 0x558], rbx
mov rsi, r14
mov qword [rbp + 0x10], r14
mov dword [rbp + 0x1d0], ebx
mov edi, 0x10000000
mov r14, qword [rbp + 0x30]
mov r11, qword [rbp + 8]
jmp 0x14002840d
xor eax, eax
mov r10d, eax
cmp edx, 4
jae 0x140027f7f
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r9d, cl
shl r9d, cl
jmp 0x140027f7f
xor edx, edx
mov dword [rbp - 0x80], edx
mov dword [rbp - 0x68], 0xffffffff
mov r10d, edx
mov r9d, edx
jmp 0x140027f84
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor edx, edx
mov r11, qword [rbp + 8]
mov r14, qword [rbp + 0x30]
mov rbx, qword [rbp + 0x550]
mov edi, 0xd0000001
test rbx, rbx
je 0x140028403
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
xor edx, edx
mov rsi, qword [rbp + 0x10]
mov ebx, dword [rbp + 0x1d0]
test edi, edi
js 0x1400286da
mov dword [rbp + 0x1fc], edx
mov qword [rbp + 0x560], rsi
cmp ebx, 4
jae 0x140028431
mov edi, 0xc000003e
jmp 0x140028671
mov r11d, dword [rsi]
mov dword [rbp - 0x70], r11d
lea r8, [rbp + 0x560]
mov edx, 4
mov rcx, rsi
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x14002866d
lea r8, [rbp + 0x1fc]
mov edx, 4
xor ecx, ecx
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x14002866d
mov eax, ebx
mov r9d, dword [rbp + 0x1fc]
sub eax, r9d
cmp eax, 4
jae 0x14002848e
mov edi, 0xc000003e
jmp 0x14002866d
mov rcx, qword [rbp + 0x560]
mov r10d, dword [rcx]
lea r8, [rbp + 0x560]
mov edx, 4
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x14002866d
lea r8, [rbp + 0x1fc]
mov edx, 4
mov ecx, r9d
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x14002866d
mov eax, ebx
mov ecx, dword [rbp + 0x1fc]
sub eax, ecx
cmp eax, r10d
jae 0x1400284ea
mov edi, 0xc000003e
jmp 0x14002866d
lea r8, [rbp + 0x1fc]
mov edx, r10d
call fcn.14000d628
mov edi, eax
test eax, eax
js 0x14002866d
mov edx, ebx
mov rsi, r10
mov rdi, qword [rbp + 0x10]
lea rcx, [rdi + rdx]
mov rbx, qword [rbp + 0x560]
lea rax, [rbx + r10]
cmp rcx, rax
jb 0x1400286cb
mov rax, rdi
sub rax, rbx
sub rax, r10
add rax, rdx
cmp rax, 8
jae 0x1400286cb
xor eax, eax
mov r14d, eax
mov edi, eax
mov dword [rbp - 0x80], eax
test rbx, rbx
je 0x140028625
mov r9, rbx
lea r8, [rbp + 0x568]
mov rdx, r10
mov rcx, rbx
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x1400286ab
mov r11, qword [rbp + 0x568]
cmp rbx, r11
jae 0x140028619
mov r10d, dword [rbp + 0x200]
lea r8, [rbp + 0x570]
mov edx, 4
mov rcx, r9
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140028677
cmp qword [rbp + 0x570], r11
ja 0x140028660
lea r8, [rbp + 0x220]
mov edx, dword [r9]
mov ecx, 4
call fcn.14000d628
mov edi, eax
test eax, eax
cmovns r10d, dword [rbp + 0x220]
mov dword [rbp + 0x200], r10d
js 0x140028677
mov edx, r10d
lea r8, [rbp + 0x578]
mov rcx, r9
call fcn.14000d648
mov edi, eax
test eax, eax
js 0x140028677
mov r9, qword [rbp + 0x578]
cmp r9, r11
ja 0x140028660
mov eax, dword [rbp - 0x80]
inc eax
mov dword [rbp - 0x80], eax
cmp r9, r11
jb 0x140028583
mov r10d, esi
jmp 0x14002861c
mov eax, r14d
cmp r9, r11
jne 0x140028660
mov r11d, dword [rbp - 0x70]
test r10d, r10d
je 0x140028684
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
nop dword [rax + rax]
mov r14, rax
mov r11d, dword [rbp - 0x70]
test rax, rax
jne 0x14002867d
mov edi, 0xc0000017
jmp 0x1400286ab
mov edi, 0xc000000d
mov r14, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x10]
mov r11, qword [rbp + 8]
bts edi, 0x1c
jmp 0x1400286da
mov r11d, dword [rbp - 0x70]
jmp 0x1400286ab
xor eax, eax
mov edi, eax
mov eax, dword [rbp - 0x80]
test rbx, rbx
je 0x14002869e
mov r8, rsi
mov rdx, rbx
mov rcx, r14
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 0x80]
mov r11d, dword [rbp - 0x70]
mov qword [rbp + 0x6c8], r14
mov dword [rbp + 0x6c0], eax
test edi, edi
js 0x140028665
mov r14, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x10]
cmp r11d, dword [rbp + 0x6c0]
mov r11, qword [rbp + 8]
je 0x140028671
mov edi, 0xc000003e
jmp 0x140028671
mov edi, 0xc000003e
jmp 0x140028669
mov r11, qword [rbp + 8]
mov rsi, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rbp + 0x20]
test rbx, rbx
je 0x14002870f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
mov rcx, qword [rbp - 0x18]
mov rbx, qword [rbp + 0x4d0]
test rbx, rbx
je 0x1400287e1
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x14002874e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 8], rax
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x14002877d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x18], rax
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x1400287ac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbx + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp + 0x4d0], rax
mov r11, qword [rbp + 8]
mov rsi, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14002880b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp - 0x18]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
mov r11, qword [rbp + 8]
test r11, r11
je 0x140028831
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, qword [rbp + 8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test r14, r14
je 0x1400288e7
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x140028869
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 8], rax
mov rbx, qword [r14 + 0x18]
test rbx, rbx
je 0x140028898
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x18], rax
mov rbx, qword [r14 + 0x28]
test rbx, rbx
je 0x1400288c7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
xor eax, eax
mov qword [r14 + 0x28], rax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, r14
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test rsi, rsi
je 0x14002890c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
js 0x140026457
mov r10d, dword [rbp + 0x6c0]
cmp r10d, 1
jb 0x140026457
mov rdi, qword [rbp + 0x6c8]
test rdi, rdi
je 0x140026457
test r10d, r10d
je 0x140026457
mov qword [rbp + 0x580], rdi
mov r9d, dword [rdi]
lea r8, [rbp + 0x580]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
test eax, eax
js 0x140026457
mov dword [rbp + 0x204], r9d
mov rax, qword [rbp + 0x580]
test r9d, r9d
mov r14d, 0
cmove rax, r14
mov qword [rbp + 0x580], rax
mov qword [rbp + 0x588], rax
cmp r9d, 4
jne 0x14002645a
mov eax, dword [rax]
mov dword [rbp + 0x208], eax
test eax, eax
js 0x14002645a
cmp r10d, 1
jbe 0x14002645a
mov qword [rbp + 0x590], rdi
mov r9d, r14d
lea r8, [rbp + 0x590]
mov edx, 4
mov rcx, rdi
call fcn.14000d648
test eax, eax
js 0x14002645a
mov edx, dword [rdi]
lea r8, [rbp + 0x590]
mov rcx, qword [rbp + 0x590]
call fcn.14000d648
test eax, eax
js 0x14002645a
inc r9d
cmp r9d, 1
jae 0x140028a06
mov rdi, qword [rbp + 0x590]
jmp 0x1400289bb
mov rcx, qword [rbp + 0x590]
mov edi, dword [rcx]
lea r8, [rbp + 0x590]
mov edx, 4
call fcn.14000d648
test eax, eax
js 0x14002645a
mov dword [rbp + 0x20c], edi
mov rax, qword [rbp + 0x590]
test edi, edi
cmove rax, r14
mov qword [rbp + 0x590], rax
mov qword [rbp + 0x598], rax
cmp edi, 8
jne 0x14002645a
mov rax, qword [rax]
mov qword [rbp + 0x5a0], rax
jmp 0x14002645a
mov ebx, 1
mov edi, dword [rbp + 0x38]
xor eax, eax
lock cmpxchg dword [0x14005c480], ebx
jne 0x140028a69
mov eax, dword [0x14005bea8]
test eax, eax
jle 0x140028d4e
sub eax, 1
mov dword [0x14005bea8], eax
jne 0x140028d4e
lea rbx, [0x14005c0a0]
mov esi, 4
mov rcx, qword [rbx]
test rcx, rcx
je 0x140028ab2
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
nop dword [rax + rax]
add rbx, 0x18
sub rsi, 1
jne 0x140028a9e
xor edx, edx
lea r8d, [rsi + 0x60]
lea rcx, [0x14005c0a0]
call sub.msvcrt.dll_memset
lea rax, [0x1400469c0]
mov qword [section..data], rax
lea rax, [0x1400469c0]
mov qword [0x14005b008], rax
lea rax, [0x1400469c0]
mov qword [0x14005b010], rax
lea rax, [0x1400469c0]
mov qword [0x14005b018], rax
lea rax, [0x1400469c0]
mov qword [0x14005b020], rax
lea rax, [0x1400469c0]
mov qword [0x14005b028], rax
lea rax, [0x1400469c0]
mov qword [0x14005b030], rax
lea rax, [0x1400469c0]
mov qword [0x14005b038], rax
lea rax, [0x14000a310]
mov qword [0x14005b040], rax
lea rax, [0x14000a310]
mov qword [0x14005b048], rax
lea rax, [0x1400469c0]
mov qword [0x14005b050], rax
lea rax, [0x1400469c0]
mov qword [0x14005b058], rax
lea rax, [0x1400469c0]
mov qword [0x14005b060], rax
lea rax, [0x1400469c0]
mov qword [0x14005b068], rax
lea rax, [0x1400469c0]
mov qword [0x14005b070], rax
lea rax, [0x1400469c0]
mov qword [0x14005b078], rax
lea rax, [0x14000a310]
mov qword [0x14005b080], rax
lea rax, [0x1400469c0]
mov qword [0x14005b088], rax
lea rax, [0x1400469c0]
mov qword [0x14005b090], rax
lea rax, [0x1400469c0]
mov qword [0x14005b098], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0a8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0b0], rax
lea rax, [0x14000a4f0]
mov qword [0x14005b0b8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0c8], rax
mov qword [0x14005b0d0], r14
lea rax, [0x14000a310]
mov qword [0x14005b0d8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0e8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f0], rax
lea rax, [0x1400469c0]
mov qword [0x14005b0f8], rax
lea rax, [0x1400469c0]
mov qword [0x14005b100], rax
lea rax, [0x14000a310]
mov qword [0x14005b108], rax
lea rax, [0x1400469c0]
mov qword [0x14005b110], rax
lea rax, [0x1400469c0]
mov qword [0x14005b118], rax
lea rax, [0x1400469c0]
mov qword [0x14005b120], rax
lea rax, [0x1400469c0]
mov qword [0x14005b128], rax
lea rax, [0x1400469c0]
mov qword [0x14005b130], rax
lea rax, [0x1400469c0]
mov qword [0x14005b138], rax
lea rax, [0x14000a310]
mov qword [0x14005b140], rax
lea rax, [0x14000a310]
mov qword [0x14005b148], rax
lea rax, [0x14000a310]
mov qword [0x14005b150], rax
lea rax, [0x14000a310]
mov qword [0x14005b158], rax
lea rax, [0x1400469c0]
mov qword [0x14005b160], rax
lea rax, [0x1400469c0]
mov qword [0x14005b168], rax
lea ebx, [rsi + 1]
mov eax, r14d
xchg dword [0x14005c480], eax
lea rcx, [rbp + 0x40]
call fcn.140009afc
test r13d, r13d
jns 0x1400047f1
cmp r13d, 0xd0000034
jne 0x140028d7a
mov r12d, 0xc004f012
jmp 0x140028dbd
cmp r13d, 0xd00000e5
je 0x140028db7
cmp r13d, 0xc004d501
je 0x140028db7
cmp r13d, 0xd000003e
jne 0x140028d9d
mov r12d, 0xc004f028
jmp 0x140028dbd
mov r12d, r13d
cmp r13d, 0x8007007a
jne 0x140028dbd
mov r12d, 0xc004f01e
xor r13d, r13d
jmp 0x140004812
mov r12d, 0xc004f027
xor r13d, r13d
jmp 0x140004812
mov r12d, 0xc004f01e
jmp 0x140004812
mov rax, r13
jmp 0x14000480d
mov r15d, 0x80070005
jmp 0x140029059
mov byte [0x14005c049], 1
jmp 0x140004831
movzx eax, ax
or eax, 0x80070000
test eax, eax
jmp 0x140004ad2
cmp dword [rbp + 0x214], 2
jb 0x140004b31
xor r9d, r9d
lea r8, str.TabTip_MessageBox__
lea rdx, str.TabTip_has_just_called_CoInitializeSecurity.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop dword [rax + rax]
nop
jmp 0x140004b31
mov bl, 1
jmp 0x140004bd3
mov byte [0x14005c049], 1
jmp 0x140004bf0
mov r14b, 1
xor sil, sil
jmp 0x140004cec
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_TranslateMessage]
nop dword [rax + rax]
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_DispatchMessageW]
nop dword [rax + rax]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x740]
call qword [sym.imp.USER32.dll_GetMessageW]
nop dword [rax + rax]
test eax, eax
jg 0x140028e4e
lea rcx, [0x14005c108]
call fcn.14003b570
lea rcx, [0x14005c188]
call fcn.14003b570
test sil, sil
je 0x140028eb5
call fcn.14002c578
mov byte [rsp + 0x28], bl
movzx edx, r14b
lea rcx, [rbp + 0x14b0]
call fcn.140031bac
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
mov ecx, dword [rbp + 0x21c]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
nop dword [rax + rax]
mov edx, 0xffffffff
mov rcx, r12
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x3a0]
test rcx, rcx
je 0x140028f6a
mov edx, dword [0x14005c044]
test edx, edx
je 0x140028f23
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x140037fef.0]
mov rcx, qword [rbp + 0x3a0]
mov edx, dword [0x14005c040]
test edx, edx
je 0x140028f6a
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x140037fef.0]
xor edx, edx
mov rcx, qword [rbp + 0x348]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoDisconnectObject]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x348]
mov qword [rbp + 0x348], r13
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [case.0x140037fef.0]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [0x14005bd88]
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_UnregisterWait]
nop dword [rax + rax]
nop
lea rcx, [rbp + 0x3a0]
call fcn.140003484
nop
lea rcx, [rbp + 0x348]
call fcn.140003484
nop
lea rcx, [rbp + 0x238]
call fcn.140003484
nop
lea rax, [0x14004a100]
mov qword [rbp + 0x14b0], rax
lea rcx, [rbp + 0x14b0]
call fcn.14002d184
lea rcx, [rbp + 0x14b0]
call fcn.14002b218
test r15d, r15d
jne 0x140028fef
mov eax, 0x16
cmp byte [0x14005c5d8], r15b
cmovne r15d, eax
mov edx, r15d
lea rcx, [rbp + 0x1370]
call fcn.140031aa0
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
nop dword [rax + rax]
lea rcx, [rbp + 0x770]
call fcn.14000581c
lea rcx, [rbp + 0x1090]
call fcn.140005690
lea rcx, [rbp + 0x1010]
call fcn.140005690
lea rcx, [rbp + 0xf90]
call fcn.140005690
lea rcx, [rbp + 0xf10]
call fcn.140005690
mov qword [rbp + 0x5c0], rdi
lea rcx, [rbp + 0x5c0]
call fcn.140009b60
lea rax, [0x14004a0e8]
mov qword [rbp + 0x1370], rax
lea rcx, [rbp + 0x1370]
call fcn.14002d184
lea rcx, [rbp + 0x1370]
call fcn.14002b218
mov eax, r15d
mov rcx, qword [rbp + 0x19d0]
xor rcx, rsp
call fcn.14000ae10
lea r11, [rsp + 0x1ae0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret