Function at 0x1400e8ec0
Capabilities:
Authenticate hmac
Check for time delay via queryperformancecounter

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x12788
call fcn.14000d7b0
sub rsp, rax
movdqa xmmword [rsp + 0x12770], xmm11
movdqa xmmword [rsp + 0x12760], xmm10
movdqa xmmword [rsp + 0x12750], xmm9
movdqa xmmword [rsp + 0x12740], xmm8
movdqa xmmword [rsp + 0x12730], xmm7
movdqa xmmword [rsp + 0x12720], xmm6
mov qword [rsp + 0x2720], 0
lea rcx, [rsp + 0x2720]
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x1400eee64
mov rsi, qword [rsp + 0x2720]
mov rcx, qword [0x1402050d8]
test rcx, rcx
jne 0x1400e8f81
mov qword [rsp + 0x2720], 0
lea rcx, [rsp + 0x2720]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400eee64
mov rcx, qword [rsp + 0x2720]
mov qword [0x1402050d8], rcx
test rcx, rcx
je case.0x1400ebcb8.0
mov rax, rsi
or rax, rcx
shr rax, 0x20
je 0x1400e8f97
mov rax, rsi
xor edx, edx
div rcx
jmp 0x1400e8f9d
mov eax, esi
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400e8fc1
xor edx, edx
div rcx
mov rsi, rax
jmp 0x1400e8fc7
xor edx, edx
div ecx
mov esi, eax
add rsi, r8
mov rax, rsi
shr rax, 9
movabs r14, 0x44b82fa09b5a53
mul r14
mov rdi, rdx
mov ecx, 0x23
call fcn.1400dd480
mov qword [rsp + 0x2720], 0
lea rcx, [rsp + 0x2720]
call sub.kernel32.dll_QueryPerformanceCounter
test eax, eax
je 0x1400eee64
mov rbx, qword [rsp + 0x2720]
mov rcx, qword [0x1402050d8]
test rcx, rcx
jne 0x1400e9059
mov qword [rsp + 0x2720], 0
lea rcx, [rsp + 0x2720]
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x1400eee64
mov rcx, qword [rsp + 0x2720]
mov qword [0x1402050d8], rcx
test rcx, rcx
je case.0x1400ebcb8.0
shr rdi, 0xb
imul r8d, edi, 0x3b9aca00
mov rax, rbx
or rax, rcx
shr rax, 0x20
je 0x1400e907a
mov rax, rbx
xor edx, edx
div rcx
jmp 0x1400e9080
mov eax, ebx
xor edx, edx
div ecx
sub esi, r8d
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x1400e90a7
xor edx, edx
div rcx
mov rcx, rax
jmp 0x1400e90ad
xor edx, edx
div ecx
mov ecx, eax
add rcx, r8
mov rax, rcx
shr rax, 9
mul r14
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov qword [rsp + 0x720], rdx
mov dword [rsp + 0x728], ecx
mov qword [rsp + 0x2720], rdi
mov dword [rsp + 0x2728], esi
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x2720]
call fcn.1400e6820
cmp edx, 0x3b9aca00
je 0x1400eee6b
cmp rax, 0x19
jb 0x1400eee6b
lea rsi, [rsp + 0x2720]
mov rcx, rsi
call fcn.140113400
cmp byte [rsp + 0x2720], 0x11
jne case.0x1400ebcb8.0
call fcn.1400018d0
test al, al
jne 0x1400ed921
mov ecx, 5
call fcn.1400dd480
lea rax, [0x1401bf9da]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0xa990891bf0a59d51
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef9c0
movabs rcx, 0xae2bd1ad00d16605
xor rcx, qword [rax]
movabs rdx, 0xbe0b0cb257dd6fe2
xor rdx, qword [rax + 8]
movabs r8, 0xb17f0bcf2c394cfc
xor r8, qword [rax + 0x10]
mov r9d, 0x50deba4c
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x67
xor r11b, 0x49
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0x78
mov qword [rsp + 0x720], rcx
mov qword [rsp + 0x728], rdx
mov qword [rsp + 0x730], r8
mov dword [rsp + 0x738], r9d
mov word [rsp + 0x73c], r11w
mov byte [rsp + 0x73e], r10b
lea rsi, [rsp + 0x2720]
lea rdx, [rsp + 0x720]
mov r8d, 0x1f
mov rcx, rsi
call fcn.1400da0d0
cmp dword [rsp + 0x2720], 2
jne 0x1400eee6b
mov rax, qword [rsp + 0x2728]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x1400e9294
test rcx, rcx
je 0x1400e9294
lea rdi, [rax - 1]
mov rbx, qword [rax - 1]
mov r14, qword [rax + 7]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x1400e9283
cmp qword [r14 + 0x10], 0x11
jb 0x1400e9272
mov rbx, qword [rbx - 8]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
lea rax, [0x1401c9bc9]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0xecc0a297ba2002e2
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef7c0
movabs rcx, 0xba5689cf1ff99a74
xor rcx, qword [rax]
movabs rdx, 0x1983cad0684d378
xor rdx, qword [rax + 8]
movabs r8, 0x5606f8b8c7be6acb
xor r8, qword [rax + 0x10]
mov r9d, 0xab263a30
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
movzx r11d, al
shr eax, 8
xor al, 0x8c
movzx eax, al
shl eax, 8
or eax, r11d
xor r10b, 0x61
mov qword [rsp + 0x720], rcx
mov qword [rsp + 0x728], rdx
mov qword [rsp + 0x730], r8
mov dword [rsp + 0x738], r9d
mov word [rsp + 0x73c], ax
mov byte [rsp + 0x73e], r10b
mov dword [rsp + 0x2720], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2728], xmm0
mov dword [rsp + 0x2738], 7
mov qword [rsp + 0x273c], 0
mov word [rsp + 0x2744], 0
mov byte [rsp + 0x2741], 1
mov byte [rsp + 0x2744], 1
mov byte [rsp + 0x2743], 1
lea r12, [rsp + 0x720]
lea rdi, [rsp + 0x2720]
mov edx, 0x1f
mov rcx, r12
mov r8, rdi
call fcn.1400d9bd0
mov r14, rax
mov rbx, rdx
lea rax, [0x1401ca9ba]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0x8e5db9981709d5fb
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef820
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test r14, r14
jne case.0x1400ebcb8.0
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov ecx, 5
call fcn.1400dd480
lea rax, [0x1401c6233]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0x976cc701e62ab3fd
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef7f0
movabs rsi, 0x34c1d05716b9f2c7
xor rsi, qword [rax]
mov edi, 0xd7add172
xor edi, dword [rax + 8]
movzx ebx, word [rax + 0xc]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e94a0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0xe
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
movabs r8, 0x8000000000000001
mov ecx, ebx
xor cl, 0xd3
shr ebx, 8
xor bl, 0x51
movzx ecx, cl
movzx edx, bl
shl edx, 8
or edx, ecx
movd xmm0, edx
mov qword [rax], rsi
mov dword [rax + 8], edi
movd ecx, xmm0
mov word [rax + 0xc], cx
mov qword [rsp + 0x2720], 0xe
mov qword [rsp + 0x2728], rax
mov qword [rsp + 0x2730], 0xe
mov byte [rsp + 0x2738], 0
mov qword [rsp + 0x2740], 0
mov qword [rsp + 0x2748], 8
mov qword [rsp + 0x2750], 0
mov qword [rsp + 0x27a8], 0
mov qword [rsp + 0x27b8], 0
mov word [rsp + 0x27c0], 0
lea rax, [r8 - 1]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x2758], rax
mov dword [rsp + 0x27e0], 0
mov word [rsp + 0x27e4], 0
mov dword [rsp + 0x2778], 6
mov dword [rsp + 0x2788], 6
mov dword [rsp + 0x2798], 6
mov qword [rsp + 0x27c8], 0
mov qword [rsp + 0x27d8], 0
lea rax, [0x1401cc072]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0x889de596bbf46b90
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef660
movabs rsi, 0x6651e408b54fe1b4
xor rsi, qword [rax]
mov edi, 0xc9e560
xor edi, dword [rax + 8]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e962e
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0xc
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov r14, rax
lea r13, [rsp + 0x2740]
mov qword [rax], rsi
mov dword [rax + 8], edi
mov rcx, r13
xor edx, edx
call fcn.1400d74a0
mov r15, qword [rsp + 0x2748]
mov rbx, qword [rsp + 0x2750]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0xc
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 0xc
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2750], rbx
lea rax, [0x1401c42d3]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0xf93d506dc46e8d6a
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef770
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e970a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 6
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov r14, rax
mov eax, edi
xor al, 0x9d
shr edi, 8
xor dil, 0x49
movzx eax, al
movzx ecx, dil
shl ecx, 8
or ecx, eax
shl rcx, 0x20
mov eax, 0xe3823c3f
xor rax, rsi
or rax, rcx
mov dword [r14], eax
shr rax, 0x20
mov word [r14 + 4], ax
cmp rbx, qword [rsp + 0x2740]
jne 0x1400e977a
mov rcx, r13
mov rdx, rbx
call fcn.1400d74a0
mov r15, qword [rsp + 0x2748]
mov rbx, qword [rsp + 0x2750]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 6
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 6
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2750], rbx
lea rax, [0x1401c752e]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0xb5495df2073816a0
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef690
movabs rsi, 0x46738b0b1b87f4e6
xor rsi, qword [rax]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e981c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov r14, rax
mov qword [rax], rsi
cmp rbx, qword [rsp + 0x2740]
jne 0x1400e9855
mov rcx, r13
mov rdx, rbx
call fcn.1400d74a0
mov rbx, qword [rsp + 0x2750]
mov r15, qword [rsp + 0x2748]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 8
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 8
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2750], rbx
lea rax, [0x1401c2905]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0x9d2da464dd4c4d21
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef410
movabs rcx, 0x8919172f86497a4f
xor rcx, qword [rax]
mov qword [rsp + 0x38], rcx
movabs r13, 0xa5a1140ad468f8f1
xor r13, qword [rax + 8]
movabs rbp, 0xc88edbc66322e4da
xor rbp, qword [rax + 0x10]
mov esi, 0x6d34559d
xor esi, dword [rax + 0x18]
movzx edi, byte [rax + 0x1e]
movzx r12d, word [rax + 0x1c]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e9931
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x1f
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov r14, rax
mov eax, r12d
shr eax, 8
xor r12b, 0x9e
xor al, 0x4d
movzx ecx, r12b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor dil, 0x77
mov rax, qword [rsp + 0x38]
mov qword [r14], rax
mov qword [r14 + 8], r13
mov qword [r14 + 0x10], rbp
mov dword [r14 + 0x18], esi
movd eax, xmm0
mov word [r14 + 0x1c], ax
mov byte [r14 + 0x1e], dil
cmp rbx, qword [rsp + 0x2740]
jne 0x1400e99c2
lea r13, [rsp + 0x2740]
mov rcx, r13
mov rdx, rbx
call fcn.1400d74a0
mov r15, qword [rsp + 0x2748]
mov rbx, qword [rsp + 0x2750]
lea rdx, [rsp + 0x720]
jmp 0x1400e99d2
lea rdx, [rsp + 0x720]
lea r13, [rsp + 0x2740]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0x1f
mov qword [r15 + rax*8 + 0x10], r14
mov qword [r15 + rax*8 + 0x18], 0x1f
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2750], rbx
lea rax, [0x1401c0db9]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0x1983dd7218ea90cf
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef790
movabs rdi, 0x8fbd6944713aa36f
xor rdi, qword [rax]
mov r14d, 0x702af9ce
xor r14d, dword [rax + 8]
movzx ebp, byte [rax + 0xe]
movzx r12d, word [rax + 0xc]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400e9a87
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0xf
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov rsi, rax
mov eax, r12d
shr eax, 8
xor r12b, 0xa7
xor al, 0xe6
movzx ecx, r12b
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 0x76
mov qword [rsi], rdi
mov dword [rsi + 8], r14d
movd eax, xmm0
mov word [rsi + 0xc], ax
mov byte [rsi + 0xe], bpl
cmp rbx, qword [rsp + 0x2740]
jne 0x1400e9af8
mov rcx, r13
mov rdx, rbx
call fcn.1400d74a0
mov r15, qword [rsp + 0x2748]
mov rbx, qword [rsp + 0x2750]
lea rax, [rbx + rbx*4]
mov qword [r15 + rax*8], 0
mov qword [r15 + rax*8 + 8], 0xf
mov qword [r15 + rax*8 + 0x10], rsi
mov qword [r15 + rax*8 + 0x18], 0xf
mov byte [r15 + rax*8 + 0x20], 0
inc rbx
mov qword [rsp + 0x2750], rbx
mov dword [rsp + 0x27e0], 0x8000000
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x2720]
call fcn.1400dd860
lea rax, [0x1401c6590]
mov qword [rsp + 0x1c0], rax
lea r15, [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0x2af3953e46420007
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.1400ef490
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, qword [rax + 0x10]
mov rbp, qword [rsp + 0x720]
cmp rbp, 2
je case.0x1400ebcb8.0
mov rbx, qword [rsp + 0x728]
mov r13, qword [rsp + 0x730]
mov rdi, qword [rsp + 0x738]
mov r12, qword [rsp + 0x740]
mov rsi, qword [rsp + 0x748]
mov rcx, qword [rsp + 0x750]
mov r14, qword [rsp + 0x758]
call sub.kernel32.dll_CloseHandle
mov rcx, r14
call sub.kernel32.dll_CloseHandle
test rbp, rbp
je 0x1400e9bf9
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
test r13, r13
je 0x1400e9c06
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test r12, r12
je 0x1400e9c13
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x2720]
call fcn.1400eeee0
lea rax, str.C:__Windows__Temp_ZLwxufrA.zip
mov qword [rsp + 0x5a0], rax
mov qword [rsp + 0x5a8], 0x11
lea rax, [rsp + 0x5a0]
mov qword [rsp + 0x1c0], rax
lea rax, [0x1400f5230]
mov qword [rsp + 0x1c8], rax
lea rax, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
mov qword [rsp + 0x2720], rax
mov qword [rsp + 0x2728], 2
mov qword [rsp + 0x2740], 0
mov qword [rsp + 0x2730], r15
mov qword [rsp + 0x2738], 1
lea r13, [rsp + 0x720]
lea rsi, [rsp + 0x2720]
mov rcx, r13
mov rdx, rsi
call fcn.140005480
mov r14, qword [rsp + 0x720]
mov rax, qword [rsp + 0x728]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x180], rax
lea rax, [0x1401cd05f]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0xa0557508f8cb5488
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef3e0
movabs rcx, 0x79c764d6d436bf3
xor rcx, qword [rax]
movabs rdx, 0x1ec76194a3e7ce07
xor rdx, qword [rax + 8]
movabs r8, 0xe08c10bfac46852e
xor r8, qword [rax + 0x10]
movabs r9, 0x8ca68fb831e3ffb2
xor r9, qword [rax + 0x18]
movabs r10, 0xa7f3b2f3f7658310
xor r10, qword [rax + 0x20]
mov qword [rsp + 0x4b8], rcx
mov qword [rsp + 0x4c0], rdx
mov qword [rsp + 0x4c8], r8
mov qword [rsp + 0x4d0], r9
mov qword [rsp + 0x4d8], r10
lea rsi, [rsp + 0x2720]
mov rcx, rsi
call fcn.14009e9d0
lea rcx, [rsp + 0x1c0]
mov rdx, rsi
call fcn.14009de60
mov rbx, qword [rsp + 0x1c0]
mov rax, qword [rsp + 0x1d0]
cmp eax, 0x3b9aca01
mov qword [rsp + 0x558], r14
jne 0x1400e9dd5
mov qword [rsp + 0x668], rbx
mov qword [rsp + 0x660], 3
mov bl, 1
jmp 0x1400ea1c7
mov rsi, qword [rsp + 0x1c8]
movq xmm6, rax
mov qword [rsp + 0x5b0], rbx
mov qword [rsp + 0x5b8], rsi
movq qword [rsp + 0x5c0], xmm6
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x4b8]
mov r8d, 0x28
call fcn.140094eb0
mov rax, qword [rsp + 0x80]
cmp qword [rsp + 0x660], rax
jne 0x1400e9e42
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0x2728], rax
mov eax, 2
jmp 0x1400e9fc5
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2770], xmm0
mov dword [rsp + 0x2811], 0
mov dword [rsp + 0x2814], 0
movups xmm1, xmmword [rsp + 0x660]
movups xmm2, xmmword [rsp + 0x670]
movups xmm3, xmmword [rsp + 0x680]
movups xmm4, xmmword [rsp + 0x690]
movups xmmword [rsp + 0x1c6], xmm1
movups xmmword [rsp + 0x1d6], xmm2
movups xmmword [rsp + 0x1e6], xmm3
movups xmmword [rsp + 0x1f6], xmm4
movups xmm1, xmmword [rsp + 0x6a0]
movups xmmword [rsp + 0x206], xmm1
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x216], rax
mov qword [rsp + 0x2748], 0
mov qword [rsp + 0x2760], 0
mov qword [rsp + 0x2768], 8
mov qword [rsp + 0x2780], 8
mov qword [rsp + 0x2788], 0
mov qword [rsp + 0x2790], 2
mov qword [rsp + 0x2798], 0
mov word [rsp + 0x27a0], 0
mov rax, qword [rsp + 0x20e]
mov qword [rsp + 0x27f0], rax
mov rax, qword [rsp + 0x216]
mov qword [rsp + 0x27f8], rax
movups xmm1, xmmword [rsp + 0x200]
movups xmmword [rsp + 0x27e2], xmm1
movups xmm1, xmmword [rsp + 0x1c0]
movups xmm2, xmmword [rsp + 0x1d0]
movups xmm3, xmmword [rsp + 0x1e0]
movups xmm4, xmmword [rsp + 0x1f0]
movups xmmword [rsp + 0x27d2], xmm4
movups xmmword [rsp + 0x27c2], xmm3
movups xmmword [rsp + 0x27b2], xmm2
movups xmmword [rsp + 0x27a2], xmm1
mov dword [rsp + 0x2808], 0x3b9aca00
mov byte [rsp + 0x2810], 1
movdqu xmmword [rsp + 0x2818], xmm0
mov byte [rsp + 0x2828], 2
mov qword [rsp + 0x2830], 2
xor eax, eax
mov qword [rsp + 0x2720], rax
lock inc qword [rbx]
jle case.0x1400ebcb8.0
movd eax, xmm6
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1c8], rsi
mov dword [rsp + 0x1d0], eax
lea rdi, [rsp + 0x720]
lea rsi, [rsp + 0x1c0]
lea r8, [rsp + 0x2720]
mov rcx, rdi
mov rdx, rsi
call fcn.14009ee60
lea rcx, [rsp + 0x660]
mov rdx, rdi
call fcn.14009faa0
lock dec qword [rbx]
jne 0x1400ea038
lea rcx, [rsp + 0x5b0]
call fcn.1400f2610
mov bl, 1
cmp qword [rsp + 0x660], 3
je 0x1400ea1c7
lea rcx, [rsp + 0x2720]
lea rdx, [rsp + 0x660]
mov r8d, 0xc0
call sub.msvcrt.dll_memcpy
mov dword [rsp + 0x720], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x728], xmm0
mov dword [rsp + 0x738], 7
mov qword [rsp + 0x73c], 0
mov word [rsp + 0x744], 0
mov byte [rsp + 0x741], 1
mov byte [rsp + 0x744], 1
mov byte [rsp + 0x743], 1
lea r14, [rsp + 0x720]
mov rcx, qword [rsp + 0x150]
mov rdx, qword [rsp + 0x180]
mov r8, r14
call fcn.1400d9bd0
mov r15, rax
mov rdi, rdx
lea rax, [0x1401c586f]
mov qword [rsp + 0x720], rax
mov rcx, qword [rsp + 0x720]
movabs rax, 0xf9915fdd2be087e1
mov qword [rsp + 0x720], rax
mov rdx, qword [rsp + 0x720]
call fcn.1400ef6f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test r15, r15
jne case.0x1400ebcb8.0
mov qword [rsp + 0x4b8], rdi
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x2720]
lea r8, [rsp + 0x4b8]
call fcn.1400f8270
lea rax, [0x1401c3666]
mov qword [rsp + 0x1c0], rax
mov rcx, qword [rsp + 0x1c0]
movabs rax, 0xa306579cbcd00740
mov qword [rsp + 0x1c0], rax
mov rdx, qword [rsp + 0x1c0]
call fcn.1400ef5e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x720], 0
jne case.0x1400ebcb8.0
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
lea rcx, [rsp + 0x2720]
call fcn.1400eeff0
xor ebx, ebx
mov dword [rsp + 0x2720], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x2728], xmm0
mov dword [rsp + 0x2738], 7
mov qword [rsp + 0x273c], 0
mov word [rsp + 0x2744], 0
mov byte [rsp + 0x2740], 1
lea rsi, [rsp + 0x2720]
mov rcx, qword [rsp + 0x150]
mov rdx, qword [rsp + 0x180]
mov r8, rsi
call fcn.1400d9bd0
mov rdi, rax
mov r12, rdx
lea rax, [0x1401c02c7]
mov qword [rsp + 0x2720], rax
mov rcx, qword [rsp + 0x2720]
movabs rax, 0xf8ee84b6f93730cc
mov qword [rsp + 0x2720], rax
mov rdx, qword [rsp + 0x2720]
call fcn.1400ef330
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test rdi, rdi
jne case.0x1400ebcb8.0
mov dword [rsp + 0x49c], ebx
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x2720], 0
lea rbp, [rsp + 0x2720]
mov rcx, r12
xor edx, edx
mov r8, rbp
mov r9d, 2
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400ea2ee
mov rsi, qword [rsp + 0x2720]
xor ebx, ebx
mov rax, rsi
sub rax, 0x10015
cmovae rbx, rax
mov r14d, 1
cmp rsi, 0x16
jae 0x1400ea305
lea rdi, [0x1401cd60e]
mov r15d, 0x12
jmp 0x1400ea434
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor r14d, r14d
jmp 0x1400ea434
add rsi, 0xffffffffffffffea
lea rdi, [0x1401cd5ea]
lea r13, [rsp + 0x2720]
lea rbp, [rsp + 0x98]
mov r15d, 0x24
nop word cs:[rax + rax]
cmp rsi, rbx
jb 0x1400ea424
mov qword [rsp + 0x2720], 0
mov rcx, r12
mov rdx, rsi
mov r8, r13
xor r9d, r9d
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400ea412
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbp
mov rdx, r13
call fcn.1400f5ad0
test rax, rax
jne 0x1400ea397
cmp dword [rsp + 0x2720], 0x6054b50
je 0x1400ea3a2
add rsi, 0xffffffffffffffff
jb 0x1400ea330
jmp 0x1400ea424
xor r14d, r14d
mov rdi, rax
mov qword [rsp + 0x2720], 0
lea r8, [rsp + 0x2720]
test byte [rax + riz], ah
invalid
add byte [rax], al
mov edx, 0x10
mov rcx, r12
mov r9d, 1
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400ea412
xor r14d, r14d
lea rcx, [rsp + 0x2720]
mov rdx, r12
xor r8d, r8d
mov r9, rsi
call fcn.1400e7410
cmp qword [rsp + 0x2720], 0
mov rbx, qword [rsp + 0x2728]
lea r13, [rsp + 0x720]
lea rbp, [rsp + 0x2720]
je 0x1400ed969
mov rdi, rbx
jmp 0x1400ea434
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
xor r14d, r14d
lea rcx, [rsp + 0x2720]
lea rdx, [rsp + 0x98]
call fcn.1400f5600
mov r9, qword [rsp + 0x2720]
cmp r9, qword [rsp + 0x80]
jne 0x1400ed9ad
mov r14, qword [rsp + 0x2728]
mov rdi, qword [rsp + 0x2730]
mov r15, qword [rsp + 0x2738]
jmp 0x1400ea434
mov r8, qword [rsp + 0x2728]
mov r10, qword [rsp + 0x2730]
mov rbp, qword [rsp + 0x2738]
mov r13, qword [rsp + 0x2740]
mov r11, rbp
shr r11, 0x20
cmp r13w, 0xffff
sete cl
mov eax, r13d
shr eax, 0x10
cmp eax, 0xffff
sete dl
or dl, cl
mov rcx, r13
not rcx
shr rcx, 0x20
test cx, cx
sete cl
or cl, dl
mov rdx, r13
shr rdx, 0x30
cmp edx, 0xffff
setae dl
cmp ebp, 0xffffffff
sete sil
or sil, dl
or sil, cl
mov r14d, 2
lea rdi, [0x1401cd770]
mov r15d, 0x2f
jne 0x1400eda40
cmp r11d, 0xffffffff
je 0x1400eda40
cmp r13w, ax
jne 0x1400edc25
mov qword [rsp + 0x90], r11
mov qword [rsp + 0x70], r9
mov qword [rsp + 0x38], r8
mov rdx, 0xffffffffffffffd6
mov qword [rsp + 0x118], r10
sub rdx, r10
mov qword [rsp + 0x2720], 0
lea r8, [rsp + 0x2720]
mov rcx, r12
mov r9d, 2
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400edaca
mov dword [rsp + 0x2720], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x2720]
mov r8d, 4
call fcn.1400f5ad0
test rax, rax
je 0x1400edad4
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x70]
xor r14d, r14d
mov rdi, rax
jmp 0x1400edc25
call sub.kernel32.dll_GetLastError
jmp 0x1400edc01
cmp dword [rsp + 0x2720], 0x7064b50
jne 0x1400edc01
mov dword [rsp + 0x2720], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x2720]
mov r8d, 4
call fcn.1400f5ad0
test rax, rax
jne 0x1400edab5
mov ebp, dword [rsp + 0x2720]
mov qword [rsp + 0x2720], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x2720]
mov r8d, 8
call fcn.1400f5ad0
test rax, rax
jne 0x1400edab5
mov r12, qword [rsp + 0x2720]
mov dword [rsp + 0x2720], 0
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x2720]
mov r8d, 4
call fcn.1400f5ad0
test rax, rax
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x70]
jne 0x1400edabf
cmp dword [rsp + 0x90], 0xffffffff
sete al
movzx ecx, r13w
cmp ebp, ecx
sete cl
or cl, al
or sil, cl
je 0x1400eedb7
cmp rbx, 0x3c
jb 0x1400eee09
lea r9, [rbx - 0x3c]
lea rcx, [rsp + 0x2720]
lea rdx, [rsp + 0x98]
mov r8, r12
call fcn.1400f5840
cmp qword [rsp + 0x2720], 0
je 0x1400eee70
mov r14, qword [rsp + 0x2728]
mov rdi, qword [rsp + 0x2730]
mov r15, qword [rsp + 0x2738]
lea rbp, [rsp + 0x2720]
jmp 0x1400eebe2
mov eax, ebp
mov r14d, 1
lea rdi, str.Invalid_central_directory_size_or_offsetSupport_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryIWbemClassWrapperinner
mov r15d, 0x28
cmp rax, rbx
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x70]
jbe 0x1400edc55
lea rbp, [rsp + 0x2720]
mov r12, rbx
sub r12, rax
mov rsi, r12
sub rsi, qword [rsp + 0x90]
lea rbp, [rsp + 0x2720]
jb 0x1400edc2d
shr r13, 0x20
movzx ebp, r13w
xor edi, edi
cmp rbp, rbx
cmovbe rdi, rbp
test rdi, rdi
je 0x1400edcdc
movabs rax, 0xba2e8ba2e8ba2e
cmp rdi, rax
ja case.0x1400ebcb8.0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400edcc4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
imul r8, rdi, 0xb0
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
jne 0x1400edce1
jmp case.0x1400ebcb8.0
mov eax, 8
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], 0
xor ecx, ecx
call fcn.1400e5d00
test rax, rax
je case.0x1400ebcb8.0
movdqu xmm6, xmmword [rax]
inc qword [rax]
test rdi, rdi
mov qword [rsp + 0x110], rsi
je 0x1400edd3a
cmp rdi, 7
ja 0x1400edd4c
xor eax, eax
cmp rdi, 4
setae al
lea rsi, [rax*4 + 4]
jmp 0x1400edda1
xor r15d, r15d
lea r14, [0x1401cda00]
xor r13d, r13d
jmp 0x1400ede3d
shl rdi, 3
mov esi, 1
cmp rdi, 0xe
jb 0x1400edda1
movabs rcx, 0x2492492492492493
mov rax, rdi
mul rcx
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 2
dec rdi
bsr rcx, rdi
not ecx
mov rsi, 0xffffffffffffffff
shr rsi, cl
movabs rax, 0x7fffffffffffffe
cmp rsi, rax
ja case.0x1400ebcb8.0
inc rsi
mov rbx, rsi
shl rbx, 5
lea rdi, [rsi + 0x10]
mov r14, rbx
add r14, rdi
jb case.0x1400ebcb8.0
movabs rax, 0x8000000000000001
add rax, 0xffffffffffffffef
cmp r14, rax
ja case.0x1400ebcb8.0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x1400eddfa
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.0x1400ebcb8.0
mov r14, rax
lea r13, [rsi - 1]
mov rax, rsi
shr rax, 3
mov r15, rsi
and r15, 0xfffffffffffffff8
sub r15, rax
cmp rsi, 9
cmovb r15, r13
add r14, rbx
mov rcx, r14
mov dl, 0xff
mov r8, rdi
call sub.msvcrt.dll_memset
mov qword [rsp + 0x4b8], r14
mov qword [rsp + 0x4c0], r13
mov qword [rsp + 0x4c8], r15
mov qword [rsp + 0x4d0], 0
movdqu xmmword [rsp + 0x4d8], xmm6
mov qword [rsp + 0x2720], 0
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0x2720]
mov rdx, r12
xor r9d, r9d
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400eea87
test rbp, rbp
je 0x1400eebf1
lea rsi, [rsp + 0x2720]
lea rbx, [rsp + 0x98]
pcmpeqd xmm6, xmm6
xor eax, eax
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x100], rbp
mov qword [rsp + 0x2720], 0
mov rcx, qword [rsp + 0x98]
xor edx, edx
mov r8, rsi
mov r9d, 1
call sub.kernel32.dll_SetFilePointerEx
test eax, eax
je 0x1400eedc4
mov r12, qword [rsp + 0x2720]
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
cmp dword [rsp + 0x2720], 0x2014b50
jne 0x1400eedd8
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx r13d, word [rsp + 0x2720]
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx r14d, word [rsp + 0x2720]
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx eax, word [rsp + 0x2720]
mov word [rsp + 0xb0], ax
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx eax, word [rsp + 0x2720]
mov dword [rsp + 0xd0], eax
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx eax, word [rsp + 0x2720]
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov eax, dword [rsp + 0x2720]
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov qword [rsp + 0xe8], r12
mov dword [rsp + 0xa0], r14d
mov eax, dword [rsp + 0x2720]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov eax, dword [rsp + 0x2720]
mov qword [rsp + 0x58], rax
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx r14d, word [rsp + 0x2720]
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx r12d, word [rsp + 0x2720]
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
movzx ebp, word [rsp + 0x2720]
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov word [rsp + 0x2720], 0
mov r8d, 2
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov eax, dword [rsp + 0x2720]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x2720], 0
mov r8d, 4
mov rcx, rbx
mov rdx, rsi
call fcn.1400f5ad0
test rax, rax
jne 0x1400eeab9
mov eax, dword [rsp + 0x2720]
mov qword [rsp + 0x48], rax
mov rcx, r14
mov dl, 1
call fcn.1400f32f0
mov qword [rsp + 0x90], rax
mov rcx, rbx
mov rbx, rdx
mov r8, r14
call fcn.1400f5ad0
test rax, rax
je 0x1400ee24e
mov rdi, rax
xor r14d, r14d
jmp 0x1400ee687
mov rcx, r12
mov dl, 1
call fcn.1400f32f0
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x88], rdx
mov r8, r12
call fcn.1400f5ad0
test rax, rax
je 0x1400ee285
mov rdi, rax
xor r14d, r14d
jmp 0x1400ee669
mov rcx, rbp
mov dl, 1
call fcn.1400f32f0
mov qword [rsp + 0xe0], rax
lea rcx, [rsp + 0x98]
mov qword [rsp + 0xc0], rdx
mov r8, rbp
call fcn.1400f5ad0
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400ee2c6
mov rdi, qword [rsp + 0x68]
xor r14d, r14d
jmp 0x1400ee63c
test dword [rsp + 0xa0], 0x800
jne 0x1400ee333
lea rsi, [rsp + 0x2720]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
call fcn.1400f65b0
lea rcx, [rsp + 0x4a0]
mov rdx, rsi
call fcn.140114390
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x2720], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x2728], rax
mov qword [rsp + 0x2730], rbp
lea rcx, [rsp + 0x168]
mov rdx, rsi
call fcn.140114390
jmp 0x1400ee37c
lea rsi, [rsp + 0x2720]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
call fcn.140004c70
lea rcx, [rsp + 0x4a0]
mov rdx, rsi
call fcn.1400f42e0
mov rcx, rsi
mov rdx, qword [rsp + 0xc0]
mov r8, rbp
call fcn.140004c70
lea rcx, [rsp + 0x168]
mov rdx, rsi
call fcn.1400f42e0
movzx edx, word [rsp + 0xb0]
mov eax, r13d
shr eax, 8
cmp al, 3
sete cl
mov r8b, 4
sub r8b, cl
test al, al
movzx ecx, r8b
mov eax, 0
cmove ecx, eax
mov ax, 5
cmp edx, 0xb
jle 0x1400ee3c1
cmp edx, 0xc
je 0x1400ee3d0
cmp edx, 0x5d
je 0x1400ee3d6
cmp edx, 0x63
jne 0x1400ee3de
mov ax, 3
jmp 0x1400ee3de
test edx, edx
je 0x1400ee3dc
cmp edx, 8
jne 0x1400ee3de
mov ax, 1
jmp 0x1400ee3de
mov ax, 2
jmp 0x1400ee3de
mov ax, 4
jmp 0x1400ee3de
xor eax, eax
mov rdx, qword [rsp + 0x4b0]
mov qword [rsp + 0x2730], rdx
movups xmm0, xmmword [rsp + 0x4a0]
movaps xmmword [rsp + 0x2720], xmm0
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x2738], rdx
mov qword [rsp + 0x2740], rbx
mov qword [rsp + 0x2748], r14
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x2750], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x2758], rdx
mov qword [rsp + 0x2760], r12
mov rdx, qword [rsp + 0x178]
lea r8, [rsp + 0x2768]
mov qword [r8 + 0x10], rdx
movdqu xmm0, xmmword [rsp + 0x168]
movdqu xmmword [r8], xmm0
mov byte [rsp + 0x27c9], cl
mov byte [rsp + 0x27ca], r13b
mov edx, dword [rsp + 0xa0]
mov ecx, edx
and cl, 1
mov byte [rsp + 0x27c6], cl
mov ecx, edx
shr cl, 3
and cl, 1
mov byte [rsp + 0x27c7], cl
mov word [rsp + 0x27b8], ax
mov edx, dword [rsp + 0xc8]
movzx eax, dx
movzx ecx, word [rsp + 0xb0]
mov word [rsp + 0x27ba], cx
mov ecx, eax
shr ecx, 9
add ecx, 0x7bc
mov dword [rsp + 0x2780], 0
mov word [rsp + 0x2788], cx
mov ecx, edx
shr ecx, 5
and cl, 0xf
mov byte [rsp + 0x278a], cl
mov edx, dword [rsp + 0xd0]
movzx ecx, dx
and al, 0x1f
mov byte [rsp + 0x278b], al
mov eax, ecx
shr eax, 0xb
mov byte [rsp + 0x278c], al
mov eax, edx
shr eax, 5
and al, 0x3f
mov byte [rsp + 0x278d], al
add cl, cl
and cl, 0x3e
mov byte [rsp + 0x278e], cl
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x27bc], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x2790], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x2798], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x27a0], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x27a8], rax
mov qword [rsp + 0x27b0], 0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x27c0], eax
mov byte [rsp + 0x27c8], 0
mov byte [rsp + 0x27c5], 2
lea rcx, [rsp + 0x5b0]
lea rdx, [rsp + 0x2720]
call fcn.140114050
mov r14, qword [rsp + 0x5b0]
test r14, r14
je 0x1400ee5c4
cmp r14d, 4
je 0x1400ee5d1
mov rdi, qword [rsp + 0x5b8]
mov r15, qword [rsp + 0x5c0]
jmp 0x1400ee61e
mov rcx, qword [rsp + 0x5b8]
call fcn.1400f80b0
cmp word [rsp + 0x27b8], 3
mov r14d, 1
jne 0x1400ee5fb
mov r15d, 0x2b
cmp byte [rsp + 0x27c5], 2
jne 0x1400ee5fb
lea rdi, [0x1401cd8e4]
jmp 0x1400ee61e
mov rax, qword [rsp + 0x27a0]
mov r15d, 0x1b
lea rdi, [0x1401cd8c9]
add rax, qword [rsp + 0x110]
jae 0x1400eea17
lea rcx, [rsp + 0x2720]
call fcn.1400f8120
test dword [rsp + 0xa0], 0x800
je 0x1400eeabf
cmp qword [rsp + 0xe0], 0
je 0x1400ee65d
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0xc0]
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x68], 0
je 0x1400eeabf
cmp qword [rsp + 0x60], 0
je 0x1400ee687
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x88]
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x80]
cmp qword [rsp + 0x90], 0
je 0x1400eeabf
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0xa0], rsi
cmp rsi, qword [rsp + 0x80]
je 0x1400eeabf
mov r8d, 0x90
lea rcx, [rsp + 0x1c0]
lea rdx, [rsp + 0x720]
call sub.msvcrt.dll_memcpy
test rdi, rdi
je 0x1400ee72d
js case.0x1400ebcb8.0
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x1400ee713
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.0x1400ebcb8.0
mov qword [0x140205100], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x1400ee732
jmp case.0x1400ebcb8.0
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0xc8], rax
movups xmm0, xmmword [rsp + 0x4d8]
movaps xmmword [rsp + 0x650], xmm0
lea rcx, [rsp + 0x650]
mov qword [rsp + 0x90], rsi
mov rdx, rsi
mov r8, rdi
call fcn.1400f3180
mov r13, rax
cmp qword [rsp + 0x4c8], 0
je 0x1400ee9fd
inc qword [rsp + 0x108]
mov rbp, qword [rsp + 0x4b8]
mov r12, qword [rsp + 0x4c0]
mov rax, r13
shr rax, 0x39
mov qword [rsp + 0xe8], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
xor eax, eax
mov qword [rsp + 0xd0], rax
xor eax, eax
mov qword [rsp + 0xb0], rax
and r13, r12
movdqu xmm8, xmmword [rbp + r13]
movdqa xmm0, xmm8
pcmpeqb xmm0, xmm7
pmovmskb esi, xmm0
test si, si
je 0x1400ee831
mov eax, esi
lea esi, [rax - 1]
and esi, eax
tzcnt eax, eax
add rax, r13
and rax, r12
shl rax, 5
mov rbx, rbp
sub rbx, rax
cmp rdi, qword [rbx - 0x10]
jne 0x1400ee7f1
mov rdx, qword [rbx - 0x18]
mov rcx, qword [rsp + 0x90]
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400ee7f1
jmp 0x1400ee899
cmp qword [rsp + 0xb0], 1
mov ecx, 1
je 0x1400ee85f
pmovmskb eax, xmm8
xor ecx, ecx
test eax, eax
setne cl
tzcnt eax, eax
add rax, r13
and rax, r12
mov qword [rsp + 0xa8], rax
pcmpeqb xmm8, xmm6
pmovmskb eax, xmm8
test eax, eax
jne 0x1400ee95c
mov qword [rsp + 0xb0], rcx
mov rax, qword [rsp + 0xd0]
add r13, rax
add r13, 0x10
add rax, 0x10
mov qword [rsp + 0xd0], rax
jmp 0x1400ee7da
mov rsi, qword [rsp + 0xc8]
mov qword [rbx - 8], rsi
test rdi, rdi
je 0x1400ee8c0
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x90]
call sub.kernel32.dll_HeapFree
cmp rsi, qword [rsp + 0x128]
jne 0x1400ee8e2
lea rcx, [rsp + 0x128]
mov rdx, rsi
call fcn.1400f35d0
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x130]
imul rcx, rsi, 0xb0
mov rdx, qword [rsp + 0xa0]
mov qword [rax + rcx], rdx
mov qword [rax + rcx + 8], r14
mov qword [rax + rcx + 0x10], rdi
mov qword [rax + rcx + 0x18], r15
add rcx, rax
add rcx, 0x20
mov r8d, 0x90
lea rdx, [rsp + 0x1c0]
call sub.msvcrt.dll_memcpy
inc rsi
mov qword [rsp + 0x138], rsi
mov rbp, qword [rsp + 0x100]
cmp qword [rsp + 0x108], rbp
lea rsi, [rsp + 0x2720]
lea rbx, [rsp + 0x98]
jne 0x1400edec8
jmp 0x1400eebf1
mov rax, qword [rsp + 0xa8]
movzx eax, byte [rbp + rax]
test al, al
js 0x1400ee987
movdqa xmm0, xmmword [rbp]
pmovmskb eax, xmm0
tzcnt eax, eax
mov qword [rsp + 0xa8], rax
movzx eax, byte [rbp + rax]
and al, 1
movzx eax, al
sub qword [rsp + 0x4c8], rax
mov rcx, qword [rsp + 0xa8]
lea rax, [rcx - 0x10]
and r12, rax
mov rax, qword [rsp + 0xe8]
mov byte [rbp + rcx], al
mov byte [r12 + rbp + 0x10], al
inc qword [rsp + 0x4d0]
shl rcx, 5
mov rax, rbp
sub rax, rcx
neg rcx
mov qword [rbp + rcx - 0x20], rdi
mov rcx, qword [rsp + 0x90]
mov qword [rax - 0x18], rcx
mov qword [rax - 0x10], rdi
mov rsi, qword [rsp + 0xc8]
mov qword [rax - 8], rsi
cmp rsi, qword [rsp + 0x128]
je 0x1400ee8ca
jmp 0x1400ee8e2
lea rcx, [rsp + 0x4b8]
lea rdx, [rsp + 0x4d8]
call fcn.1400f1320
jmp 0x1400ee78d
mov qword [rsp + 0x27a0], rax
mov rsi, qword [rsp + 0x2720]
mov r14, qword [rsp + 0x2728]
mov rdi, qword [rsp + 0x2730]
mov r15, qword [rsp + 0x2738]
mov r8d, 0x90
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x2740]
call sub.msvcrt.dll_memcpy
test dword [rsp + 0xa0], 0x800
je 0x1400ee6af
mov rbx, qword [rsp + 0xc0]
cmp qword [rsp + 0xe0], 0
jne 0x1400ee69e
jmp 0x1400ee6af
call sub.kernel32.dll_GetLastError
mov r14d, 1
lea rdi, [0x1401cd7ef]
mov r15d, 0x2c
lea rbp, [rsp + 0x2720]
mov rsi, qword [rsp + 0x4c0]
test rsi, rsi
jne 0x1400eead8
jmp 0x1400eebae
mov rdi, rax
xor r14d, r14d
lea rbp, [rsp + 0x2720]
mov rsi, qword [rsp + 0x4c0]
test rsi, rsi
je 0x1400eebae
movzx eax, byte [0x140205110]
mov ecx, 0x78
mov edx, 8
call fcn.14002b140
test rax, rax
je case.0x1400ebcb8.0
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmm0, xmmword [rsp + 0x128]
movups xmmword [rax + 0x10], xmm0
mov rax, qword [rsp + 0x138]
mov qword [rdi + 0x20], rax
mov rax, qword [rsp + 0x70]
mov qword [rdi + 0x28], rax
mov rax, qword [rsp + 0x38]
mov qword [rdi + 0x30], rax
mov rax, qword [rsp + 0x118]
mov qword [rdi + 0x38], rax
movdqu xmm0, xmmword [rsp + 0x4b8]
movups xmm1, xmmword [rsp + 0x4c8]
movups xmm2, xmmword [rsp + 0x4d8]
movdqu xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
movups xmmword [rdi + 0x60], xmm2
mov rax, qword [rsp + 0x110]
mov qword [rdi + 0x70], rax
mov r15, qword [rsp + 0x98]
mov r14d, 4
lea r13, [rsp + 0x720]
lea rbp, [rsp + 0x2720]
jmp 0x1400ea43c
lea rbp, [rsp + 0x2720]
jmp 0x1400eebe2
call sub.kernel32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
jmp 0x1400eeabc
mov r14d, 1
mov r15d, 0x20
lea rdi, [0x1401cd8a9]
lea rdi, [0x1401cd79f]
mov r14d, 1
lea rbp, [rsp + 0x2720]
jmp 0x1400eebe2
invalid
call sub.kernel32.dll_GetLastError
ud2
call fcn.1400e1a40
mov eax, dword [rsp + 0x2748]
cmp eax, dword [rsp + 0x274c]
lea rbp, [rsp + 0x2720]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x70]
jne 0x1400edc2d
mov rax, qword [rsp + 0x2758]
mov r12, qword [rsp + 0x2740]
add r12, rax
jae 0x1400eeec3
lea rdi, str.Invalid_central_directory_size_or_offsetSupport_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryIWbemClassWrapperinner
mov r15d, 0x28
mov r14d, 1
jmp 0x1400eebe2
mov rsi, rax
mov rbp, qword [rsp + 0x2730]
jmp 0x1400edc78