Function at 0x140005b70
Capabilities:
Create thread
Encode data using xor
Execute anti-debugging instructions
Find taskbar
Link many functions at runtime
Parse pe header
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1940]
mov eax, 0x1a40
call fcn.140022f00
sub rsp, rax
mov qword [rbp + 0x688], 0xfffffffffffffffe
mov qword [rsp + 0x1a70], rbx
mov qword [rsp + 0x1a78], rsi
mov qword [rsp + 0x1a80], rdi
mov rax, qword [0x140053408]
xor rax, rsp
mov qword [rbp + 0x1930], rax
mov edx, 0xc
lea rcx, str._Crashed
call qword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
xor r12d, r12d
mov dword [rbp + 0x168], r12d
lea rdx, [0x140044770]
lea rcx, [rbp + 0xf40]
call fcn.1400026a4
lea rax, section..rdata
mov qword [rbp + 0xf40], rax
lea rcx, [rbp + 0xf40]
call fcn.1400027f8
lea rdx, [0x14001e6d0]
call fcn.140002930
mov rdi, qword [rax + 8]
cmp dword [rdi], 5
jbe 0x140005ca6
movabs rdx, 0x200000000000
test qword [rdi + 0x10], rdx
je 0x140005ca6
mov rax, qword [rdi + 0x18]
and rax, rdx
cmp rax, qword [rdi + 0x18]
jne 0x140005ca6
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
mov dword [rbp + 0x398], eax
lea rax, [rbp + 0x398]
mov qword [rbp + 0x1580], rax
mov qword [rbp + 0x1588], 4
lea rcx, [rbp + 0xf40]
call fcn.140021ffc
mov r9, rax
mov r8, qword [rbp + 0xf70]
add r8, 8
lea rax, [rbp + 0x1560]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
lea rdx, [0x1400476e4]
mov rcx, rdi
call fcn.14002f334
cmp dword [rbp + 0xf60], r12d
jne 0x140005cbb
lea rcx, [rbp + 0xf48]
call fcn.140001e9c
mov edi, 1
mov r15d, 0x80004005
cmp byte [0x140053c3b], r12b
jne 0x1400106c8
mov qword [rbp + 0x378], r12
mov dword [rbp + 0x80], r12d
mov dword [rbp + 0x164], r12d
mov dword [rbp + 0xf8], r12d
mov dword [rbp + 0x88], r12d
nop word [rax + rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], edi
jne 0x140005d00
lea r13, [0x140041a20]
lea rdi, [0x1400543d0]
lea r15, section..data
mov eax, dword [0x140053c1c]
test eax, eax
jne 0x140006380
mov r14d, r12d
mov qword [rbp + 0x2f8], r12
mov qword [rbp + 0x5c8], r12
mov ecx, 0x338
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x14000635e
mov esi, r12d
or r13d, 0xffffffff
mov edi, r12d
mov dword [rbp - 8], r12d
mov r10d, r12d
mov dword [rbp + 0x18], r12d
lea r11, [rax + 7]
lea r15, [0x140044aa2]
mov r12d, 0x67
nop dword [rax]
movzx r9d, byte [r15 - 2]
shl r9d, 8
movzx eax, byte [r15 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r15]
or r9d, eax
shl r9d, 8
movzx eax, byte [r15 + 1]
or r9d, eax
movzx r8d, byte [r15 + 2]
shl r8d, 8
movzx eax, byte [r15 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r15 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r15 + 5]
or r8d, eax
xor r10d, r9d
xor edi, r8d
lea r15, [r15 + 8]
xor edi, r10d
xor edi, 0xac987321
lea eax, [rdi + 0x54969fa2]
rol eax, 5
mov ecx, edi
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor edi, eax
mov eax, edi
shr eax, 0xd
imul ecx, edi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor edi, edx
lea eax, [rdi + 0x7f1137f]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor edi, eax
mov eax, edi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, edi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea edi, [r10 - 0x7f1]
xor edi, ecx
xor edi, 0xab69605e
mov eax, edi
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, edi
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor edi, ecx
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
xor r10d, edi
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
sub eax, 0xab69
imul eax, eax, 0x137f
xor edi, eax
lea eax, [rdi - 0x7f1137f]
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r10d, eax
lea eax, [r10 - 0x54969fa2]
rol eax, 3
mov ecx, r10d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
lea eax, [rdi - 0x54969fa2]
rol eax, 0xf
mov ecx, edi
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, 0x7f1137f
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor r10d, ecx
mov dword [rbp + 0x18], r10d
xor edi, r13d
mov dword [rbp - 8], edi
mov byte [r11 - 4], r10b
ror dword [rbp + 0x18], 8
movzx eax, byte [rbp - 8]
mov byte [r11], al
ror dword [rbp - 8], 8
movzx eax, byte [rbp + 0x18]
mov byte [r11 - 5], al
ror dword [rbp + 0x18], 8
movzx eax, byte [rbp - 8]
mov byte [r11 - 1], al
ror dword [rbp - 8], 8
movzx eax, byte [rbp + 0x18]
mov byte [r11 - 6], al
ror dword [rbp + 0x18], 8
movzx eax, byte [rbp - 8]
mov byte [r11 - 2], al
ror dword [rbp - 8], 8
movzx eax, byte [rbp + 0x18]
mov byte [r11 - 7], al
movzx eax, byte [rbp - 8]
mov byte [r11 - 3], al
mov r10d, dword [rbp + 0x18]
ror r10d, 8
mov dword [rbp + 0x18], r10d
mov edi, dword [rbp - 8]
ror edi, 8
mov dword [rbp - 8], edi
mov esi, r9d
mov r13d, r8d
lea r11, [r11 + 8]
sub r12, 1
jne 0x140005d80
mov rax, r12
xorps xmm2, xmm2
xorps xmm1, xmm1
mov esi, r12d
mov r13d, r12d
movdqu xmm0, xmmword [rax + rbx]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rax + rbx + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140006092
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14000610e
nop dword [rax]
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x338
jb 0x140006100
movzx eax, cl
cmp rax, qword [0x140044dd8]
jne 0x14000634f
mov qword [rbp + 0x2f8], rbx
mov qword [rbp + 0x5c8], 0x338
mov byte [rbx + 0x337], sil
mov r15d, 0x60
mov r8d, r15d
xor edx, edx
lea rdi, [0x1400543d0]
mov rcx, rdi
call sub.msvcrt.dll_memset
cmp byte [rbx], sil
je 0x140006295
nop word [rax + rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x140006170
lea rbx, [rbx + rax*2]
add rbx, 2
mov eax, r13d
lea rcx, [rax + rax*2]
lea r15, [rdi + rcx*8]
mov r8, r15
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
je 0x14000635e
mov r14d, r12d
mov rax, qword [r15]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x1400061b9
mov r14d, 0xc000007b
jmp 0x14000621d
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x1400061cd
mov r14d, 0xc000007b
jmp 0x14000621d
add rcx, qword [r15]
cmp rcx, qword [r15]
jae 0x1400061dd
mov r14d, 0xc000007b
jmp 0x14000621d
cmp dword [rcx], 0x4550
je 0x1400061ed
mov r14d, 0xc000007b
jmp 0x14000621d
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14000620b
mov r14d, 0xc000000d
jmp 0x14000621d
mov rax, qword [rcx + 0x88]
mov qword [r15 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r15 + 8], eax
mov r12d, dword [rbx]
add rbx, 4
xor ecx, ecx
mov edi, ecx
test r12d, r12d
je 0x14000626f
nop dword [rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140006237
inc rbx
add rbx, rax
test r14d, r14d
js 0x140006266
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x140006288
mov ecx, esi
lea rdx, section..data
mov qword [rdx + rcx*8], rax
inc esi
inc edi
cmp edi, r12d
jb 0x140006230
inc r13d
cmp byte [rbx], 0
mov r12d, 0
lea rdi, [0x1400543d0]
jne 0x140006160
lea rdi, [0x1400543d0]
mov r15d, 0x60
cmp qword [rbp + 0x2f8], 0
je 0x1400062b7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rbp + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r14d, r14d
jns 0x140006369
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400062d3
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, 1
jne 0x1400062c5
mov r8, r15
xor edx, edx
lea rcx, [0x1400543d0]
call sub.msvcrt.dll_memset
lea r15, section..data
mov rcx, r15
lea r13, [0x140041a20]
mov rdx, r13
lea edi, [rbx + 0xb]
nop word [rax + rax]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub rdi, 1
jne 0x140006310
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
xor r12d, r12d
jmp 0x140006388
mov rcx, rbx
call fcn.14003e590
lea rdi, [0x1400543d0]
mov r14d, 0xc000007a
jmp 0x14000628f
mov eax, dword [0x140053c1c]
lea r15, section..data
lea r13, [0x140041a20]
xor r12d, r12d
inc eax
mov dword [0x140053c1c], eax
mov eax, r12d
xchg dword [0x1400544d8], eax
mov qword [rbp + 0x308], r12
mov qword [rbp + 0x300], r12
mov r14d, r12d
mov edi, r12d
mov rax, qword gs:[0x60]
cmp dword [rax + 0x2c0], 0
je 0x140006635
mov rax, qword [0x140053110]
call qword [case.0x140012211.0]
mov rsi, rax
test rax, rax
jne 0x1400063f7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
mov edi, eax
jle 0x1400063e5
movzx edi, ax
or edi, 0x80070000
test edi, edi
js 0x14000663c
mov edi, 0x80004005
jmp 0x14000663c
mov qword [rbp + 0x218], r12
mov r9d, r12d
mov rbx, r12
test rbx, rbx
mov r8, r12
je 0x14000640f
mov r8, rbx
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
mov edx, 2
mov rcx, rsi
mov rax, qword [0x140053130]
call qword [case.0x140012211.0]
test eax, eax
jne 0x14000648a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000646e
test rbx, rbx
jne 0x140006472
mov ecx, dword [rbp + 0x180]
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x140006467
mov qword [rbp + 0x218], rax
mov r9d, dword [rbp + 0x180]
jmp 0x140006404
mov edi, 0x8007000e
jmp 0x140006491
test eax, eax
jne 0x140006479
mov edi, 0x80004005
jmp 0x140006498
jg 0x14000647f
mov edi, eax
jmp 0x140006498
movzx edi, ax
or edi, 0x80070000
jmp 0x140006498
mov qword [rbp + 0x308], rbx
mov qword [rbp + 0x218], r12
lea rcx, [rbp + 0x218]
call fcn.14001de98
test edi, edi
js 0x14000663c
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
mov ecx, eax
mov rax, qword [0x140053128]
call qword [case.0x140012211.0]
mov rsi, rax
test rax, rax
je 0x1400063d0
mov qword [rbp + 0x1e8], r12
mov edi, r12d
mov r9d, r12d
mov rbx, r12
nop dword [rax]
test rbx, rbx
mov r8, r12
je 0x1400064eb
mov r8, rbx
lea rax, [rbp + 0x184]
mov qword [rsp + 0x20], rax
mov edx, 2
mov rcx, rsi
mov rax, qword [0x140053130]
call qword [case.0x140012211.0]
test eax, eax
jne 0x140006566
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000654a
test rbx, rbx
jne 0x14000654e
mov ecx, dword [rbp + 0x184]
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x140006543
mov qword [rbp + 0x1e8], rax
mov r9d, dword [rbp + 0x184]
jmp 0x1400064e0
mov edi, 0x8007000e
jmp 0x14000656d
test eax, eax
jne 0x140006555
mov edi, 0x80004005
jmp 0x140006574
jg 0x14000655b
mov edi, eax
jmp 0x140006574
movzx edi, ax
or edi, 0x80070000
jmp 0x140006574
mov qword [rbp + 0x300], rbx
mov qword [rbp + 0x1e8], r12
lea rcx, [rbp + 0x1e8]
call fcn.14001de98
test edi, edi
js 0x14000663c
mov rax, qword [rbp + 0x308]
test rax, rax
je 0x140006635
mov rdx, r12
lea r8, str.WinSta0
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140006635
cmp rdx, 8
jne 0x1400065b0
mov rax, qword [rbp + 0x300]
test rax, rax
je 0x140006635
mov rdx, r12
lea r8, str.Default
nop dword [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140006635
cmp rdx, 8
jne 0x1400065e0
xor eax, eax
mov dword [rbp + 0x188], eax
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov rcx, rax
mov r9d, 4
lea r8, [rbp + 0x188]
lea edx, [r9 + 7]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_GetProcessMitigationPolicy]
test eax, eax
je 0x1400063d0
test byte [rbp + 0x188], 0xf
mov ecx, 1
cmove r14d, ecx
mov dword [rbp + 0x88], r14d
lea rcx, [rbp + 0x300]
call fcn.14001de98
lea rcx, [rbp + 0x308]
call fcn.14001de98
mov eax, dword [rbp + 0x88]
test edi, edi
cmovs eax, r12d
mov dword [rbp + 0x88], eax
mov dword [rbp + 0xf8], r12d
mov edx, 4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
mov rcx, rax
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x1e0], rax
call fcn.14003e588
test al, al
jne 0x140010540
test rcx, rcx
je 0x140010540
mov r15, r12
mov r13, r12
xor eax, eax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov dword [rbp + 0x1a0], r12d
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rax
mov dword [rbp + 0x8c], r12d
lea rax, [0x1400534f0]
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x3d0], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rsi, rax
lea rdi, [0x140053430]
test rax, rax
jne 0x140006720
mov r14d, 0xc0000017
mov dword [rsp + 0x70], r14d
jmp 0x14000963d
mov r8, qword [rbp + 0x3d0]
mov rdx, qword [rbp + 0x440]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov r15, rsi
mov qword [rsp + 0x78], rsi
mov ebx, dword [rbp + 0x3d0]
mov qword [rbp + 0x448], rdi
mov qword [rbp + 0x400], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r12, rax
test rax, rax
jne 0x140006785
mov r14d, 0xc0000017
mov dword [rsp + 0x70], r14d
jmp 0x14000963a
mov r8, qword [rbp + 0x400]
mov rdx, qword [rbp + 0x448]
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov r13, r12
mov qword [rbp - 0x60], r12
mov r15, qword [rbp + 0x400]
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x410], rax
mov edx, 8
mov dword [rbp + 0x84], edx
lea eax, [rbx + 4]
or ecx, 0xffffffff
cmp eax, 4
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
mov edi, edx
cmp eax, 4
jb 0x140009637
mov edx, ecx
mov dword [rbp + 0x84], ecx
mov edi, ecx
lea eax, [rcx + 8]
or edi, 0xffffffff
cmp eax, 8
cmovae edi, eax
mov r14d, 0x10000000
mov r10d, 0xd0000095
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
lea ecx, [r15 + 4]
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae edx, eax
mov dword [rbp + 0x84], edx
jb 0x140009637
lea eax, [rdx + rdi]
or ecx, 0xffffffff
cmp eax, edi
cmovae ecx, eax
mov r14d, 0x10000000
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
mov dword [rbp + 0x84], 0xc
lea eax, [rcx + 0xc]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
mov r14d, 0x10000000
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
lea r8, [rbp + 0x310]
call fcn.1400022d0
test eax, eax
jns 0x1400068c0
xor r12d, r12d
mov qword [rbp + 0x310], r12
mov r14d, 0xc000003e
mov dword [rsp + 0x70], r14d
mov r15, rsi
jmp 0x14000963d
mov rax, qword [rbp + 0x310]
inc rax
mov qword [rbp + 0x310], rax
lea ecx, [rax*2 + 4]
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
mov edx, dword [rbp + 0x84]
cmp ecx, 4
cmovae edx, eax
mov dword [rbp + 0x84], edx
jb 0x140009637
lea eax, [rdx + rdi]
or edx, 0xffffffff
cmp eax, edi
cmovae edx, eax
mov r14d, 0x10000000
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
mov dword [rbp + 0x84], 8
lea eax, [rdx + 8]
or ecx, 0xffffffff
cmp eax, edx
cmovae ecx, eax
mov r14d, 0x10000000
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
mov dword [rbp + 0x84], 8
lea eax, [rcx + 8]
or edx, 0xffffffff
cmp eax, ecx
cmovae edx, eax
mov r14d, 0x10000000
cmovb r14d, r10d
mov dword [rsp + 0x70], r14d
jb 0x14000960c
mov dword [rbp - 0x54], edx
mov edi, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdx, rax
test rax, rax
jne 0x1400069ab
mov r14d, 0xc0000017
jmp 0x140009632
mov qword [rbp - 0x50], rdx
xor r9d, r9d
mov dword [rbp - 0x58], r9d
mov dword [rbp + 0x3a0], r9d
lea rdi, [rax + 4]
cmp rdi, rdx
jb 0x140009604
mov ecx, dword [rbp - 0x54]
add rcx, rdx
add rax, 8
cmp rax, rcx
ja 0x14000962c
mov dword [rdx], 4
mov eax, dword [rbp + 0x3a0]
mov dword [rdi], eax
mov edi, dword [rbp - 0x58]
inc edi
mov dword [rbp - 0x58], edi
test ebx, ebx
je 0x140006ba8
cmp qword [rbp - 0x50], r9
jne 0x140006a5d
lea r8, [rbp + 0x3a8]
mov edx, ebx
lea ecx, [r9 + 4]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x128]
test eax, eax
cmovns edx, dword [rbp + 0x3a8]
mov dword [rbp + 0x128], edx
js 0x140006b31
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edi, dword [rbp - 0x58]
test eax, eax
js 0x140006b31
inc edi
mov dword [rbp - 0x58], edi
jmp 0x140006b3a
mov r8, qword [rbp - 0x50]
mov r10d, r9d
test edi, edi
je 0x140006adb
mov r9d, dword [rbp + 0x128]
nop
mov r11, r8
mov ecx, dword [r8]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r9d, eax
mov dword [rbp + 0x128], r9d
jb 0x140006b2e
mov edx, r9d
mov rcx, r8
add rdx, r8
or rax, 0xffffffffffffffff
cmp rdx, r8
cmovae rax, rdx
mov r8, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140006b2e
inc r10d
cmp r10d, edi
jb 0x140006a70
lea rax, [r8 + 4]
or r9, 0xffffffffffffffff
cmp rax, r8
cmovae r9, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, r8
jb 0x140006b2e
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [rbx + 4]
add rax, r8
cmp rax, rcx
ja 0x14000962c
mov dword [r8], ebx
mov r8, rbx
mov rdx, rsi
mov rcx, r9
call sub.msvcrt.dll_memcpy
mov edi, dword [rbp - 0x58]
inc edi
mov dword [rbp - 0x58], edi
xor r9d, r9d
test r14d, r14d
js 0x140009637
test r15d, r15d
je 0x140006c93
cmp qword [rbp - 0x50], 0
jne 0x140006bb8
lea r8, [rbp + 0x3ac]
mov edx, r15d
mov ecx, 4
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x12c]
test eax, eax
cmovns edx, dword [rbp + 0x3ac]
mov dword [rbp + 0x12c], edx
js 0x140006c9e
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edi, dword [rbp - 0x58]
test eax, eax
js 0x140006c9e
inc edi
mov dword [rbp - 0x58], edi
jmp 0x140006ca7
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x140006b31
mov r8, qword [rbp - 0x50]
mov r10d, r9d
test edi, edi
je 0x140006c3b
mov r9d, dword [rbp + 0x12c]
nop word [rax + rax]
mov r11, r8
mov ecx, dword [r8]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r9d, eax
mov dword [rbp + 0x12c], r9d
jb 0x140006c9e
mov edx, r9d
mov rcx, r8
add rdx, r8
or rax, 0xffffffffffffffff
cmp rdx, r8
cmovae rax, rdx
mov r8, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140006c9e
inc r10d
cmp r10d, edi
jb 0x140006bd0
lea rax, [r8 + 4]
or r9, 0xffffffffffffffff
cmp rax, r8
cmovae r9, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, r8
jb 0x140006c9e
mov edx, r15d
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [rdx + 4]
add rax, r8
cmp rax, rcx
ja 0x14000962c
mov dword [r8], r15d
mov r8d, edx
mov rdx, r12
mov rcx, r9
call sub.msvcrt.dll_memcpy
mov edi, dword [rbp - 0x58]
inc edi
mov dword [rbp - 0x58], edi
jmp 0x140006c9e
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x140009637
mov rax, qword [rbp + 0x410]
mov qword [rbp + 0x450], rax
cmp qword [rbp - 0x50], 0
jne 0x140006d15
lea r8, [rbp + 0x240]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x130]
test eax, eax
cmovns edx, dword [rbp + 0x240]
mov dword [rbp + 0x130], edx
js 0x140006df7
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
test eax, eax
js 0x140006df7
inc dword [rbp - 0x58]
jmp 0x140006e00
mov r8, qword [rbp - 0x50]
xor r12d, r12d
mov r10d, r12d
test edi, edi
je 0x140006d9b
mov r9d, dword [rbp + 0x130]
nop word [rax + rax]
mov r11, r8
mov ecx, dword [r8]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r9d, eax
mov dword [rbp + 0x130], r9d
jb 0x140006df7
mov edx, r9d
mov rcx, r8
add rdx, r8
or rax, 0xffffffffffffffff
cmp rdx, r8
cmovae rax, rdx
mov r8, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140006df7
inc r10d
cmp r10d, edi
jb 0x140006d30
lea rax, [r8 + 4]
or rdx, 0xffffffffffffffff
cmp rax, r8
cmovae rdx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, r8
jb 0x140006df7
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [r8 + 0xc]
cmp rax, rcx
jbe 0x140006de1
mov r14d, 0xc0000023
mov dword [rsp + 0x70], r14d
mov r15, rsi
jmp 0x14000963d
mov dword [r8], 8
movsd xmm0, qword [rbp + 0x450]
movsd qword [rdx], xmm0
inc dword [rbp - 0x58]
test r14d, r14d
js 0x140009637
lea r8, [rbp + 0x318]
call fcn.1400022d0
test eax, eax
jns 0x140006e2d
xor r12d, r12d
mov qword [rbp + 0x318], r12
mov r14d, 0xc000003e
mov dword [rsp + 0x70], r14d
mov r15, rsi
jmp 0x14000963d
mov rcx, qword [rbp + 0x318]
lea rax, [rcx + 1]
or rdx, 0xffffffffffffffff
cmp rax, rcx
cmovae rdx, rax
mov qword [rbp + 0x318], rdx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rcx
jb 0x140006fbe
lea r11d, [rdx + rdx]
test r11d, r11d
je 0x140006fb3
cmp qword [rbp - 0x50], 0
jne 0x140006ed8
lea r8, [rbp + 0x244]
mov edx, r11d
mov ecx, 4
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x134]
test eax, eax
cmovns edx, dword [rbp + 0x244]
mov dword [rbp + 0x134], edx
js 0x140006fbe
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
test eax, eax
js 0x140006fbe
inc dword [rbp - 0x58]
xor ecx, ecx
mov r14d, ecx
mov dword [rsp + 0x70], ecx
jmp 0x140006fbe
mov rdi, qword [rbp - 0x50]
xor ecx, ecx
mov r9d, ecx
cmp dword [rbp - 0x58], ecx
jbe 0x140006f5b
mov r8d, dword [rbp + 0x134]
nop dword [rax]
mov r10, rdi
mov ecx, dword [rdi]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r8d, eax
mov dword [rbp + 0x134], r8d
jb 0x140006fbe
mov edx, r8d
mov rcx, rdi
add rdx, rdi
or rax, 0xffffffffffffffff
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140006fbe
inc r9d
cmp r9d, dword [rbp - 0x58]
jb 0x140006ef0
lea rax, [rdi + 4]
or r9, 0xffffffffffffffff
cmp rax, rdi
cmovae r9, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdi
jb 0x140006fbe
mov r8d, r11d
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [r11 + 4]
add rax, rdi
cmp rax, rcx
jbe 0x140006f9c
mov r14d, 0xc0000023
jmp 0x140006fb9
mov dword [rdi], r11d
lea rdx, [0x140043770]
mov rcx, r9
call sub.msvcrt.dll_memcpy
inc dword [rbp - 0x58]
jmp 0x140006fbe
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x140009637
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x250], eax
cmp qword [rbp - 0x50], 0
jne 0x140007032
lea r8, [rbp + 0x248]
mov edx, 4
mov ecx, edx
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x138]
test eax, eax
cmovns edx, dword [rbp + 0x248]
mov dword [rbp + 0x138], edx
js 0x140007112
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
test eax, eax
js 0x140007112
inc dword [rbp - 0x58]
jmp 0x14000711b
mov rdi, qword [rbp - 0x50]
xor r12d, r12d
mov r9d, r12d
cmp dword [rbp - 0x58], r12d
jbe 0x1400070bb
mov r8d, dword [rbp + 0x138]
nop dword [rax]
mov r10, rdi
mov ecx, dword [rdi]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r8d, eax
mov dword [rbp + 0x138], r8d
jb 0x140007112
mov edx, r8d
mov rcx, rdi
add rdx, rdi
or rax, 0xffffffffffffffff
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140007112
inc r9d
cmp r9d, dword [rbp - 0x58]
jb 0x140007050
lea rax, [rdi + 4]
or rdx, 0xffffffffffffffff
cmp rax, rdi
cmovae rdx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdi
jb 0x140007112
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [rdi + 8]
cmp rax, rcx
jbe 0x140007101
mov r14d, 0xc0000023
mov dword [rsp + 0x70], r14d
mov r15, rsi
jmp 0x14000963d
mov dword [rdi], 4
mov eax, dword [rbp + 0x250]
mov dword [rdx], eax
inc dword [rbp - 0x58]
test r14d, r14d
js 0x140009637
mov dword [rbp + 0x260], 4
cmp qword [rbp - 0x50], 0
jne 0x140007184
lea r8, [rbp + 0x258]
mov edx, 4
mov ecx, edx
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
mov edx, dword [rbp + 0x100]
test eax, eax
cmovns edx, dword [rbp + 0x258]
mov dword [rbp + 0x100], edx
js 0x140007262
lea r8, [rbp - 0x54]
mov ecx, dword [rbp - 0x54]
call fcn.14003e5f8
mov r14d, eax
mov dword [rsp + 0x70], eax
test eax, eax
js 0x140007262
inc dword [rbp - 0x58]
jmp 0x14000726b
mov rdi, qword [rbp - 0x50]
xor r12d, r12d
mov r9d, r12d
cmp dword [rbp - 0x58], r12d
jbe 0x14000720b
mov r8d, dword [rbp + 0x100]
nop dword [rax + rax]
mov r10, rdi
mov ecx, dword [rdi]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp ecx, 4
cmovae r8d, eax
mov dword [rbp + 0x100], r8d
jb 0x140007262
mov edx, r8d
mov rcx, rdi
add rdx, rdi
or rax, 0xffffffffffffffff
cmp rdx, rdi
cmovae rax, rdx
mov rdi, rax
cmp rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rdx, rcx
jb 0x140007262
inc r9d
cmp r9d, dword [rbp - 0x58]
jb 0x1400071a0
lea rax, [rdi + 4]
or rdx, 0xffffffffffffffff
cmp rax, rdi
cmovae rdx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdi
jb 0x140007262
mov ecx, dword [rbp - 0x54]
add rcx, qword [rbp - 0x50]
lea rax, [rdi + 8]
cmp rax, rcx
jbe 0x140007251
mov r14d, 0xc0000023
mov dword [rsp + 0x70], r14d
mov r15, rsi
jmp 0x14000963d
mov dword [rdi], 4
mov eax, dword [rbp + 0x260]
mov dword [rdx], eax
inc dword [rbp - 0x58]
test r14d, r14d
js 0x140009637
mov dword [rbp + 0x5b8], 8
xor edi, edi
mov esi, edi
mov qword [rbp + 0x140], rdi
mov ebx, edi
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x70], rdi
mov r15d, edi
mov dword [rbp - 0x80], edi
mov r12d, edi
mov qword [rbp - 0x30], rdi
mov dword [rbp + 0x68], edi
mov r13d, edi
mov qword [rbp - 0x78], rdi
mov qword [rbp + 0x30], rdi
mov dword [rbp + 0x10c], edi
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x408], rax
mov eax, dword [rbp - 0x54]
add eax, 8
or ecx, 0xffffffff
cmp eax, 8
cmovae ecx, eax
mov dword [rbp + 0x108], ecx
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, 8
jb 0x1400073bd
mov eax, ecx
add rax, 7
and eax, 0xfffffff8
cmp eax, ecx
jae 0x1400072fe
mov r14d, 0xc0000095
jmp 0x1400073bd
mov dword [rbp + 0x108], eax
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140007330
mov r14d, 0xc0000017
jmp 0x1400073bb
mov eax, dword [rbp - 0x58]
mov dword [rdi], eax
lea rax, [rdi + 4]
or rdx, 0xffffffffffffffff
cmp rax, rdi
cmovae rdx, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdi
jb 0x1400073a7
mov eax, dword [rbp - 0x54]
mov dword [rdx], eax
lea rax, [rdx + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdx
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdx
jb 0x1400073a7
mov edx, dword [rbp + 0x108]
mov rax, qword [rbp + 0x408]
mov qword [rdx + rdi - 8], rax
mov r8d, dword [rbp - 0x54]
mov rdx, qword [rbp - 0x50]
call sub.msvcrt.dll_memcpy
mov rsi, rdi
mov qword [rbp + 0x140], rdi
mov ebx, dword [rbp + 0x108]
jmp 0x1400073bb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor edi, edi
or r14d, 0x10000000
mov dword [rsp + 0x70], r14d
jl 0x140008e81
mov qword [rbp + 0x460], rdi
mov qword [rbp + 0x468], rdi
mov qword [rbp + 0x470], rdi
mov qword [rbp + 0x478], rdi
mov qword [rbp + 0x320], rdi
mov qword [rbp + 0x458], rdi
mov r13, rdi
mov qword [rbp - 0x10], rdi
test rsi, rsi
jne 0x140007410
mov r14d, 0xc000000d
jmp 0x140007bfd
mov qword [rbp + 0x58], rbx
test rbx, rbx
je 0x140007b4e
lea rdi, [rbx + 8]
mov qword [rbp + 0xc0], rdi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov qword [rbp + 0x78], rax
test rax, rax
je 0x140007b4e
mov dword [rbp + 0x10], r15d
mov rcx, r12
test rbx, rbx
je 0x1400074f0
cmp rbx, 0x20
jb 0x1400074d5
mov rdx, rbx
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
nop dword [rax]
movdqu xmm0, xmmword [rcx + rsi]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + rsi + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x140007470
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd r15d, xmm1
mov dword [rbp + 0x10], r15d
cmp rcx, rbx
jae 0x1400074f0
nop word [rax + rax]
xor r15b, byte [rcx + rsi]
inc rcx
cmp rcx, rbx
jb 0x1400074e0
mov dword [rbp + 0x10], r15d
movabs rcx, 0xc81ecb17b1b54a58
mov qword [rbp + 0xb48], rcx
mov r9, rsi
mov rdi, rax
mov edx, r12d
mov dword [rbp - 0x18], edx
or r10d, 0xffffffff
mov dword [rbp - 0x3c], r10d
mov esi, r12d
mov r14d, r12d
mov r11, rbx
and r11d, 7
je 0x1400075ef
mov r8d, r12d
test r11d, r11d
je 0x14000756c
mov edx, 0x38
nop word [rax + rax]
lea r10, [r9 + 1]
movzx eax, byte [r9]
cmp r8d, 4
jge 0x140007558
lea ecx, [rdx - 0x20]
shl eax, cl
or r14d, eax
jmp 0x14000755e
mov ecx, edx
shl eax, cl
or esi, eax
inc r8d
sub edx, 8
mov r9, r10
cmp r8d, r11d
jl 0x140007540
mov edx, r14d
xor edx, 0xb17a307a
mov dword [rbp - 0x18], edx
mov r10d, esi
xor r10d, 0x42f6b18d
mov dword [rbp - 0x3c], r10d
mov eax, r12d
test r11d, r11d
jle 0x1400075b8
nop
lea rcx, [rdi + 1]
cmp eax, 4
jge 0x1400075a0
rol edx, 8
mov byte [rdi], dl
jmp 0x1400075a7
rol r10d, 8
mov byte [rdi], r10b
inc eax
mov rdi, rcx
cmp eax, r11d
jl 0x140007590
mov edx, dword [rbp - 0x18]
mov r10d, dword [rbp - 0x3c]
lea eax, [r11 - 4]
test eax, eax
jle 0x1400075d6
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov dword [rbp - 0x3c], r10d
jmp 0x1400075ef
mov r10d, r12d
mov dword [rbp - 0x3c], r12d
test eax, eax
jns 0x1400075ef
neg eax
shl eax, 3
mov ecx, eax
shr edx, cl
shl edx, cl
mov dword [rbp - 0x18], edx
mov r12, rbx
shr r12, 3
test r12, r12
je 0x140007931
mov r11d, dword [rbp + 0xb4c]
mov eax, r11d
shr eax, 0x10
mov dword [rbp - 0x68], eax
movzx r13d, r11w
lea rbx, [rdi + 7]
lea r15, [r9 + 2]
nop dword [rax + rax]
movzx r9d, byte [r15 - 2]
shl r9d, 8
movzx eax, byte [r15 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r15]
or r9d, eax
shl r9d, 8
movzx eax, byte [r15 + 1]
or r9d, eax
movzx r8d, byte [r15 + 2]
shl r8d, 8
movzx eax, byte [r15 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r15 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r15 + 5]
or r8d, eax
xor r10d, r8d
lea r15, [r15 + 8]
lea edi, [r10 - 0x4a58]
xor edi, r9d
xor edi, edx
xor edi, r11d
mov edx, edi
xor edx, r11d
ror edx, 0xf
mov ecx, edi
ror ecx, 7
movzx eax, word [rbp + 0xb4a]
imul eax, edx
add ecx, eax
xor r10d, ecx
lea edx, [r10 - 0x4e4ab5a8]
ror edx, 9
mov ecx, r10d
ror ecx, 0xa
mov eax, r13d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, r13d
xor ecx, edi
rol ecx, 4
mov eax, edi
rol eax, 5
mov edx, dword [rbp - 0x68]
imul ecx, edx
add eax, ecx
xor r10d, eax
mov ecx, r10d
xor ecx, 0xb1b54a58
mov eax, r11d
sub eax, ecx
xor edi, eax
lea ecx, [rdi - 0x4a58]
movzx eax, word [rbp + 0xb4a]
imul ecx, eax
mov eax, edi
shr eax, 6
sub ecx, eax
xor r10d, ecx
mov eax, r10d
ror eax, 0xf
xor eax, r13d
imul eax, eax, 0x4a58
xor edi, eax
mov eax, edi
not eax
ror eax, 3
add eax, edx
imul eax, r13d
xor r10d, eax
mov eax, r10d
sub eax, r11d
sub eax, 0x4a58
xor edi, eax
mov ecx, edi
ror ecx, 0xa
mov eax, edi
xor eax, edx
movzx edx, word [rbp + 0xb4a]
imul eax, edx
xor ecx, eax
xor r10d, ecx
mov edx, r10d
xor edx, 0x4a58
rol edx, 6
mov ecx, r10d
ror ecx, 3
mov eax, r13d
imul eax, edx
xor ecx, eax
xor edi, ecx
mov eax, edi
ror eax, 0xf
sub eax, dword [rbp - 0x68]
imul eax, eax, 0x4a58
xor r10d, eax
mov eax, r10d
xor eax, dword [rbp - 0x68]
imul ecx, eax, 0x4a58
mov eax, r10d
shr eax, 1
xor ecx, eax
xor edi, ecx
mov eax, r10d
sub eax, r13d
rol eax, 3
mov ecx, r10d
shr ecx, 0xf
imul eax, eax, 0x4a58
xor ecx, eax
xor edi, ecx
mov ecx, edi
sub ecx, r13d
movzx eax, word [rbp + 0xb4a]
imul ecx, eax
mov eax, edi
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
mov edx, 0xb1b54a58
sub edx, r10d
ror edx, 9
mov ecx, r10d
ror ecx, 0xb
mov eax, r13d
imul eax, edx
xor ecx, eax
xor edi, ecx
mov eax, edi
sub eax, dword [rbp - 0x68]
add eax, 0x4e4ab5a8
xor r10d, eax
mov edx, r10d
ror edx, 7
movzx eax, word [rbp + 0xb4a]
xor eax, r10d
imul ecx, eax, 0x4a58
sub ecx, edx
xor edi, ecx
mov edx, edi
xor edx, dword [rbp - 0x68]
rol edx, 4
mov ecx, edi
ror ecx, 0x10
movzx eax, word [rbp + 0xb4a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov edx, 0xb1b54a58
sub edx, r10d
ror edx, 0xa
mov ecx, r10d
ror ecx, 4
mov eax, r13d
imul eax, edx
add ecx, eax
xor edi, ecx
lea ecx, [rdi + 0x4e4ab5a8]
ror ecx, 4
mov eax, edi
ror eax, 9
imul ecx, dword [rbp - 0x68]
xor eax, ecx
xor r10d, eax
mov eax, r10d
xor eax, r11d
rol eax, 8
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x4a58
sub eax, ecx
xor edi, eax
mov edx, r11d
sub edx, edi
ror edx, 0xb
mov ecx, edi
ror ecx, 0xc
movzx eax, word [rbp + 0xb4a]
imul eax, edx
sub eax, ecx
xor r10d, eax
mov ecx, r10d
movzx eax, word [rbp + 0xb4a]
xor ecx, eax
imul ecx, r13d
mov eax, r10d
shr eax, 8
xor ecx, eax
xor edi, ecx
xor r10d, edi
xor edi, r14d
mov dword [rbp - 0x18], edi
xor esi, r11d
xor esi, r10d
xor esi, 0xb1b54a58
mov dword [rbp - 0x3c], esi
mov byte [rbx - 4], dil
ror dword [rbp - 0x18], 8
movzx eax, byte [rbp - 0x3c]
mov byte [rbx], al
ror dword [rbp - 0x3c], 8
movzx eax, byte [rbp - 0x18]
mov byte [rbx - 5], al
ror dword [rbp - 0x18], 8
movzx eax, byte [rbp - 0x3c]
mov byte [rbx - 1], al
ror dword [rbp - 0x3c], 8
movzx eax, byte [rbp - 0x18]
mov byte [rbx - 6], al
ror dword [rbp - 0x18], 8
movzx eax, byte [rbp - 0x3c]
mov byte [rbx - 2], al
ror dword [rbp - 0x3c], 8
movzx eax, byte [rbp - 0x18]
mov byte [rbx - 7], al
movzx eax, byte [rbp - 0x3c]
mov byte [rbx - 3], al
mov edx, dword [rbp - 0x18]
ror edx, 8
mov dword [rbp - 0x18], edx
mov r10d, dword [rbp - 0x3c]
ror r10d, 8
mov dword [rbp - 0x3c], r10d
mov r14d, r9d
mov esi, r8d
lea rbx, [rbx + 8]
sub r12, 1
jne 0x140007620
mov rbx, qword [rbp + 0x58]
mov r15d, dword [rbp + 0x10]
mov r13, qword [rbp - 0x10]
movzx eax, r15b
mov rsi, qword [rbp + 0x78]
mov qword [rsi + rbx], rax
mov qword [rbp + 0x320], rsi
mov rbx, qword [rbp + 0xc0]
mov qword [rbp + 0x458], rbx
lea rax, [0x1400534e0]
mov qword [rbp + 0x460], rax
mov qword [rbp + 0x468], 8
lea r14, [0x140053440]
mov qword [rbp + 0x470], r14
mov qword [rbp + 0x478], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x1400079ab
xor esi, esi
jmp 0x140007b30
mov dword [rax], ebx
mov ebx, ebx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, ebx
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x140007ab3
mov qword [rdi + 8], rax
mov r8d, ebx
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rdi + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x140007ab3
mov qword [rdi + 0x18], rax
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [r14 + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [r14 + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [r14 + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [r14 + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [r14 + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [r14 + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [r14 + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [r14 + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rdi + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x140007ab3
mov qword [rdi + 0x28], rax
xor esi, esi
mov r14d, esi
movsd xmm0, qword [0x1400534e0]
movsd qword [rax], xmm0
mov r13, rdi
jmp 0x140007b36
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x140007ad8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor esi, esi
mov qword [rdi + 8], rsi
jmp 0x140007ada
xor esi, esi
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x140007afb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x18], rsi
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x140007b1c
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x28], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov r14d, 0xc0000017
mov r15d, dword [rbp - 0x80]
mov r12d, r15d
test r14d, r14d
js 0x140007b54
mov qword [rbp + 0x210], r13
mov r13, rsi
jmp 0x140007b54
mov r14d, 0xc0000001
mov rdi, qword [rbp + 0x320]
test rdi, rdi
je 0x140007b7f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor ebx, ebx
mov qword [rbp + 0x320], rbx
jmp 0x140007b81
xor ebx, ebx
test r13, r13
je 0x140007bfd
mov rdi, qword [r13 + 8]
test rdi, rdi
je 0x140007ba7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 8], rbx
mov rdi, qword [r13 + 0x18]
test rdi, rdi
je 0x140007bc8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 0x18], rbx
mov rdi, qword [r13 + 0x28]
test rdi, rdi
je 0x140007be9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 0x28], rbx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
or r14d, 0x10000000
mov dword [rsp + 0x70], r14d
jl 0x140008e6a
mov rbx, qword [rbp + 0x210]
mov r8d, dword [rbx + 0x20]
mov edi, dword [rbx + 0x10]
mov eax, dword [rbx]
add eax, 4
or ecx, 0xffffffff
cmp eax, 4
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, 4
jb 0x140007cae
lea eax, [rcx + 4]
or edx, 0xffffffff
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, ecx
jb 0x140007cae
lea eax, [rdx + rdi]
or ecx, 0xffffffff
cmp eax, edx
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, edx
jb 0x140007cae
lea eax, [rcx + 4]
or edx, 0xffffffff
cmp eax, ecx
cmovae edx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, ecx
jb 0x140007cae
lea ecx, [rdx + r8]
or eax, 0xffffffff
cmp ecx, edx
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov edi, dword [rbp + 0x110]
cmp ecx, edx
cmovae edi, eax
mov dword [rbp + 0x110], edi
jmp 0x140007cb4
mov edi, dword [rbp + 0x110]
test r14d, r14d
js 0x140007e05
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140007ce7
mov r14d, 0xc0000017
jmp 0x140007e05
mov eax, dword [rbx]
mov dword [rdi], eax
lea rax, [rdi + 4]
or rsi, 0xffffffffffffffff
cmp rax, rdi
cmovae rsi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdi
jb 0x140007df1
mov r8d, dword [rbx]
mov rdx, qword [rbx + 8]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbx]
add rcx, rsi
or rdx, 0xffffffffffffffff
cmp rcx, rsi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, rsi
jb 0x140007df1
mov eax, dword [rbx + 0x10]
mov dword [rdx], eax
lea rax, [rdx + 4]
or rsi, 0xffffffffffffffff
cmp rax, rdx
cmovae rsi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdx
jb 0x140007df1
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbx + 0x10]
add rcx, rsi
or rdx, 0xffffffffffffffff
cmp rcx, rsi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, rsi
jb 0x140007df1
mov eax, dword [rbx + 0x20]
mov dword [rdx], eax
lea rax, [rdx + 4]
or rsi, 0xffffffffffffffff
cmp rax, rdx
cmovae rsi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdx
jb 0x140007df1
mov r8d, dword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbx + 0x20]
add rcx, rsi
cmp rcx, rsi
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, rsi
jb 0x140007df1
mov rbx, rdi
mov qword [rbp + 0x70], rbx
mov r15d, dword [rbp + 0x110]
jmp 0x140007e09
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp + 0x70]
or r14d, 0x10000000
mov dword [rsp + 0x70], r14d
jl 0x140008e6a
xor esi, esi
mov qword [rbp + 0x480], rsi
mov r9d, esi
mov dword [rbp + 0x268], esi
mov qword [rbp + 0x488], rsi
mov r10d, esi
mov dword [rbp + 0x26c], esi
mov dword [rbp + 0x5bc], 0x3c
mov dword [rbp + 0x5c0], 0x48
mov dword [rbp + 0xd8], 0x48
cmp qword [rbp - 0x50], rsi
jne 0x140007e71
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008079
cmp dword [rbp - 0x58], 1
ja 0x140007e87
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008079
mov rdx, qword [rbp - 0x50]
mov r8d, esi
nop
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x140007f1e
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x140007f1e
inc r8d
cmp r8d, 1
jb 0x140007e90
mov edi, dword [rdx]
lea rax, [rdx + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdx
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x140007f1e
mov r9d, edi
mov dword [rbp + 0x268], edi
mov rax, rsi
test edi, edi
cmovne rax, rcx
mov qword [rbp + 0x480], rax
test r14d, r14d
js 0x140008e7b
cmp dword [rbp - 0x58], 2
ja 0x140007f3d
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008079
mov rdx, qword [rbp - 0x50]
mov r8d, esi
nop dword [rax]
nop dword [rax + rax]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x140007fde
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x140007fde
inc r8d
cmp r8d, 2
jb 0x140007f50
mov edi, dword [rdx]
lea rax, [rdx + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdx
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x140007fde
mov r10d, edi
mov dword [rbp + 0x26c], edi
mov rax, rsi
test edi, edi
cmovne rax, rcx
mov qword [rbp + 0x488], rax
test r14d, r14d
js 0x140008e7b
lea eax, [r9 + 0x50]
or ecx, 0xffffffff
cmp eax, 0x50
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp eax, 0x50
jb 0x140008054
lea eax, [rcx + 4]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp eax, ecx
jb 0x140008054
lea ecx, [rdi + r10]
or eax, 0xffffffff
cmp ecx, edi
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
mov edx, dword [rbp + 0x18c]
cmp ecx, edi
cmovae edx, eax
mov dword [rbp + 0x18c], edx
jmp 0x14000805a
mov edx, dword [rbp + 0x18c]
test r14d, r14d
js 0x140008e7b
cmp edx, 0x400000
jbe 0x140008076
mov r14d, 0x8000ffff
jmp 0x140008e76
mov dword [rbp + 0x68], edx
test r14d, r14d
js 0x140008e7b
mov edi, dword [rbp + 0x68]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
jne 0x1400080a9
mov r14d, 0xd0000017
jmp 0x1400080b6
mov r12, rax
mov qword [rbp - 0x30], rax
mov r14d, 0x10000000
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x140008e7b
test rbx, rbx
je 0x140008e70
test r12, r12
je 0x140008e70
mov qword [rbp + 0x5d0], rbx
mov dword [rbp + 0x5e0], r15d
mov qword [rbp + 0x5d8], r12
mov eax, dword [rbp + 0x68]
mov dword [rbp + 0x5e4], eax
mov dword [rbp + 0x5e8], esi
lea r8, [rbp + 0x490]
lea rdx, [0x1400437d0]
mov ecx, 1
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
jne 0x14000816a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
mov dword [rsp + 0x70], eax
mov r14d, eax
jle 0x140008138
movzx r14d, ax
or r14d, 0x80070000
mov dword [rsp + 0x70], r14d
mov edx, dword [rbp + 0x68]
test r14d, r14d
js 0x1400081b7
mov r14d, 0x80004005
mov dword [rsp + 0x70], r14d
test r14d, r14d
js 0x140008e7b
mov rbx, rsi
cmp edx, 4
jae 0x1400081cb
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
lea rdx, [0x1400437b0]
mov rcx, qword [rbp + 0x490]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x140008117
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x5d0]
lea ecx, [r8 + 0x66]
call qword [case.0x140012211.0]
mov r14d, eax
or r14d, 0x10000000
mov dword [rsp + 0x70], r14d
mov edx, dword [rbp + 0x68]
cmovge edx, dword [rbp + 0x5e4]
mov dword [rbp + 0x68], edx
cmp r14d, 0xd0000023
jne 0x14000814b
mov r14d, 0x8007007a
jmp 0x140008e76
mov r10d, dword [r12]
mov dword [rbp - 0x20], r10d
lea rax, [r12 + 4]
or rsi, 0xffffffffffffffff
cmp rax, r12
cmovae rsi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, r12
jb 0x140008162
lea eax, [rdx - 4]
cmp eax, r10d
jae 0x14000820c
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
mov rax, r10
mov qword [rbp + 0x58], rax
add rax, rsi
or rdi, 0xffffffffffffffff
cmp rax, rsi
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rsi
jb 0x140008162
lea eax, [r10 + 4]
or ecx, 0xffffffff
cmp eax, 4
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, 4
jb 0x140008162
mov eax, edx
sub eax, ecx
cmp eax, 4
jae 0x14000826b
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
mov r12d, dword [rdi]
lea rax, [rdi + 4]
or r15, 0xffffffffffffffff
cmp rax, rdi
cmovae r15, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdi
jb 0x140008162
lea eax, [rcx + 4]
or r8d, 0xffffffff
cmp eax, ecx
cmovae r8d, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, ecx
jb 0x140008162
mov eax, edx
sub eax, r8d
cmp eax, r12d
jae 0x1400082c7
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
lea rcx, [r15 + r12]
or r9, 0xffffffffffffffff
cmp rcx, r15
cmovae r9, rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, r15
jb 0x140008162
lea eax, [r12 + r8]
or edi, 0xffffffff
cmp eax, r8d
cmovae edi, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, r8d
jb 0x140008162
mov eax, edx
sub eax, edi
cmp eax, 4
jae 0x140008320
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
mov r13d, dword [r9]
lea rax, [r9 + 4]
or rcx, 0xffffffffffffffff
cmp rax, r9
cmovae rcx, rax
mov qword [rbp - 0x10], rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, r9
jb 0x140008162
lea eax, [rdi + 4]
or ecx, 0xffffffff
cmp eax, edi
cmovae ecx, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, edi
jb 0x140008162
mov eax, edx
sub eax, ecx
cmp eax, r13d
jae 0x14000837d
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
lea eax, [rcx + r13]
or edi, 0xffffffff
cmp eax, ecx
cmovae edi, eax
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, ecx
jb 0x140008162
cmp edx, edi
je 0x1400083ad
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
lea ecx, [r12 + r13]
add ecx, r10d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
je 0x1400083cd
mov r14d, 0xc000003e
mov r13, rbx
jmp 0x1400085f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x1400083fb
mov r14d, 0xc0000017
xor r15d, r15d
jmp 0x140008562
test rsi, rsi
je 0x14000843d
mov eax, dword [rbp - 0x20]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r14, qword [rbp + 0x58]
mov r8, r14
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x1400084cd
mov qword [rdi + 8], rax
mov r8, r14
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x140008445
xor eax, eax
mov dword [rdi], eax
mov qword [rdi + 8], rax
test r15, r15
je 0x140008481
mov dword [rdi + 0x10], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r12
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x1400084cd
mov qword [rdi + 0x18], rax
mov r8, r12
mov rdx, r15
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r15d, r15d
jmp 0x140008489
mov dword [rdi + 0x10], r15d
mov qword [rdi + 0x18], r15
mov rsi, qword [rbp - 0x10]
test rsi, rsi
je 0x140008554
mov dword [rdi + 0x20], r13d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x1400084cd
mov qword [rdi + 0x28], rax
mov r8, r13
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x14000855c
mov rsi, qword [rdi + 8]
test rsi, rsi
je 0x1400084f3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor r15d, r15d
mov qword [rdi + 8], r15
jmp 0x1400084f6
xor r15d, r15d
mov rsi, qword [rdi + 0x18]
test rsi, rsi
je 0x140008517
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x18], r15
mov rsi, qword [rdi + 0x28]
test rsi, rsi
je 0x140008538
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x28], r15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov r14d, 0xc0000017
jmp 0x140008562
mov dword [rdi + 0x20], r15d
mov qword [rdi + 0x28], r15
mov rbx, rdi
mov r14d, r15d
test r14d, r14d
js 0x140008573
mov r13, rbx
mov qword [rbp - 0x78], rbx
jmp 0x1400085f3
test rbx, rbx
je 0x1400085ef
mov rdi, qword [rbx + 8]
test rdi, rdi
je 0x140008599
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 8], r15
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x1400085ba
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], r15
mov rdi, qword [rbx + 0x28]
test rdi, rdi
je 0x1400085db
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], r15
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov r13, qword [rbp - 0x78]
or r14d, 0x10000000
mov dword [rsp + 0x70], r14d
jl 0x140008e7e
xor r12d, r12d
mov edi, r12d
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x498], r12
test r13, r13
jne 0x14000862e
mov r14d, 0xd000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008e81
mov rsi, qword [r13 + 8]
mov qword [rbp + 0x78], rsi
test rsi, rsi
jne 0x14000864b
mov r14d, 0xd000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008e81
mov eax, dword [r13]
test eax, eax
jne 0x140008663
mov r14d, 0xd000000d
mov dword [rsp + 0x70], r14d
jmp 0x140008e81
mov rbx, rax
test eax, eax
je 0x140008be7
add rbx, 0xfffffffffffffff8
mov qword [rbp + 0x58], rbx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r13, rax
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140008be0
mov dword [rbp - 0x20], r12d
movabs rax, 0x7f1137fab69605e
mov qword [rbp + 0xb50], rax
mov r9, rsi
mov rdx, r13
mov rsi, rbx
and esi, 7
je 0x140008797
xor ecx, ecx
mov dword [rbp - 0x28], ecx
mov dword [rbp - 0x44], 0xffffffff
mov r14d, ecx
mov r15d, ecx
mov r8d, ecx
test esi, esi
je 0x14000870f
lea edi, [rcx + 0x38]
nop dword [rax]
lea r10, [r9 + 1]
movzx eax, byte [r9]
cmp r8d, 4
jge 0x1400086f8
lea ecx, [rdi - 0x20]
shl eax, cl
or r15d, eax
jmp 0x1400086ff
mov ecx, edi
shl eax, cl
or r14d, eax
inc r8d
sub edi, 8
mov r9, r10
cmp r8d, esi
jl 0x1400086e0
xor ecx, ecx
mov r10d, r15d
xor r10d, 0x92f65a5
mov dword [rbp - 0x28], r10d
mov r11d, r14d
xor r11d, 0x699a899c
mov dword [rbp - 0x44], r11d
mov eax, ecx
test esi, esi
jle 0x14000875d
lea rcx, [rdx + 1]
cmp eax, 4
jge 0x140008743
rol r10d, 8
mov byte [rdx], r10b
jmp 0x14000874a
rol r11d, 8
mov byte [rdx], r11b
inc eax
mov rdx, rcx
cmp eax, esi
jl 0x140008731
mov r10d, dword [rbp - 0x28]
mov r11d, dword [rbp - 0x44]
xor ecx, ecx
lea eax, [rsi - 4]
test eax, eax
jle 0x14000877a
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov dword [rbp - 0x44], r11d
jmp 0x1400087ac
mov r11d, ecx
mov dword [rbp - 0x44], ecx
test eax, eax
jns 0x1400087ac
neg eax
shl eax, 3
mov ecx, eax
shr r10d, cl
shl r10d, cl
mov dword [rbp - 0x28], r10d
jmp 0x1400087ac
xor eax, eax
mov r15d, eax
or r14d, 0xffffffff
mov r11d, eax
mov dword [rbp - 0x44], eax
mov r10d, eax
mov dword [rbp - 0x28], eax
mov rsi, rbx
shr rsi, 3
test rsi, rsi
je 0x140008afb
mov r13d, dword [rbp + 0xb54]
mov eax, r13d
shr eax, 0x10
movzx edi, r13w
mov dword [rbp - 0x80], edi
mov dword [rbp - 0x68], eax
lea r12, [rdx + 7]
lea rbx, [r9 + 2]
nop dword [rax + rax]
movzx r9d, byte [rbx - 2]
shl r9d, 8
movzx eax, byte [rbx - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx]
or r9d, eax
shl r9d, 8
movzx eax, byte [rbx + 1]
or r9d, eax
movzx r8d, byte [rbx + 2]
shl r8d, 8
movzx eax, byte [rbx + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rbx + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rbx, [rbx + 8]
xor r11d, r10d
xor r11d, r13d
xor r11d, 0xab69605e
lea ecx, [r11 + 0x54969fa2]
rol ecx, 5
mov eax, r11d
rol eax, 0xa
imul ecx, edi
add eax, ecx
xor r10d, eax
lea edx, [r10 + r13]
ror edx, 9
mov ecx, r10d
rol ecx, 2
movzx eax, word [rbp + 0xb52]
imul eax, edx
sub eax, ecx
xor r11d, eax
mov eax, r11d
sub eax, edi
imul ecx, eax, 0x605e
mov eax, r11d
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
movzx edx, word [rbp + 0xb52]
xor edx, r10d
rol edx, 6
mov ecx, r10d
rol ecx, 2
mov eax, dword [rbp - 0x68]
imul eax, edx
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
mov eax, r13d
sub eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 6
mov eax, r10d
xor eax, edi
movzx edx, word [rbp + 0xb52]
imul eax, edx
xor ecx, eax
xor r11d, ecx
lea eax, [r11 + r13]
ror eax, 0xf
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea edx, [r10 + 0x54969fa2]
ror edx, 0xe
mov ecx, r10d
rol ecx, 8
mov eax, dword [rbp - 0x68]
imul eax, edx
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
ror ecx, 0xc
mov eax, r11d
ror eax, 0xa
imul ecx, edi
xor eax, ecx
xor r10d, eax
mov edx, dword [rbp - 0x68]
mov ecx, edx
xor ecx, r10d
movzx eax, word [rbp + 0xb52]
imul ecx, eax
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor r11d, ecx
mov eax, r11d
not eax
ror eax, 5
add eax, 0x605e
imul eax, edx
xor r10d, eax
mov edi, r10d
sub edi, edx
xor edi, r11d
xor edi, 0xab69605e
mov ecx, edx
xor ecx, edi
rol ecx, 2
mov r11d, dword [rbp - 0x80]
imul ecx, r11d
mov eax, edi
shr eax, 2
add ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, r13d
ror ecx, 6
mov eax, r10d
rol eax, 7
movzx edx, word [rbp + 0xb52]
imul ecx, edx
add eax, ecx
xor edi, eax
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, r11d
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
movzx ecx, word [rbp + 0xb52]
xor ecx, r10d
rol ecx, 5
mov eax, r10d
rol eax, 7
imul ecx, dword [rbp - 0x68]
add eax, ecx
xor edi, eax
mov edx, edi
xor edx, r10d
xor edx, r13d
xor edx, 0xab69605e
mov eax, edx
ror eax, 3
movzx r10d, word [rbp + 0xb52]
sub eax, r10d
imul eax, r11d
xor edi, eax
mov eax, edi
sub eax, r13d
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea ecx, [rdx - 0x54969fa2]
rol ecx, 3
mov eax, edx
rol eax, 0xe
imul ecx, dword [rbp - 0x68]
add eax, ecx
xor edi, eax
lea ecx, [rdi - 0x54969fa2]
rol ecx, 0xf
mov eax, edi
ror eax, 0xe
imul ecx, r11d
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, 0x605e
imul ecx, r10d
mov eax, edx
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, r13d
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r15d
xor edx, ecx
mov dword [rbp - 0x28], edx
xor edi, r14d
mov dword [rbp - 0x44], edi
mov byte [r12 - 4], dl
ror dword [rbp - 0x28], 8
movzx eax, byte [rbp - 0x44]
mov byte [r12], al
ror dword [rbp - 0x44], 8
movzx eax, byte [rbp - 0x28]
mov byte [r12 - 5], al
ror dword [rbp - 0x28], 8
movzx eax, byte [rbp - 0x44]
mov byte [r12 - 1], al
ror dword [rbp - 0x44], 8
movzx eax, byte [rbp - 0x28]
mov byte [r12 - 6], al
ror dword [rbp - 0x28], 8
movzx eax, byte [rbp - 0x44]
mov byte [r12 - 2], al
ror dword [rbp - 0x44], 8
movzx eax, byte [rbp - 0x28]
mov byte [r12 - 7], al
movzx eax, byte [rbp - 0x44]
mov byte [r12 - 3], al
mov r10d, dword [rbp - 0x28]
ror r10d, 8
mov dword [rbp - 0x28], r10d
mov r11d, dword [rbp - 0x44]
ror r11d, 8
mov dword [rbp - 0x44], r11d
mov r15d, r9d
mov r14d, r8d
lea r12, [r12 + 8]
sub rsi, 1
mov edi, dword [rbp - 0x80]
jne 0x1400087e0
mov rbx, qword [rbp + 0x58]
mov r12d, dword [rbp - 0x20]
mov r13, qword [rbp - 0x10]
xor ecx, ecx
mov eax, ecx
test rbx, rbx
je 0x140008b9c
cmp rbx, 0x20
jb 0x140008b83
mov rcx, rbx
and rcx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + r13]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rax + r13 + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x140008b20
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd r12d, xmm1
cmp rax, rbx
jae 0x140008b9c
nop dword [rax + rax]
xor r12b, byte [rax + r13]
inc rax
cmp rax, rbx
jb 0x140008b90
movzx eax, r12b
mov rcx, qword [rbp + 0x78]
cmp rax, qword [rbx + rcx]
jne 0x140008bd5
mov qword [rbp + 0x498], rbx
mov r8, r13
mov qword [rbp + 0x30], r13
xor r12d, r12d
mov qword [rbp + 0x220], r12
mov dword [rbp + 0x10c], ebx
mov r14d, 0x10000000
mov dword [rsp + 0x70], r14d
jmp 0x140008c1c
mov rcx, r13
call fcn.14003e590
xor r12d, r12d
mov rdi, qword [rbp + 0x220]
mov r14d, 0xd0000001
mov dword [rsp + 0x70], r14d
test rdi, rdi
je 0x140008c12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x220], r12
mov r8, qword [rbp + 0x30]
mov ebx, dword [rbp + 0x10c]
test r14d, r14d
js 0x140008e64
cmp ebx, 4
jae 0x140008c43
mov r14d, 0xc000003e
bts r14d, 0x1c
mov dword [rsp + 0x70], r14d
mov r13, qword [rbp - 0x78]
jmp 0x140008e81
mov edi, dword [r8]
mov dword [rbp - 0x68], edi
lea rax, [r8 + 4]
or rcx, 0xffffffffffffffff
cmp rax, r8
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, r8
jb 0x140008e5a
lea eax, [rbx - 4]
cmp eax, 4
jae 0x140008c8c
mov r14d, 0xc000003e
bts r14d, 0x1c
mov dword [rsp + 0x70], r14d
mov r13, qword [rbp - 0x78]
jmp 0x140008e81
mov r15d, dword [rcx]
lea rax, [rcx + 4]
or rsi, 0xffffffffffffffff
cmp rax, rcx
cmovae rsi, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rcx
jb 0x140008e5a
lea eax, [rbx - 8]
cmp eax, r15d
jae 0x140008cd2
mov r14d, 0xc000003e
bts r14d, 0x1c
mov dword [rsp + 0x70], r14d
mov r13, qword [rbp - 0x78]
jmp 0x140008e81
lea eax, [r15 + 8]
cmp eax, 8
sbb r14d, r14d
and r14d, 0xc0000095
cmp eax, 8
jb 0x140008e5a
lea rcx, [rsi + r15]
mov edx, ebx
lea rax, [r8 + rdx]
cmp rax, rcx
jb 0x140008c2a
mov rax, r8
sub rax, r15
sub rax, rsi
add rax, rdx
cmp rax, 8
jae 0x140008c2a
xor eax, eax
mov r14d, eax
mov ebx, eax
test rsi, rsi
je 0x140008dec
mov rdx, rsi
or r8, 0xffffffffffffffff
cmp rcx, rsi
cmovae r8, rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, rsi
jb 0x140008e44
cmp rsi, r8
jae 0x140008dda
mov edi, dword [rbp + 0x270]
nop word [rax + rax]
lea rax, [rdx + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdx
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
cmp rax, rdx
jb 0x140008de7
cmp rcx, r8
ja 0x140008ddf
mov ecx, dword [rdx]
add ecx, 4
or eax, 0xffffffff
cmp ecx, 4
cmovae eax, ecx
sbb r14d, r14d
and r14d, 0xc0000095
cmp ecx, 4
cmovae edi, eax
mov dword [rbp + 0x270], edi
jb 0x140008de7
mov ecx, edi
add rcx, rdx
or rax, 0xffffffffffffffff
cmp rcx, rdx
cmovae rax, rcx
sbb r14d, r14d
and r14d, 0xc0000095
cmp rcx, rdx
jb 0x140008de7
cmp rax, r8
ja 0x140008ddf
mov rdx, rax
inc ebx
cmp rax, r8
jb 0x140008d60
mov edi, dword [rbp - 0x68]
cmp rdx, r8
je 0x140008dec
mov r14d, 0xc000000d
jmp 0x140008e57
mov edi, dword [rbp - 0x68]
jmp 0x140008e44
test r15d, r15d
je 0x140008e1d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r15
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r12, rax
test rax, rax
jne 0x140008e18
mov r14d, 0xc0000017
jmp 0x140008e44
xor ecx, ecx
mov r14d, ecx
test rsi, rsi
je 0x140008e30
mov r8, r15
mov rdx, rsi
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0xb8], r12
mov dword [rbp + 0xb4], r15d
mov dword [rbp + 0xb0], ebx
test r14d, r14d
js 0x140008e57
cmp edi, dword [rbp + 0xb0]
je 0x140008e57
mov r14d, 0xc000003e
xor r12d, r12d
bts r14d, 0x1c
mov dword [rsp + 0x70], r14d
mov r13, qword [rbp - 0x78]
jmp 0x140008e81
mov r13, qword [rbp - 0x78]
jmp 0x140008e7e
mov r14d, 0x80070057
mov dword [rsp + 0x70], r14d
mov r13, rsi
xor r12d, r12d
mov rdi, qword [rbp + 0x140]
test rdi, rdi
je 0x140008ea1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp + 0x210]
test rbx, rbx
je 0x140008f2b
mov rdi, qword [rbx + 8]
test rdi, rdi
je 0x140008ece
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 8], r12
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x140008eef
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], r12
mov rdi, qword [rbx + 0x28]
test rdi, rdi
je 0x140008f10
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x210], r12
mov rdi, qword [rbp + 0x70]
test rdi, rdi
je 0x140008f48
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rdi, qword [rbp - 0x30]
test rdi, rdi
je 0x140008f65
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r13, r13
je 0x140008fe1
mov rdi, qword [r13 + 8]
test rdi, rdi
je 0x140008f8b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 8], r12
mov rdi, qword [r13 + 0x18]
test rdi, rdi
je 0x140008fac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 0x18], r12
mov rdi, qword [r13 + 0x28]
test rdi, rdi
je 0x140008fcd
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [r13 + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rdi, qword [rbp + 0x30]
test rdi, rdi
je 0x140008ffe
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r14d, r14d
js 0x14000954f
cmp dword [rbp + 0xb0], 1
jae 0x140009029
mov r14d, 0xc004d501
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
cmp qword [rbp + 0xb8], 0
je 0x1400090b0
cmp dword [rbp + 0xb0], 0
jbe 0x1400090b0
mov rdi, qword [rbp + 0xb8]
mov edx, dword [rdi]
lea rax, [rdi + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdi
cmovae rcx, rax
mov qword [rbp + 0x4a0], rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdi
jb 0x14000908b
mov dword [rbp + 0x274], edx
test edx, edx
cmove rcx, r12
mov qword [rbp + 0x4a0], rcx
mov qword [rbp + 0x4a8], rcx
jmp 0x140009098
mov edx, dword [rbp + 0x274]
mov rcx, qword [rbp + 0x4a8]
test r14d, r14d
js 0x1400090bb
cmp edx, 4
jne 0x140009544
mov eax, dword [rcx]
mov dword [rbp + 0x8c], eax
jmp 0x1400090c1
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
mov eax, dword [rbp + 0x8c]
test r14d, r14d
js 0x14000954f
cmp eax, 0xd0000023
jne 0x1400090dd
mov dword [rbp + 0x8c], 0x8007007a
jmp 0x1400090f3
cmp eax, 0x8007007a
je 0x1400090f3
mov r14d, eax
mov dword [rsp + 0x70], eax
test eax, eax
js 0x14000954f
cmp dword [rbp + 0xb0], 6
je 0x140009115
mov r14d, 0xc004d501
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
cmp qword [rbp + 0xb8], 0
jne 0x14000912f
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x1400091f6
mov rdx, qword [rbp + 0xb8]
mov r8d, r12d
nop dword [rax]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400091cd
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x1400091cd
inc r8d
cmp r8d, 1
jb 0x140009140
mov ecx, dword [rdx]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400091cd
mov dword [rbp + 0x278], ecx
mov rax, r12
test ecx, ecx
cmovne rax, rdi
mov qword [rbp + 0x4b0], rax
jmp 0x1400091da
mov ecx, dword [rbp + 0x278]
mov rax, qword [rbp + 0x4b0]
test r14d, r14d
js 0x14000954f
cmp ecx, 8
jne 0x140009544
mov rax, qword [rax]
mov qword [rbp + 0x4d8], rax
test r14d, r14d
js 0x14000954f
cmp qword [rbp + 0xb8], 0
jne 0x140009219
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
jmp 0x1400092e4
mov rdx, qword [rbp + 0xb8]
mov r8d, r12d
nop dword [rax]
nop word [rax + rax]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400092bd
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x1400092bd
inc r8d
cmp r8d, 2
jb 0x140009230
mov ecx, dword [rdx]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400092bd
mov dword [rbp + 0x27c], ecx
mov rax, r12
test ecx, ecx
cmovne rax, rdi
mov qword [rbp + 0x4b8], rax
jmp 0x1400092ca
mov ecx, dword [rbp + 0x27c]
mov rax, qword [rbp + 0x4b8]
test r14d, r14d
js 0x14000954f
cmp ecx, 4
jne 0x140009544
mov eax, dword [rax]
mov dword [rbp + 0x290], eax
test r14d, r14d
js 0x14000954f
cmp qword [rbp + 0xb8], 0
jne 0x140009310
mov r14d, 0xc000000d
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
mov rdx, qword [rbp + 0xb8]
mov r8d, r12d
nop word [rax + rax]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400093b0
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x1400093b0
inc r8d
cmp r8d, 3
jb 0x140009320
mov r10d, dword [rdx]
lea rax, [rdx + 4]
or rcx, 0xffffffffffffffff
cmp rax, rdx
cmovae rcx, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x1400093b0
mov dword [rbp + 0x280], r10d
mov r11, r12
test r10d, r10d
cmovne r11, rcx
mov qword [rbp + 0x4c0], r11
jmp 0x1400093be
mov r10d, dword [rbp + 0x280]
mov r11, qword [rbp + 0x4c0]
test r14d, r14d
js 0x14000954f
mov rdx, qword [rbp + 0xb8]
mov r8d, r12d
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x14000945e
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x14000945e
inc r8d
cmp r8d, 4
jb 0x1400093d1
mov ecx, dword [rdx]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x14000945e
mov dword [rbp + 0x284], ecx
mov rax, r12
test ecx, ecx
cmovne rax, rdi
mov qword [rbp + 0x4c8], rax
jmp 0x14000946b
mov ecx, dword [rbp + 0x284]
mov rax, qword [rbp + 0x4c8]
test r14d, r14d
js 0x140009485
cmp ecx, 4
jne 0x140009544
mov r9d, dword [rax]
mov dword [rbp + 0x288], r9d
jmp 0x14000948c
mov r9d, dword [rbp + 0x288]
test r14d, r14d
js 0x14000954f
mov rdx, qword [rbp + 0xb8]
mov r8d, r12d
nop
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x14000952d
mov ecx, dword [rdx]
add rcx, rdi
or rdx, 0xffffffffffffffff
cmp rcx, rdi
cmovae rdx, rcx
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rcx, rdi
jb 0x14000952d
inc r8d
cmp r8d, 5
jb 0x1400094a0
mov ecx, dword [rdx]
lea rax, [rdx + 4]
or rdi, 0xffffffffffffffff
cmp rax, rdx
cmovae rdi, rax
sbb r14d, r14d
and r14d, 0xc0000095
mov dword [rsp + 0x70], r14d
cmp rax, rdx
jb 0x14000952d
mov dword [rbp + 0x28c], ecx
mov rax, r12
test ecx, ecx
cmovne rax, rdi
mov qword [rbp + 0x4d0], rax
jmp 0x14000953a
mov ecx, dword [rbp + 0x28c]
mov rax, qword [rbp + 0x4d0]
test r14d, r14d
js 0x140009567
cmp ecx, 4
je 0x14000955d
mov r14d, 0xc0000023
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
mov ecx, dword [rax]
mov dword [rbp + 0x1a0], ecx
jmp 0x14000956d
mov ecx, dword [rbp + 0x1a0]
test r14d, r14d
js 0x14000954f
mov rax, qword [rbp + 0x4d8]
cmp qword [rbp + 0x410], rax
je 0x14000959b
mov r14d, 0xc004d501
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
mov dword [rbp + 0xf8], r9d
mov dword [rbp + 0x88], ecx
mov eax, dword [rbp + 0x290]
mov dword [rbp + 0x164], eax
cmp r9d, 4
jbe 0x1400095d0
mov r14d, 0x8007007a
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
cmp r10d, 4
jbe 0x1400095ec
mov r14d, 0x8007007a
mov dword [rsp + 0x70], r14d
mov r15, qword [rsp + 0x78]
mov r13, qword [rbp - 0x60]
jmp 0x14000963d
mov r8d, r10d
mov rdx, r11
mov rcx, qword [rbp + 0x3e0]
call sub.msvcrt.dll_memcpy
mov r13, qword [rbp - 0x60]
jmp 0x14000960f
mov r14d, 0xc0000095
jmp 0x140009632
xor r12d, r12d
mov r15, qword [rsp + 0x78]
test r14d, r14d
js 0x14000963d
mov eax, dword [rbp + 0x8c]
test eax, eax
cmovne r14d, eax
mov dword [rsp + 0x70], r14d
jmp 0x14000963d
mov r14d, 0xc0000023
mov dword [rsp + 0x70], r14d
mov r15, rsi
xor r12d, r12d
mov qword [rbp - 0x58], 0
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x140009666
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp - 0x50], r12
mov qword [rbp + 0xb0], 0
mov rdi, qword [rbp + 0xb8]
test rdi, rdi
je 0x140009698
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0xb8], r12
test r15, r15
je 0x1400096b1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r15
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r13, r13
je 0x1400096ca
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r14d, r14d
js 0x140010530
mov eax, dword [rbp + 0x88]
test eax, eax
je 0x14000e419
mov qword [rbp + 0x530], r12
mov dword [0x140053c18], eax
mov r8d, 0x104
lea rdx, [rbp + 0x1720]
lea rcx, [0x140000000]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleFileNameW]
test eax, eax
je 0x14000df96
cmp eax, 0x104
jne 0x140009726
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
je 0x14000df96
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x1400530f8]
call qword [case.0x140012211.0]
mov qword [rbp + 0x70], rax
test rax, rax
jne 0x140009751
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000df96
mov rax, qword [0x140053098]
call qword [case.0x140012211.0]
mov qword [0x140053c10], rax
mov edi, dword [0x140053c18]
mov dword [rbp - 0x80], edi
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rbp + 0x6e0]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rax
mov ecx, 1
mov dword [rbp + 0x190], ecx
mov rbx, r12
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x58], r12
mov qword [rbp + 0xc18], rax
mov qword [rbp + 0xc20], rax
mov qword [rbp + 0xc28], rax
mov qword [rbp + 0xc30], rax
mov qword [rbp + 0xc38], rax
mov dword [rbp + 0xc40], eax
mov qword [rbp + 0x140], r12
nop word [rax + rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], ecx
jne 0x1400097e0
mov eax, dword [0x140053c1c]
test eax, eax
jne 0x140009e42
mov dword [rbp - 0x20], r12d
xor esi, esi
mov dword [rbp + 0x10], esi
mov qword [rbp + 0x328], rsi
mov qword [rbp + 0x4e0], rsi
mov ecx, 0x338
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x140009d84
mov r15d, esi
or r12d, 0xffffffff
mov dword [rbp - 4], esi
xor ecx, ecx
mov r11d, ecx
mov dword [rbp + 0x1c], ecx
lea r13, [rax + 7]
lea r14, [0x140044aa2]
lea edi, [rsi + 0x67]
nop word [rax + rax]
movzx r10d, byte [r14 - 2]
shl r10d, 8
movzx eax, byte [r14 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r14]
or r10d, eax
shl r10d, 8
movzx eax, byte [r14 + 1]
or r10d, eax
movzx r9d, byte [r14 + 2]
shl r9d, 8
movzx eax, byte [r14 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r14 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r14 + 5]
or r9d, eax
xor r11d, r10d
xor esi, r9d
lea r14, [r14 + 8]
xor esi, r11d
xor esi, 0xac987321
lea eax, [rsi + 0x54969fa2]
rol eax, 5
mov ecx, esi
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor esi, eax
mov eax, esi
shr eax, 0xd
imul ecx, esi, 0x605e
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor esi, eax
mov ecx, esi
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r11d, eax
mov edx, r11d
ror edx, 6
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor esi, edx
lea eax, [rsi + 0x7f1137f]
ror eax, 0xf
mov ecx, esi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov ecx, r11d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor esi, eax
mov eax, esi
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, esi
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor esi, ecx
mov eax, esi
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea r8d, [r11 - 0x7f1]
xor r8d, esi
xor r8d, 0xab69605e
mov eax, r8d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r8d
shr eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r8d, ecx
mov edx, r8d
ror edx, 9
mov eax, r8d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r8d, ecx
mov edx, r8d
xor edx, r11d
xor edx, 0xac987321
mov eax, edx
ror eax, 3
sub eax, 0xab69
imul eax, eax, 0x137f
xor r8d, eax
lea eax, [r8 - 0x7f1137f]
ror eax, 1
mov ecx, r8d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea eax, [rdx - 0x54969fa2]
rol eax, 3
mov ecx, edx
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r8d, ecx
lea eax, [r8 - 0x54969fa2]
rol eax, 0xf
mov ecx, r8d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor edx, eax
mov eax, edx
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, edx
shr eax, 3
xor ecx, eax
xor r8d, ecx
mov eax, r8d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r8d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r15d
xor edx, ecx
mov dword [rbp + 0x1c], edx
xor r8d, r12d
mov dword [rbp - 4], r8d
mov byte [r13 - 4], dl
ror dword [rbp + 0x1c], 8
movzx eax, byte [rbp - 4]
mov byte [r13], al
ror dword [rbp - 4], 8
movzx eax, byte [rbp + 0x1c]
mov byte [r13 - 5], al
ror dword [rbp + 0x1c], 8
movzx eax, byte [rbp - 4]
mov byte [r13 - 1], al
ror dword [rbp - 4], 8
movzx eax, byte [rbp + 0x1c]
mov byte [r13 - 6], al
ror dword [rbp + 0x1c], 8
movzx eax, byte [rbp - 4]
mov byte [r13 - 2], al
ror dword [rbp - 4], 8
movzx eax, byte [rbp + 0x1c]
mov byte [r13 - 7], al
movzx eax, byte [rbp - 4]
mov byte [r13 - 3], al
mov r11d, dword [rbp + 0x1c]
ror r11d, 8
mov dword [rbp + 0x1c], r11d
mov esi, dword [rbp - 4]
ror esi, 8
mov dword [rbp - 4], esi
mov r15d, r10d
mov r12d, r9d
lea r13, [r13 + 8]
sub rdi, 1
jne 0x140009850
xor esi, esi
mov eax, esi
xorps xmm2, xmm2
xorps xmm1, xmm1
mov edi, dword [rbp - 0x80]
mov r14d, dword [rsp + 0x70]
mov r15d, dword [rbp - 0x20]
mov r12d, r15d
nop dword [rax]
movdqu xmm0, xmmword [rax + rbx]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rax + rbx + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x140009b80
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x140009bfe
nop dword [rax + rax]
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x338
jb 0x140009bf0
movzx eax, cl
cmp rax, qword [0x140044dd8]
jne 0x140009d7c
mov qword [rbp + 0x328], rbx
mov qword [rbp + 0x4e0], 0x338
mov byte [rbx + 0x337], sil
xor edx, edx
lea r8d, [rdx + 0x60]
lea r13, [0x1400543d0]
mov rcx, r13
call sub.msvcrt.dll_memset
cmp byte [rbx], sil
je 0x140009d91
nop word [rax + rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x140009c60
lea rbx, [rbx + rax*2]
add rbx, 2
mov eax, dword [rbp + 0x10]
lea rcx, [rax + rax*2]
lea r13, [r13 + rcx*8]
mov r8, r13
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
je 0x140009d84
mov r12d, esi
mov rax, qword [r13]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x140009cab
mov r12d, 0xc000007b
jmp 0x140009d11
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x140009cbf
mov r12d, 0xc000007b
jmp 0x140009d11
add rcx, qword [r13]
cmp rcx, qword [r13]
jae 0x140009cd1
mov r12d, 0xc000007b
jmp 0x140009d11
cmp dword [rcx], 0x4550
je 0x140009ce1
mov r12d, 0xc000007b
jmp 0x140009d11
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140009cff
mov r12d, 0xc000000d
jmp 0x140009d11
mov rax, qword [rcx + 0x88]
mov qword [r13 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r13 + 8], eax
mov eax, dword [rbx]
mov dword [rbp - 0x20], eax
add rbx, 4
test eax, eax
je 0x140009d62
nop
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140009d27
inc rbx
add rbx, rax
test r12d, r12d
js 0x140009d58
mov rcx, qword [r13]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x140009d8a
mov ecx, r15d
lea rdx, section..data
mov qword [rdx + rcx*8], rax
inc r15d
inc esi
cmp esi, dword [rbp - 0x20]
jb 0x140009d20
inc dword [rbp + 0x10]
cmp byte [rbx], 0
mov esi, 0
lea r13, [0x1400543d0]
jne 0x140009c50
jmp 0x140009d8a
mov rcx, rbx
call fcn.14003e590
mov r12d, 0xc000007a
lea r13, [0x1400543d0]
cmp qword [rbp + 0x328], 0
je 0x140009db3
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rbp + 0x328]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r12d, r12d
jns 0x140009e3c
mov rbx, r13
mov esi, 4
mov rcx, qword [rbx]
test rcx, rcx
je 0x140009dd2
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rbx, 0x18
sub rsi, 1
jne 0x140009dc4
xor edx, edx
lea r8d, [rsi + 0x60]
mov rcx, r13
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea r8d, [rsi + 0xb]
nop dword [rax]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub r8, 1
jne 0x140009e00
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
jmp 0x140009e4a
mov eax, dword [0x140053c1c]
inc eax
mov dword [0x140053c1c], eax
xor esi, esi
mov eax, esi
xchg dword [0x1400544d8], eax
xor ecx, ecx
mov dword [rbp + 0x1660], ecx
mov word [rbp + 0x1664], cx
mov dword [rbp + 0x50], esi
mov dword [rbp - 0x6c], esi
mov qword [rbp + 0x340], rsi
xor eax, eax
mov qword [rbp + 0x418], rax
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], rax
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rax
mov ecx, 1
nop word [rax + rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], ecx
jne 0x140009ea0
mov eax, dword [0x140053c1c]
test eax, eax
jne 0x14000a512
mov r12d, esi
mov dword [rbp + 0x10], esi
mov qword [rbp + 0x330], rsi
mov qword [rbp + 0x4e8], rsi
mov ecx, 0x338
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x14000a454
mov edi, esi
or r15d, 0xffffffff
mov r8d, esi
mov dword [rbp], esi
mov r11d, esi
mov dword [rbp + 0x20], esi
lea rsi, [rax + 7]
lea r13, [0x140044aa2]
mov r14d, 0x67
nop word [rax + rax]
movzx r10d, byte [r13 - 2]
shl r10d, 8
movzx eax, byte [r13 - 1]
or r10d, eax
shl r10d, 8
movzx eax, byte [r13]
or r10d, eax
shl r10d, 8
movzx eax, byte [r13 + 1]
or r10d, eax
movzx r9d, byte [r13 + 2]
shl r9d, 8
movzx eax, byte [r13 + 3]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 4]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 5]
or r9d, eax
xor r11d, r10d
xor r8d, r9d
lea r13, [r13 + 8]
xor r8d, r11d
xor r8d, 0xac987321
lea eax, [r8 + 0x54969fa2]
rol eax, 5
mov ecx, r8d
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r8d, eax
imul ecx, r8d, 0x605e
mov eax, r8d
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r11d, ecx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov ecx, r8d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r11d, eax
mov edx, r11d
ror edx, 6
mov eax, r11d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r8d, edx
lea eax, [r8 + 0x7f1137f]
ror eax, 0xf
mov ecx, r8d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r11d, ecx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
mov ecx, r11d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r8d, eax
mov eax, r8d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r8d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r11d, ecx
mov eax, r11d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor ecx, eax
xor ecx, r8d
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea r8d, [r11 - 0x7f1]
xor r8d, ecx
xor r8d, 0xab69605e
mov eax, r8d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r8d
shr eax, 2
add ecx, eax
xor r11d, ecx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor r8d, ecx
mov edx, r8d
ror edx, 9
mov eax, r8d
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 5
mov ecx, r11d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor r8d, ecx
xor r11d, r8d
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
sub eax, 0xab69
imul eax, eax, 0x137f
xor r8d, eax
lea eax, [r8 - 0x7f1137f]
ror eax, 1
mov ecx, r8d
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor r11d, eax
lea eax, [r11 - 0x54969fa2]
rol eax, 3
mov ecx, r11d
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor r8d, ecx
lea eax, [r8 - 0x54969fa2]
rol eax, 0xf
mov ecx, r8d
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor ecx, eax
xor r8d, ecx
mov eax, r8d
xor eax, 0x7f1137f
rol eax, 4
mov ecx, r8d
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, edi
xor r11d, ecx
mov dword [rbp + 0x20], r11d
xor r8d, r15d
mov dword [rbp], r8d
mov byte [rsi - 4], r11b
ror dword [rbp + 0x20], 8
movzx eax, byte [rbp]
mov byte [rsi], al
ror dword [rbp], 8
movzx eax, byte [rbp + 0x20]
mov byte [rsi - 5], al
ror dword [rbp + 0x20], 8
movzx eax, byte [rbp]
mov byte [rsi - 1], al
ror dword [rbp], 8
movzx eax, byte [rbp + 0x20]
mov byte [rsi - 6], al
ror dword [rbp + 0x20], 8
movzx eax, byte [rbp]
mov byte [rsi - 2], al
ror dword [rbp], 8
movzx eax, byte [rbp + 0x20]
mov byte [rsi - 7], al
movzx eax, byte [rbp]
mov byte [rsi - 3], al
mov r11d, dword [rbp + 0x20]
ror r11d, 8
mov dword [rbp + 0x20], r11d
mov r8d, dword [rbp]
ror r8d, 8
mov dword [rbp], r8d
mov edi, r10d
mov r15d, r9d
lea rsi, [rsi + 8]
sub r14, 1
jne 0x140009f10
xor esi, esi
mov eax, esi
xorps xmm2, xmm2
xorps xmm1, xmm1
mov edi, dword [rbp - 0x80]
mov r14d, dword [rsp + 0x70]
mov r15d, esi
nop word [rax + rax]
movdqu xmm0, xmmword [rbx + rax]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rbx + rax + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x14000a250
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14000a2ce
nop dword [rax + rax]
xor cl, byte [rbx + rax]
inc rax
cmp rax, 0x338
jb 0x14000a2c0
movzx eax, cl
cmp rax, qword [0x140044dd8]
jne 0x14000a44c
mov qword [rbp + 0x330], rbx
mov qword [rbp + 0x4e8], 0x338
mov byte [rbx + 0x337], sil
xor edx, edx
lea r8d, [rdx + 0x60]
lea r13, [0x1400543d0]
mov rcx, r13
call sub.msvcrt.dll_memset
cmp byte [rbx], sil
je 0x14000a461
nop word [rax + rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x14000a330
lea rbx, [rbx + rax*2]
add rbx, 2
mov eax, dword [rbp + 0x10]
lea rcx, [rax + rax*2]
lea r13, [r13 + rcx*8]
mov r8, r13
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
je 0x14000a454
mov r12d, esi
mov rax, qword [r13]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x14000a37b
mov r12d, 0xc000007b
jmp 0x14000a3e1
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x14000a38f
mov r12d, 0xc000007b
jmp 0x14000a3e1
add rcx, qword [r13]
cmp rcx, qword [r13]
jae 0x14000a3a1
mov r12d, 0xc000007b
jmp 0x14000a3e1
cmp dword [rcx], 0x4550
je 0x14000a3b1
mov r12d, 0xc000007b
jmp 0x14000a3e1
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14000a3cf
mov r12d, 0xc000000d
jmp 0x14000a3e1
mov rax, qword [rcx + 0x88]
mov qword [r13 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r13 + 8], eax
mov eax, dword [rbx]
mov dword [rbp - 0x20], eax
add rbx, 4
test eax, eax
je 0x14000a432
nop
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14000a3f7
inc rbx
add rbx, rax
test r12d, r12d
js 0x14000a428
mov rcx, qword [r13]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x14000a45a
mov ecx, r15d
lea rdx, section..data
mov qword [rdx + rcx*8], rax
inc r15d
inc esi
cmp esi, dword [rbp - 0x20]
jb 0x14000a3f0
inc dword [rbp + 0x10]
cmp byte [rbx], 0
mov esi, 0
lea r13, [0x1400543d0]
jne 0x14000a320
jmp 0x14000a45a
mov rcx, rbx
call fcn.14003e590
mov r12d, 0xc000007a
lea r13, [0x1400543d0]
cmp qword [rbp + 0x330], 0
je 0x14000a483
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rbp + 0x330]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r12d, r12d
jns 0x14000a50c
mov rbx, r13
mov esi, 4
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a4a2
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rbx, 0x18
sub rsi, 1
jne 0x14000a494
xor edx, edx
lea r8d, [rsi + 0x60]
mov rcx, r13
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea r8d, [rsi + 0xb]
nop dword [rax]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub r8, 1
jne 0x14000a4d0
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
jmp 0x14000a51a
mov eax, dword [0x140053c1c]
inc eax
mov dword [0x140053c1c], eax
xor r13d, r13d
mov eax, r13d
xchg dword [0x1400544d8], eax
xor edx, edx
lea r8d, [r13 + 0x70]
lea rcx, [rbp + 0x6e0]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp + 0xc8], rax
mov esi, edi
and esi, 0xf
mov dword [rbp - 0x48], esi
mov eax, edi
shr eax, 4
and ax, 0xf
mov word [rbp + 0x1660], ax
mov eax, edi
shr eax, 8
and ax, 0xf
mov word [rbp + 0x1662], ax
shr edi, 0xc
and di, 0xf
mov word [rbp + 0x1664], di
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x1400530f8]
call qword [case.0x140012211.0]
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x68], 0xffffff
test rax, rax
jne 0x14000a5cb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000a5b7
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000bb36
mov r15d, 0x80004005
jmp 0x14000bb36
mov rdi, r13
mov qword [rbp + 0x3c8], r13
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x3c0], r13
mov rsi, r13
mov qword [rbp + 0x198], r13
mov qword [rbp + 0x338], r13
mov qword [rbp + 0x208], r13
mov r15d, r13d
mov dword [rbp + 0x11c], r13d
lea r9, [rbp + 0x11c]
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea ecx, [r8 + 8]
mov rax, qword [0x1400530a0]
call qword [case.0x140012211.0]
test eax, eax
jne 0x14000a657
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000a643
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000a7a0
mov r15d, 0x80004005
jmp 0x14000a7a0
mov ecx, dword [rbp + 0x11c]
add rcx, rcx
call fcn.14001e288
mov rdx, rax
lea rcx, [rbp + 0x338]
call fcn.14003e540
mov r12, qword [rbp + 0x338]
mov rcx, r12
call fcn.14003e588
test al, al
jne 0x14000a79a
test r12, r12
je 0x14000a79a
mov ecx, dword [rbp + 0x98]
inc ecx
shl rcx, 2
call fcn.14001e288
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.14003e540
mov rbx, qword [rbp + 0x208]
mov rcx, rbx
call fcn.14003e588
test al, al
jne 0x14000a79a
test rbx, rbx
je 0x14000a79a
lea r9, [rbp + 0x11c]
mov r8, r12
lea rdx, [rbp + 0x98]
mov ecx, 8
mov rax, qword [0x1400530a0]
call qword [case.0x140012211.0]
test eax, eax
jne 0x14000a727
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000a713
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000a7a0
mov r15d, 0x80004005
jmp 0x14000a7a0
mov rdi, rbx
cmp dword [rbp + 0x98], esi
jbe 0x14000a773
xor edx, edx
mov rcx, r12
mov rax, qword [0x1400530b0]
call qword [case.0x140012211.0]
mov dword [rdi], eax
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [r12 + rax*2], si
jne 0x14000a750
lea r12, [r12 + rax*2]
add r12, 2
add rdi, 4
inc r13d
cmp r13d, dword [rbp + 0x98]
jb 0x14000a732
mov dword [rdi], 0x409
mov rdi, rbx
xor r13d, r13d
mov qword [rbp + 0x208], r13
mov qword [rbp + 0x3c8], rbx
mov eax, dword [rbp + 0x98]
inc eax
mov dword [rbp - 0x80], eax
jmp 0x14000a7a0
mov r15d, 0x8007000e
lea rcx, [rbp + 0x208]
call fcn.14003e5d8
lea rcx, [rbp + 0x338]
call fcn.14003e5d8
test r15d, r15d
js 0x14000af97
mov ebx, r13d
mov dword [rbp - 0x60], ebx
mov r11d, r13d
lea r15, [0x14004a3c0]
cmp dword [rbp - 0x80], esi
jbe 0x14000a832
mov rcx, rdi
call fcn.14003e588
movzx r10d, al
mov r9, r13
nop word [rax + rax]
mov edx, r13d
mov r8, r15
nop word [rax + rax]
mov rcx, rdi
test r10b, r10b
cmovne rcx, r13
mov eax, dword [r8]
cmp dword [rcx + r9], eax
je 0x14000a82d
inc edx
add r8, 4
cmp edx, 0x26
jb 0x14000a800
inc r11d
add r9, 4
cmp r11d, dword [rbp - 0x80]
jae 0x14000a832
jmp 0x14000a7f0
mov ebx, edx
mov dword [rbp - 0x60], ebx
mov dword [rbp + 0x10], r13d
xor r9d, r9d
lea r8d, [r9 + 0x55]
lea rdx, [rbp + 0x1670]
mov ecx, dword [r15 + rbx*4]
mov rax, qword [0x1400530a8]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000a895
mov r9d, 0x10
lea r8, [rbp + 0xe20]
lea edx, [r9 + 0x48]
lea rcx, [rbp + 0x1670]
mov rax, qword [0x140053090]
call qword [case.0x140012211.0]
test eax, eax
jle 0x14000a895
mov r15d, dword [rbp + 0xe2c]
shr r15d, 0x1b
and r15d, 1
mov dword [rbp + 0x10], r15d
lea rcx, str.Segoe_UI_Light
lea rdx, [rbp + 0x15c0]
mov edi, 0x13
nop dword [rax + rax]
mov qword [rdx], rcx
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rcx + rax*2], si
jne 0x14000a8c0
lea rcx, [rcx + rax*2]
add rcx, 2
add rdx, 8
sub rdi, 1
jne 0x14000a8b0
lea rcx, [rbx + rbx*2]
lea rdx, [0x140000000]
movzx eax, byte [rcx + rdx + 0x46f80]
mov rdi, qword [rbp + rax*8 + 0x15c0]
mov qword [rbp - 0x30], rdi
mov qword [rbp + 0x418], rdi
movzx eax, byte [rcx + rdx + 0x46f81]
mov rdi, qword [rbp + rax*8 + 0x15c0]
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x420], rdi
movzx eax, byte [rcx + rdx + 0x46f82]
mov r13, qword [rbp + rax*8 + 0x15c0]
mov qword [rbp - 0x78], r13
mov qword [rbp + 0x428], r13
xor edi, edi
mov r15d, edi
mov ecx, 0x1c90
call fcn.14001e288
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x14000a95e
mov r15d, 0x8007000e
jmp 0x14000afb7
mov dword [rbp - 0x20], 0xffffffff
mov r11d, edi
mov dword [rbp + 4], edi
mov r10d, edi
mov dword [rbp + 0x24], edi
lea r12, [rax + 7]
lea r13, [0x140048722]
mov r14d, 0x392
mov ebx, dword [rbp - 0x20]
nop word [rax + rax]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea r13, [r13 + 8]
xor r11d, r10d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
mov ecx, r11d
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r11d, eax
imul ecx, r11d, 0x605e
mov eax, r11d
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r11d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor r11d, ecx
mov eax, r11d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea edi, [r10 - 0x7f1]
xor edi, r11d
xor edi, 0xab69605e
mov eax, edi
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, edi
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor edi, ecx
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
mov edx, edi
xor edx, r10d
xor edx, 0xac987321
mov eax, edx
ror eax, 3
sub eax, 0xab69
imul eax, eax, 0x137f
xor edi, eax
lea eax, [rdi - 0x7f1137f]
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea eax, [rdx - 0x54969fa2]
rol eax, 3
mov ecx, edx
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
lea eax, [rdi - 0x54969fa2]
rol eax, 0xf
mov ecx, edi
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor edx, eax
mov eax, edx
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, edx
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, 0x7f1137f
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor edx, ecx
mov dword [rbp + 0x24], edx
xor edi, ebx
mov dword [rbp + 4], edi
mov byte [r12 - 4], dl
ror dword [rbp + 0x24], 8
movzx eax, byte [rbp + 4]
mov byte [r12], al
ror dword [rbp + 4], 8
movzx eax, byte [rbp + 0x24]
mov byte [r12 - 5], al
ror dword [rbp + 0x24], 8
movzx eax, byte [rbp + 4]
mov byte [r12 - 1], al
ror dword [rbp + 4], 8
movzx eax, byte [rbp + 0x24]
mov byte [r12 - 6], al
ror dword [rbp + 0x24], 8
movzx eax, byte [rbp + 4]
mov byte [r12 - 2], al
ror dword [rbp + 4], 8
movzx eax, byte [rbp + 0x24]
mov byte [r12 - 7], al
movzx eax, byte [rbp + 4]
mov byte [r12 - 3], al
mov r10d, dword [rbp + 0x24]
ror r10d, 8
mov dword [rbp + 0x24], r10d
mov r11d, dword [rbp + 4]
ror r11d, 8
mov dword [rbp + 4], r11d
mov esi, r9d
mov ebx, r8d
lea r12, [r12 + 8]
sub r14, 1
jne 0x14000a990
xor ecx, ecx
mov eax, ecx
xorps xmm2, xmm2
xorps xmm1, xmm1
mov rsi, qword [rbp + 0x198]
mov r14d, dword [rsp + 0x70]
mov rbx, qword [rbp - 0x10]
movdqu xmm0, xmmword [rax + rbx]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rax + rbx + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rax, 0x20
cmp rax, 0x1c80
jb 0x14000acc2
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x1c90
jae 0x14000ad3e
nop dword [rax]
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x1c90
jb 0x14000ad30
movzx eax, cl
cmp rax, qword [0x14004a3b0]
je 0x14000ad5a
mov r15d, 0xc004d501
mov rcx, rbx
call fcn.14003e590
jmp 0x14000ad6c
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x3c0], 0x1c90
test r15d, r15d
js 0x14000af50
mov rcx, qword [rbp + 0x200]
call fcn.14003e588
test al, al
mov ebx, 0
cmovne rcx, rbx
lea rdi, [rbp + 0x1590]
lea r9d, [rbx + 6]
mov r8d, dword [rbp - 0x60]
nop dword [rax + rax]
mov edx, ebx
cmp r8d, edx
jne 0x14000adaa
mov qword [rdi], rcx
or rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], bl
jne 0x14000adb0
inc rcx
add rcx, rax
inc edx
cmp edx, 0x26
jb 0x14000ada2
add rdi, 8
sub r9, 1
jne 0x14000ada0
lea ecx, [r9 + 0x18]
call fcn.14001e288
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14003e540
mov rsi, qword [rbp + 0x198]
mov rcx, rsi
call fcn.14003e588
test al, al
jne 0x14000af8b
test rsi, rsi
je 0x14000af8b
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov edi, ebx
mov dword [rbp - 0x80], ebx
mov r13, rbx
lea r12, [rbp + 0x1660]
nop dword [rax]
nop word [rax + rax]
mov eax, ebx
movzx edx, word [r12]
lea rcx, [0x14004a458]
nop
cmp dx, word [rcx]
je 0x14000ae55
inc eax
add rcx, 2
cmp eax, 6
jb 0x14000ae40
jmp 0x14000aef1
mov rdi, qword [rbp + rax*8 + 0x1590]
or rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp byte [rdi + rax], 0
jne 0x14000ae61
lea r9d, [rax + 1]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
mov rax, qword [0x1400530c0]
call qword [case.0x140012211.0]
movsxd rbx, eax
test eax, eax
je 0x14000af62
mov rcx, rbx
add rcx, rcx
call fcn.14001e288
mov qword [rsi + r13], rax
test rax, rax
je 0x14000af56
or rax, 0xffffffffffffffff
lea rax, [rax + 1]
cmp byte [rdi + rax], 0
jne 0x14000aeb6
lea r9d, [rax + 1]
mov dword [rsp + 0x28], ebx
mov rcx, qword [rsi + r13]
mov qword [rsp + 0x20], rcx
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
mov rax, qword [0x1400530c0]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000af2d
mov edi, dword [rbp - 0x80]
xor ebx, ebx
inc edi
mov dword [rbp - 0x80], edi
add r12, 2
add r13, 8
cmp edi, 3
jb 0x14000ae30
mov rax, rsi
mov rsi, rbx
mov qword [rbp + 0x198], rbx
mov qword [rbp + 0x340], rax
mov eax, dword [rbp + 0x10]
mov dword [rbp + 0x6e0], eax
mov r13, qword [rbp - 0x78]
jmp 0x14000afb9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000af45
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000af50
mov r15d, 0x80004005
mov r13, qword [rbp - 0x78]
jmp 0x14000afb7
mov r15d, 0x8007000e
mov r13, qword [rbp - 0x78]
jmp 0x14000afb7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000af7a
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000af50
mov r15d, 0x80004005
mov r13, qword [rbp - 0x78]
jmp 0x14000afb7
mov r15d, 0x8007000e
mov r13, qword [rbp - 0x78]
jmp 0x14000afb9
mov r13, qword [rbp + 0x428]
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 0x418]
mov qword [rbp - 0x30], rax
xor ebx, ebx
mov rcx, rsi
call fcn.14003e588
test al, al
jne 0x14000b00a
test rsi, rsi
je 0x14000b00a
mov r12d, 3
mov rdi, qword [rbx + rsi]
test rdi, rdi
je 0x14000b000
or rcx, 0xffffffffffffffff
nop dword [rax]
lea rcx, [rcx + 1]
cmp word [rdi + rcx*2], 0
jne 0x14000afe0
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx + rsi]
call fcn.14003e590
add rbx, 8
sub r12, 1
jne 0x14000afd0
mov rcx, qword [rbp + 0x200]
call fcn.14003e588
test al, al
jne 0x14000b02d
test rcx, rcx
je 0x14000b02d
mov rdi, rcx
xor eax, eax
mov rcx, qword [rbp + 0x3c0]
rep stosb byte [rdi], al
lea rcx, [rbp + 0x198]
call fcn.14003e5d8
lea rcx, [rbp + 0x200]
call fcn.14003e5d8
lea rcx, [rbp + 0x3c8]
call fcn.14003e5d8
test r15d, r15d
js 0x14000bb1c
mov rcx, qword [rbp + 0x340]
call fcn.14003e588
mov rdx, rcx
test al, al
mov esi, 0
cmovne rdx, rsi
mov rdx, qword [rdx]
mov qword [rbp + 0x6e8], rdx
mov rdx, rcx
cmovne rdx, rsi
mov rdx, qword [rdx + 8]
mov qword [rbp + 0x6f0], rdx
cmovne rcx, rsi
mov rax, qword [rcx + 0x10]
mov qword [rbp + 0x6f8], rax
xor eax, eax
mov qword [rbp + 0x430], rax
mov qword [rbp + 0x438], rax
mov edi, esi
mov r15d, esi
mov dword [rbp + 0x430], 0x10
xor r9d, r9d
lea r8, [rbp + 0x430]
xor edx, edx
lea ecx, [rsi + 0x42]
mov rax, qword [0x140053168]
call qword [case.0x140012211.0]
test eax, eax
jne 0x14000b103
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b0f6
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000b10c
mov r15d, 0x80004005
jmp 0x14000b10c
mov edi, dword [rbp + 0x434]
and edi, 1
mov dword [rbp + 0x6e4], edi
test r15d, r15d
js 0x14000bb1c
mov ebx, dword [rbp - 0x48]
mov ecx, ebx
mov eax, 0x2a
mov dword [rbp - 0x70], eax
sub ecx, 1
je 0x14000b14d
sub ecx, 1
je 0x14000b144
cmp ecx, 1
jne 0x14000b157
mov edi, 0xe1
mov dword [rbp + 0x50], edi
mov dword [rbp - 0x6c], edi
jmp 0x14000b157
mov dword [rbp + 0x50], 0xf
jmp 0x14000b150
mov dword [rbp + 0x50], eax
mov dword [rbp - 0x6c], 0xb
mov r15d, 0x60
mov r12d, r15d
mov edi, 0xdc
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x1080]
call sub.msvcrt.dll_memset
mov word [rbp + 0x10c4], di
lea r8, [rbp + 0x1080]
or edx, 0xffffffff
xor ecx, ecx
mov rax, qword [0x1400530e0]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000b1c8
movzx r12d, word [rbp + 0x1126]
mov qword [rbp + 0x230], rsi
mov eax, dword [rbp + 0x112c]
mov dword [rbp + 0x238], eax
mov eax, dword [rbp + 0x1130]
mov dword [rbp + 0x23c], eax
cmp r12d, r15d
cmovb r12d, r15d
mov rdi, r13
cmp ebx, 1
mov rsi, qword [rbp - 0x30]
cmove rdi, rsi
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xdc0]
call sub.msvcrt.dll_memset
xor ecx, ecx
mov r15d, ecx
xor edx, edx
mov r8d, 0x403
mov rax, qword [0x1400530f8]
call qword [case.0x140012211.0]
mov rbx, rax
test rax, rax
jne 0x14000b236
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b222
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000bb1c
mov r15d, 0x80004005
jmp 0x14000b2d3
mov r8d, 0x48
mov edx, r12d
mov ecx, dword [rbp + 0x50]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
neg eax
mov dword [rbp + 0xdc0], eax
mov dword [rbp + 0xdd0], 0x190
mov byte [rbp + 0xdda], 5
mov r8, rdi
mov edx, 0x20
lea rcx, [rbp + 0xddc]
call fcn.14002d450
lea rcx, [rbp + 0xdc0]
mov rax, qword [0x140053020]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000b2ba
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b2ad
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000b2c1
mov r15d, 0x80004005
jmp 0x14000b2c1
mov qword [rbp + 0x700], rax
mov rdx, rbx
xor ecx, ecx
mov rax, qword [0x140053160]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb1c
cmp dword [rbp - 0x48], 1
cmove r13, rsi
xor edx, edx
lea r8d, [rdx + 0x5c]
lea rcx, [rbp + 0xd00]
call sub.msvcrt.dll_memset
xor eax, eax
mov r15d, eax
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x1400530f8]
call qword [case.0x140012211.0]
mov rdi, rax
test rax, rax
jne 0x14000b346
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b332
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000bb1c
mov r15d, 0x80004005
jmp 0x14000b3e3
mov r8d, 0x48
mov edx, r12d
mov ecx, dword [rbp - 0x6c]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
neg eax
mov dword [rbp + 0xd00], eax
mov dword [rbp + 0xd10], 0x190
mov byte [rbp + 0xd1a], 5
mov r8, r13
mov edx, 0x20
lea rcx, [rbp + 0xd1c]
call fcn.14002d450
lea rcx, [rbp + 0xd00]
mov rax, qword [0x140053020]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000b3ca
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b3bd
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000b3d1
mov r15d, 0x80004005
jmp 0x14000b3d1
mov qword [rbp + 0x708], rax
mov rdx, rdi
xor ecx, ecx
mov rax, qword [0x140053160]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb1c
xor r8d, r8d
mov ebx, r8d
mov edx, r8d
mov edi, dword [rbp - 0x48]
mov ecx, edi
sub ecx, 1
je 0x14000b409
sub ecx, 1
je 0x14000b43b
cmp ecx, 1
jne 0x14000b415
mov ebx, dword [rbp + 0x238]
mov edx, dword [rbp + 0x23c]
mov dword [rbp + 0xd0], ebx
mov dword [rbp + 0xd4], edx
cmp edi, 1
je 0x14000b471
lea eax, [rdi - 2]
cmp eax, 1
ja 0x14000b450
mov r13d, r8d
mov dword [rbp - 0x70], r8d
mov dword [rbp - 0x6c], r8d
jmp 0x14000b47e
mov eax, dword [rbp + 0x238]
cdq
and edx, 3
lea ebx, [rdx + rax]
sar ebx, 2
mov edx, r8d
jmp 0x14000b415
mov eax, dword [rbp + 0xd8]
mov dword [rbp - 0x6c], eax
mov eax, dword [rbp + 0xd8]
mov dword [rbp - 0x70], eax
mov esi, dword [rbp + 0xd8]
mov r13d, dword [rbp + 0xd8]
jmp 0x14000b481
mov r13d, 0x96
mov dword [rbp - 0x6c], 0x20
mov esi, r8d
sub ebx, r13d
sub ebx, esi
mov dword [rbp + 0x734], ebx
mov dword [rbp + 0x724], ebx
mov rdi, qword [rbp + 0x6e8]
mov r15d, r8d
mov rdx, qword [rbp + 0x700]
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0x71c]
or r8d, 0xffffffff
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x14000b512
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb1c
mov rdi, qword [rbp + 0x6f0]
xor eax, eax
mov r15d, eax
mov rdx, qword [rbp + 0x708]
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp - 0x10], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc50
lea r9, [rbp + 0x72c]
or r8d, 0xffffffff
mov rdx, rdi
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x14000b59d
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb1c
mov eax, dword [rbp - 0x48]
add eax, 0xfffffffe
mov ecx, dword [rbp + 0x724]
cmp eax, 1
ja 0x14000b5c2
mov ebx, dword [rbp + 0x734]
cmp ecx, ebx
cmovg ebx, ecx
mov r8d, dword [rbp - 0x70]
mov rax, qword [fcn.14001e740]
cmp dword [rbp + 0x6e0], 0
je 0x14000b5f4
mov edx, esi
sub edx, ecx
add edx, ebx
lea rcx, [rbp + 0x71c]
call qword [case.0x140012211.0]
sub esi, dword [rbp + 0x734]
lea edx, [rbx + rsi]
jmp 0x14000b607
mov edx, r13d
lea rcx, [rbp + 0x71c]
call qword [case.0x140012211.0]
mov edx, r13d
mov r8d, dword [rbp - 0x6c]
add r8d, dword [rbp + 0x728]
lea rcx, [rbp + 0x72c]
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov esi, dword [rbp - 0x48]
lea eax, [rsi - 2]
cmp eax, 1
jbe 0x14000b8f4
cmp esi, 1
jne 0x14000b910
mov dword [rbp + 0x718], 0xffffff
xor edx, edx
lea r8d, [rsi + 0x5b]
lea rcx, [rbp + 0xd60]
call sub.msvcrt.dll_memset
xor r13d, r13d
mov r15d, r13d
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
mov rax, qword [0x1400530f8]
call qword [case.0x140012211.0]
mov rdi, rax
test rax, rax
jne 0x14000b6ab
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b697
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000bb22
mov r15d, 0x80004005
jmp 0x14000b74d
mov r8d, 0x48
mov edx, r12d
lea ecx, [r8 - 0x3d]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
neg eax
mov dword [rbp + 0xd60], eax
mov dword [rbp + 0xd70], 0x190
mov byte [rbp + 0xd7a], 5
mov r8, qword [rbp + 0x120]
mov edx, 0x20
lea rcx, [rbp + 0xd7c]
call fcn.14002d450
lea rcx, [rbp + 0xd60]
mov rax, qword [0x140053020]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000b734
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r15d, eax
test eax, eax
jle 0x14000b727
movzx r15d, ax
or r15d, 0x80070000
test r15d, r15d
js 0x14000b73b
mov r15d, 0x80004005
jmp 0x14000b73b
mov qword [rbp + 0x710], rax
mov rdx, rdi
xor ecx, ecx
mov rax, qword [0x140053160]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb22
mov dword [rbp + 0x744], ebx
mov rdi, qword [rbp + 0x6f8]
mov r15d, r13d
mov rdx, qword [rbp + 0x710]
mov r13, qword [rsp + 0x78]
mov rcx, r13
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov rbx, rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x460
lea r9, [rbp + 0x73c]
or r8d, 0xffffffff
mov rdx, rdi
mov rcx, r13
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
test rbx, rbx
je 0x14000b7d5
mov rdx, rbx
mov rcx, r13
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
test r15d, r15d
js 0x14000bb1f
mov eax, dword [rbp + 0x744]
add eax, 0x18
mov ecx, 0x5a
cmp eax, ecx
cmovl eax, ecx
mov dword [rbp + 0x744], eax
mov eax, 0x20
mov dword [rbp + 0x748], eax
mov edi, 0x60
mov r8d, edi
mov edx, r12d
mov ecx, dword [rbp + 0x73c]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
mov dword [rbp + 0x73c], eax
mov r8d, edi
mov edx, r12d
mov ecx, dword [rbp + 0x740]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
mov dword [rbp + 0x740], eax
mov r8d, edi
mov edx, r12d
mov ecx, dword [rbp + 0x744]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
mov dword [rbp + 0x744], eax
mov r8d, edi
mov edx, r12d
mov ecx, dword [rbp + 0x748]
mov rax, qword [0x1400530b8]
call qword [case.0x140012211.0]
mov dword [rbp + 0x748], eax
mov r8d, dword [rbp + 0x738]
mov rax, qword [fcn.14001e740]
cmp dword [rbp + 0x6e0], 0
je 0x14000b8c0
mov edx, dword [rbp + 0x72c]
cmp dword [rbp + 0x71c], edx
cmovl edx, dword [rbp + 0x71c]
add r8d, 0x24
lea rcx, [rbp + 0x73c]
call qword [case.0x140012211.0]
jmp 0x14000b910
mov ecx, dword [rbp + 0x734]
cmp dword [rbp + 0x724], ecx
cmovg ecx, dword [rbp + 0x724]
add r8d, 0x24
mov edx, dword [rbp + 0x73c]
sub edx, dword [rbp + 0x744]
add edx, ecx
lea rcx, [rbp + 0x73c]
call qword [case.0x140012211.0]
jmp 0x14000b910
mov dword [rbp + 0xd0], ebx
mov eax, dword [rbp + 0x738]
mov dword [rbp + 0xd4], eax
mov dword [rbp + 0x718], 0xffa8a8a8
mov esi, dword [rbp + 0x6e0]
mov ebx, dword [rbp + 0xd4]
mov edi, dword [rbp + 0xd0]
mov ecx, dword [rbp - 0x48]
sub ecx, 1
je 0x14000bb0a
sub ecx, 1
je 0x14000ba1e
cmp ecx, 1
jne 0x14000ba10
xor eax, eax
mov qword [rbp + 0xcd0], rax
mov qword [rbp + 0xcd8], rax
mov qword [rbp + 0xce0], rax
mov qword [rbp + 0xce8], rax
mov qword [rbp + 0xcf0], rax
mov edx, ecx
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov dword [rbp + 0xcd0], 0x28
lea rdx, [rbp + 0xcd0]
mov rcx, rax
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000ba10
lea rdx, [rbp + 0xce4]
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
lea rdx, [rbp + 0xcec]
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov eax, dword [rbp + 0xcec]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0xcec]
shr rcx, 0x20
sub ecx, ebx
imul ecx, ecx, 0x32
mov dword [rbp + 0xc8], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xcc], edx
xor r13d, r13d
mov r15d, r13d
mov esi, dword [rbp - 0x48]
jmp 0x14000bb22
xor eax, eax
mov qword [rbp + 0xca8], rax
mov qword [rbp + 0xcb0], rax
mov qword [rbp + 0xcb8], rax
mov qword [rbp + 0xcc0], rax
mov qword [rbp + 0xcc8], rax
lea edx, [rax + 1]
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov dword [rbp + 0xca8], 0x28
lea rdx, [rbp + 0xca8]
mov rcx, rax
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000ba10
lea rdx, [rbp + 0xcbc]
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
lea rdx, [rbp + 0xcc4]
xor ecx, ecx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov eax, dword [rbp + 0xcc4]
test esi, esi
je 0x14000badf
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0xcbc]
mov rax, qword [rbp + 0xcc4]
shr rax, 0x20
sub eax, ebx
imul ecx, eax, 0x5f
jmp 0x14000b9f3
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0xcc4]
shr rax, 0x20
sub eax, ebx
imul ecx, eax, 0x5f
jmp 0x14000b9f3
xor r13d, r13d
mov qword [rbp + 0xc8], r13
mov r15d, r13d
mov esi, dword [rbp - 0x48]
jmp 0x14000bb22
mov esi, dword [rbp - 0x48]
xor r13d, r13d
mov rdx, qword [rsp + 0x78]
xor ecx, ecx
mov rax, qword [0x140053160]
call qword [case.0x140012211.0]
mov r12d, 1
nop dword [rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], r12d
jne 0x14000bb40
mov eax, dword [0x140053c1c]
test eax, eax
jle 0x14000bbe9
sub eax, r12d
mov dword [0x140053c1c], eax
jne 0x14000bbe9
lea rdi, [0x1400543d0]
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000bb84
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, r12
jne 0x14000bb76
xor edx, edx
lea r8d, [rbx + 0x60]
lea rcx, [0x1400543d0]
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea edi, [rbx + 0xb]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub rdi, r12
jne 0x14000bbb0
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov eax, r13d
xchg dword [0x1400544d8], eax
lea rcx, [rbp + 0x340]
call fcn.14003e5d8
test r15d, r15d
js 0x14000d586
mov rdi, qword [rbp + 0xc8]
mov qword [rbp + 0x4f0], rdi
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x750]
call sub.msvcrt.dll_memset
mov ebx, r12d
mov edx, 7
mov r13, qword [rbp + 0x70]
mov rcx, r13
mov rax, qword [0x140053050]
call qword [case.0x140012211.0]
test rax, rax
je 0x14000bc8e
lea r8, [rbp + 0x750]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000bc8e
cmp word [rbp + 0x762], 0x20
jne 0x14000bc8e
cmp qword [rbp + 0x768], 0
je 0x14000bc8e
cmp dword [rbp + 0x754], 0
jle 0x14000bc8e
cmp dword [rbp + 0x758], 0
jg 0x14000bc96
xor r15d, r15d
mov ebx, r15d
jmp 0x14000bc99
xor r15d, r15d
mov dword [rbp + 0x190], ebx
test ebx, ebx
jne 0x14000bca8
cmp esi, r12d
jne 0x14000bd09
mov ebx, dword [rbp + 0x4f4]
mov r8d, ebx
mov edx, edi
lea rcx, [rbp + 0x71c]
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov r8d, ebx
mov edx, edi
lea rcx, [rbp + 0x72c]
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
cmp esi, r12d
jne 0x14000bd09
mov ecx, 0xb26720
cmp dword [rbp + 0x6e4], 0
cmovne ecx, r15d
mov rax, qword [0x140053028]
call qword [case.0x140012211.0]
mov qword [rbp + 0x140], rax
mov edx, r12d
mov rcx, r13
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov dword [rbp - 0x78], eax
mov eax, 0x810
mov ecx, 0x20812
cmp dword [rbp + 0x6e0], 0
cmovne eax, ecx
mov dword [rbp + 0x54], eax
cmp dword [rbp + 0x190], 0
je 0x14000c792
mov esi, dword [rbp + 0x6e4]
mov rax, qword [rbp + 0x700]
mov qword [rbp - 0x10], rax
mov rdi, qword [rbp + 0x6e8]
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x910]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x9f0]
call sub.msvcrt.dll_memset
mov qword [rbp - 0x30], r15
mov r12d, r15d
mov dword [rbp - 0x80], r15d
xor eax, eax
mov qword [rbp + 0xbb8], rax
mov qword [rbp + 0xbc0], rax
mov qword [rbp + 0xbc8], rax
mov qword [rbp + 0xbd0], rax
mov qword [rbp + 0xbd8], rax
mov dword [rbp + 0xbe0], eax
mov qword [rbp + 0xb68], rax
mov qword [rbp + 0xb70], rax
test rdi, rdi
je 0x14000d561
lea edx, [rax + 7]
mov rcx, r13
mov rax, qword [0x140053050]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000bdef
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d561
lea r8, [rbp + 0x910]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000be2c
mov rax, qword [rbp + 0x928]
mov qword [rbp - 0x30], rax
mov r12d, dword [rbp + 0x914]
mov dword [rbp - 0x80], r12d
mov r15d, dword [rbp + 0x918]
mov rcx, r13
mov rax, qword [0x140053010]
call qword [case.0x140012211.0]
mov rbx, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x14000be53
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d561
mov ecx, dword [rbp + 0x728]
sub ecx, dword [rbp + 0x720]
mov eax, dword [rbp + 0x724]
sub eax, dword [rbp + 0x71c]
xor r13d, r13d
mov qword [rbp + 0x4f8], r13
mov dword [rbp - 0x6c], r13d
xor edx, edx
mov qword [rbp + 0xbb8], rdx
mov qword [rbp + 0xbc0], rdx
mov qword [rbp + 0xbc8], rdx
mov qword [rbp + 0xbd0], rdx
mov qword [rbp + 0xbd8], rdx
mov dword [rbp + 0xbe0], edx
mov dword [rbp + 0xbb8], 0x28
mov dword [rbp + 0xbbc], eax
neg ecx
mov dword [rbp + 0xbc0], ecx
mov dword [rbp + 0xbc4], 0x200001
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x4f8]
xor r8d, r8d
lea rdx, [rbp + 0xbb8]
mov rcx, rbx
mov rax, qword [0x140053018]
call qword [case.0x140012211.0]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14000bf27
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x6c], eax
test eax, eax
jle 0x14000bf15
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x6c], eax
test eax, eax
js 0x14000c256
mov dword [rbp - 0x6c], 0x80004005
jmp 0x14000c256
lea r8, [rbp + 0x9f0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
cmovne r13, qword [rbp + 0xa08]
mov eax, dword [rbp + 0x724]
sub eax, dword [rbp + 0x71c]
mov dword [rbp + 0xb70], eax
mov eax, dword [rbp + 0x728]
sub eax, dword [rbp + 0x720]
mov dword [rbp + 0xb74], eax
mov rdx, qword [rsp + 0x78]
mov rcx, rbx
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov edx, 1
mov rcx, rbx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov rdx, qword [rbp - 0x10]
mov rcx, rbx
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov rax, qword [0x140053070]
call qword [case.0x140012211.0]
mov r8, rax
lea rdx, [rbp + 0xb68]
mov rcx, rbx
mov rax, qword [0x1400530e8]
call qword [case.0x140012211.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x54]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xb68]
or r8d, 0xffffffff
mov rdx, rdi
mov rcx, rbx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x48], 1
jne 0x14000c032
test esi, esi
je 0x14000c02b
mov ecx, 8
mov rax, qword [0x140053118]
call qword [case.0x140012211.0]
mov esi, eax
mov dword [rbp - 0x70], eax
jmp 0x14000c03a
mov esi, 0xffffff
jmp 0x14000c037
mov esi, 0xffa8a8a8
mov dword [rbp - 0x70], esi
mov eax, dword [rbp + 0x71c]
mov edi, eax
neg edi
test eax, eax
mov edx, 0
cmovns edi, edx
mov r8d, edx
cmovns r8d, eax
mov eax, dword [rbp + 0x720]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, edx
cmovns edx, eax
movsxd r9, dword [rbp + 0xb70]
mov ebx, r9d
sub ebx, edi
mov eax, r12d
sub eax, r8d
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [rbp + 0xb74]
sub eax, ecx
sub r15d, edx
cmp eax, r15d
cmovge eax, r15d
mov dword [rbp - 0x60], eax
test ebx, ebx
jle 0x14000c221
test eax, eax
jle 0x14000c221
imul ecx, r9d
movsxd rcx, ecx
movsxd rax, edi
add rcx, rax
lea r15, [rcx*4]
add r15, r13
imul edx, r12d
movsxd rcx, edx
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea r12, [rax + rcx*4]
xor r14d, r14d
mov r13d, r14d
mov rax, r9
shl rax, 2
mov qword [rbp - 0x30], rax
movsxd rax, dword [rbp - 0x80]
shl rax, 2
mov qword [rbp - 0x20], rax
mov eax, dword [rbp - 0x60]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
nop dword [rax + rax]
mov r10d, r14d
test ebx, ebx
jle 0x14000c20a
lea r9, [r15 + 2]
mov r11, r12
sub r11, r15
nop word [rax + rax]
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14000c1ef
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, sil
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x6f]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x6e]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
add r9, 4
inc r10d
cmp r10d, ebx
jl 0x14000c120
mov eax, dword [rbp - 0x60]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
add r15, rcx
add r12, rdx
inc r13d
cmp r13d, eax
jl 0x14000c100
mov r14d, dword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov rax, qword [rbp - 0x10]
mov rbx, qword [rbp + 0x10]
test rax, rax
je 0x14000c253
mov rdx, rax
mov rcx, rbx
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
xor r13d, r13d
mov rcx, rbx
mov rax, qword [0x140053030]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x6c], 0
jl 0x14000d561
mov ebx, dword [rbp + 0x6e4]
mov rax, qword [rbp + 0x708]
mov qword [rbp - 0x10], rax
mov rdi, qword [rbp + 0x6f0]
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x8a0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xa60]
call sub.msvcrt.dll_memset
mov qword [rbp - 0x30], r13
xor eax, eax
mov esi, eax
mov qword [rbp + 0xbe8], rax
mov qword [rbp + 0xbf0], rax
mov qword [rbp + 0xbf8], rax
mov qword [rbp + 0xc00], rax
mov qword [rbp + 0xc08], rax
mov dword [rbp + 0xc10], eax
mov qword [rbp + 0xb78], rax
mov qword [rbp + 0xb80], rax
test rdi, rdi
je 0x14000d561
lea edx, [rax + 7]
mov r15, qword [rbp + 0x70]
mov rcx, r15
mov rax, qword [0x140053050]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000c31b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d561
lea r8, [rbp + 0x8a0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000c353
mov rax, qword [rbp + 0x8b8]
mov qword [rbp - 0x30], rax
mov r13d, dword [rbp + 0x8a4]
mov esi, dword [rbp + 0x8a8]
mov rcx, r15
mov rax, qword [0x140053010]
call qword [case.0x140012211.0]
mov r12, rax
mov qword [rbp + 0x78], rax
test rax, rax
jne 0x14000c37a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d561
mov ecx, dword [rbp + 0x738]
sub ecx, dword [rbp + 0x730]
mov eax, dword [rbp + 0x734]
sub eax, dword [rbp + 0x72c]
xor r15d, r15d
mov qword [rbp + 0x500], r15
mov dword [rbp - 0x6c], r15d
xor edx, edx
mov qword [rbp + 0xbe8], rdx
mov qword [rbp + 0xbf0], rdx
mov qword [rbp + 0xbf8], rdx
mov qword [rbp + 0xc00], rdx
mov qword [rbp + 0xc08], rdx
mov dword [rbp + 0xc10], edx
mov dword [rbp + 0xbe8], 0x28
mov dword [rbp + 0xbec], eax
neg ecx
mov dword [rbp + 0xbf0], ecx
mov dword [rbp + 0xbf4], 0x200001
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x500]
xor r8d, r8d
lea rdx, [rbp + 0xbe8]
mov rcx, r12
mov rax, qword [0x140053018]
call qword [case.0x140012211.0]
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14000c44e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x6c], eax
test eax, eax
jle 0x14000c43c
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x6c], eax
test eax, eax
js 0x14000c76b
mov dword [rbp - 0x6c], 0x80004005
jmp 0x14000c76b
lea r8, [rbp + 0xa60]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
cmovne r15, qword [rbp + 0xa78]
mov eax, dword [rbp + 0x734]
sub eax, dword [rbp + 0x72c]
mov dword [rbp + 0xb80], eax
mov eax, dword [rbp + 0x738]
sub eax, dword [rbp + 0x730]
mov dword [rbp + 0xb84], eax
mov rdx, qword [rsp + 0x78]
mov rcx, r12
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov edx, 1
mov rcx, r12
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov rdx, qword [rbp - 0x10]
mov rcx, r12
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp - 0x10], rax
xor ecx, ecx
mov rax, qword [0x140053070]
call qword [case.0x140012211.0]
mov r8, rax
lea rdx, [rbp + 0xb78]
mov rcx, r12
mov rax, qword [0x1400530e8]
call qword [case.0x140012211.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x54]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xb78]
or r8d, 0xffffffff
mov rdx, rdi
mov rcx, r12
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x48], 1
jne 0x14000c556
test ebx, ebx
je 0x14000c54d
mov ecx, 8
mov rax, qword [0x140053118]
call qword [case.0x140012211.0]
jmp 0x14000c55b
mov dword [rbp - 0x70], 0xffffff
jmp 0x14000c561
mov eax, 0xffa8a8a8
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x68], eax
mov eax, dword [rbp + 0x72c]
mov edi, eax
neg edi
test eax, eax
mov r10d, 0
cmovns edi, r10d
mov r8d, r10d
cmovns r8d, eax
mov eax, dword [rbp + 0x730]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r10d
mov edx, r10d
cmovns edx, eax
movsxd r9, dword [rbp + 0xb80]
mov ebx, r9d
sub ebx, edi
mov eax, r13d
sub eax, r8d
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [rbp + 0xb84]
sub eax, ecx
sub esi, edx
cmp eax, esi
cmovge eax, esi
mov dword [rbp - 0x80], eax
test ebx, ebx
jle 0x14000c73d
test eax, eax
jle 0x14000c73d
imul ecx, r9d
movsxd rcx, ecx
movsxd rax, edi
add rcx, rax
lea rsi, [r15 + rcx*4]
imul edx, r13d
movsxd rcx, edx
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x30]
lea r15, [rax + rcx*4]
mov r12d, r10d
mov rax, r9
shl rax, 2
mov qword [rbp - 0x30], rax
movsxd rax, r13d
shl rax, 2
mov qword [rbp - 0x20], rax
movzx r13d, byte [rbp - 0x6e]
mov eax, dword [rbp - 0x80]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
mov r14d, dword [rbp - 0x68]
test ebx, ebx
jle 0x14000c71c
lea r9, [rsi + 2]
mov r11, r15
sub r11, rsi
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14000c701
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r14b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x6f]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r9 + r11 - 2]
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r9 + r11 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
add r9, 4
inc r10d
cmp r10d, ebx
jl 0x14000c632
mov eax, dword [rbp - 0x80]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
add rsi, rcx
add r15, rdx
inc r12d
cmp r12d, eax
mov r10d, 0
jl 0x14000c620
mov r14d, dword [rsp + 0x70]
mov r12, qword [rbp + 0x78]
mov rcx, qword [rsp + 0x78]
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x14000c76b
mov rdx, rax
mov rcx, r12
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov rcx, r12
mov rax, qword [0x140053030]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x6c], 0
jl 0x14000d561
mov r12, qword [rbp + 0x30]
mov rdi, qword [rbp + 0x70]
jmp 0x14000d51a
cmp dword [rbp + 0x6e4], 0
jne 0x14000c7a2
cmp esi, r12d
mov al, 0xc0
jne 0x14000c7a4
mov al, 0xff
mov word [rbp + 0x120], 0
mov byte [rbp + 0x122], al
mov byte [rbp + 0x123], r12b
xor eax, eax
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x1b0], rax
mov rcx, r13
mov rax, qword [0x140053010]
call qword [case.0x140012211.0]
mov r12, rax
mov qword [rbp + 0x30], rax
test rax, rax
jne 0x14000c7ff
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d561
cmp esi, 1
jne 0x14000c8de
mov ecx, dword [rbp + 0x724]
mov eax, ecx
mov edx, dword [rbp + 0x71c]
sub eax, edx
mov esi, dword [rbp + 0x734]
mov r13d, esi
mov r8d, dword [rbp + 0x72c]
sub r13d, r8d
cmp r13d, eax
cmovle r13d, eax
mov dword [rbp - 0x80], r13d
mov r10d, dword [rbp + 0x738]
mov r11d, r10d
mov r9d, dword [rbp + 0x720]
sub r11d, r9d
mov dword [rbp + 0x10], r11d
mov edi, r15d
mov eax, r15d
cmp dword [rbp + 0x6e0], 0
je 0x14000c87d
mov edi, r13d
sub edi, ecx
add edi, edx
mov r15d, edi
mov dword [rbp + 0x1c8], edi
mov eax, r13d
sub eax, esi
add eax, r8d
mov dword [rbp + 0x1a8], eax
jmp 0x14000c884
mov r15d, dword [rbp + 0x1c8]
sub edi, edx
add edi, ecx
mov dword [rbp + 0x1d0], edi
mov ebx, dword [rbp + 0x728]
sub ebx, r9d
mov dword [rbp + 0x1d4], ebx
sub esi, r8d
add esi, eax
mov dword [rbp - 0x20], esi
mov dword [rbp + 0x1b0], esi
mov r12d, dword [rbp + 0x730]
sub r12d, r9d
mov dword [rbp - 0x60], r12d
mov dword [rbp + 0x1ac], r12d
mov esi, r12d
sub esi, dword [rbp + 0x730]
add esi, r10d
mov dword [rbp + 0x50], esi
mov dword [rbp + 0x1b4], esi
mov esi, dword [rbp - 0x48]
mov r12, qword [rbp + 0x30]
jmp 0x14000c93e
mov r13d, dword [rbp + 0xd0]
mov dword [rbp - 0x80], r13d
mov r11d, dword [rbp + 0xd4]
mov dword [rbp + 0x10], r11d
movups xmm0, xmmword [rbp + 0x71c]
movups xmmword [rbp + 0x1c8], xmm0
movups xmm0, xmmword [rbp + 0x72c]
movups xmmword [rbp + 0x1a8], xmm0
mov ebx, dword [rbp + 0x1d4]
mov edi, dword [rbp + 0x1d0]
mov r15d, dword [rbp + 0x1c8]
mov eax, dword [rbp + 0x1b4]
mov dword [rbp + 0x50], eax
mov eax, dword [rbp + 0x1b0]
mov dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x1ac]
mov dword [rbp - 0x60], eax
xor ecx, ecx
mov qword [rbp + 0x508], rcx
xor eax, eax
mov qword [rbp + 0xc18], rax
mov qword [rbp + 0xc20], rax
mov qword [rbp + 0xc28], rax
mov qword [rbp + 0xc30], rax
mov qword [rbp + 0xc38], rax
mov dword [rbp + 0xc40], eax
mov dword [rbp + 0xc18], 0x28
mov dword [rbp + 0xc1c], r13d
mov eax, r11d
neg eax
mov dword [rbp + 0xc20], eax
mov dword [rbp + 0xc24], 0x200001
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x508]
xor r8d, r8d
lea rdx, [rbp + 0xc18]
mov rcx, r12
mov rax, qword [0x140053018]
call qword [case.0x140012211.0]
mov qword [rbp + 0x58], rax
test rax, rax
jne 0x14000c9d6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d54c
mov rdx, rax
mov rcx, r12
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
cmp esi, 1
jne 0x14000ca31
mov r8, qword [rbp + 0x140]
test r8, r8
je 0x14000ca31
xor eax, eax
mov qword [rbp + 0xbb0], rax
mov qword [rbp + 0xba8], rax
mov dword [rbp + 0xbb0], r13d
mov eax, dword [rbp + 0x10]
mov dword [rbp + 0xbb4], eax
lea rdx, [rbp + 0xba8]
mov rcx, r12
mov rax, qword [0x1400530e8]
call qword [case.0x140012211.0]
mov eax, dword [rbp + 0x6e4]
mov dword [rbp - 0x70], eax
mov rax, qword [rbp + 0x700]
mov qword [rbp + 0x78], rax
mov rsi, qword [rbp + 0x6e8]
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x7c0]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x980]
call sub.msvcrt.dll_memset
xor ecx, ecx
mov qword [rbp + 0xc0], rcx
mov dword [rsp + 0x78], ecx
mov r13d, ecx
xor eax, eax
mov qword [rbp + 0xc48], rax
mov qword [rbp + 0xc50], rax
mov qword [rbp + 0xc58], rax
mov qword [rbp + 0xc60], rax
mov qword [rbp + 0xc68], rax
mov dword [rbp + 0xc70], eax
mov qword [rbp + 0xb88], rax
mov qword [rbp + 0xb90], rax
test rsi, rsi
je 0x14000d533
lea edx, [rcx + 7]
mov rcx, r12
mov rax, qword [0x140053050]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000cae5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d533
lea r8, [rbp + 0x7c0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000cb24
mov rax, qword [rbp + 0x7d8]
mov qword [rbp + 0xc0], rax
mov eax, dword [rbp + 0x7c4]
mov dword [rsp + 0x78], eax
mov r13d, dword [rbp + 0x7c8]
mov rcx, r12
mov rax, qword [0x140053010]
call qword [case.0x140012211.0]
mov rcx, rax
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14000cb4b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000d533
mov r12d, dword [rbp + 0x1cc]
sub ebx, r12d
sub edi, r15d
xor edx, edx
mov qword [rbp + 0x510], rdx
mov dword [rbp - 0x6c], edx
xor eax, eax
mov qword [rbp + 0xc48], rax
mov qword [rbp + 0xc50], rax
mov qword [rbp + 0xc58], rax
mov qword [rbp + 0xc60], rax
mov qword [rbp + 0xc68], rax
mov dword [rbp + 0xc70], eax
mov dword [rbp + 0xc48], 0x28
mov dword [rbp + 0xc4c], edi
mov eax, ebx
neg eax
mov dword [rbp + 0xc50], eax
mov dword [rbp + 0xc54], 0x200001
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x510]
xor r8d, r8d
lea rdx, [rbp + 0xc48]
mov rax, qword [0x140053018]
call qword [case.0x140012211.0]
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x14000cc13
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x6c], eax
test eax, eax
jle 0x14000cbfd
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x6c], eax
test eax, eax
mov rdi, qword [rbp - 0x30]
js 0x14000cf47
mov dword [rbp - 0x6c], 0x80004005
jmp 0x14000cf47
lea r8, [rbp + 0x980]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
xor ecx, ecx
test eax, eax
cmovne rcx, qword [rbp + 0x998]
mov qword [rbp + 0x178], rcx
mov dword [rbp + 0xb90], edi
mov dword [rbp + 0xb94], ebx
mov rdx, qword [rbp - 0x10]
mov rdi, qword [rbp - 0x30]
mov rcx, rdi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov edx, 1
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov rdx, qword [rbp + 0x78]
mov rcx, rdi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp + 0x90], rax
xor ecx, ecx
mov rax, qword [0x140053070]
call qword [case.0x140012211.0]
mov r8, rax
lea rdx, [rbp + 0xb88]
mov rcx, rdi
mov rax, qword [0x1400530e8]
call qword [case.0x140012211.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x54]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xb88]
or r8d, 0xffffffff
mov rdx, rsi
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x48], 1
jne 0x14000cd17
cmp dword [rbp - 0x70], 0
je 0x14000cd10
mov ecx, 8
mov rax, qword [0x140053118]
call qword [case.0x140012211.0]
mov esi, eax
mov dword [rbp - 0x70], eax
jmp 0x14000cd1f
mov esi, 0xffffff
jmp 0x14000cd1c
mov esi, 0xffa8a8a8
mov dword [rbp - 0x70], esi
mov edi, r15d
neg edi
test r15d, r15d
mov r11d, 0
cmovns edi, r11d
mov r8d, r11d
cmovns r8d, r15d
mov ecx, r12d
neg ecx
test r12d, r12d
cmovns ecx, r11d
mov edx, r11d
cmovns edx, r12d
movsxd r10, dword [rbp + 0xb90]
mov ebx, r10d
sub ebx, edi
movsxd r9, dword [rsp + 0x78]
mov eax, r9d
sub eax, r8d
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [rbp + 0xb94]
sub eax, ecx
sub r13d, edx
cmp eax, r13d
cmovge eax, r13d
mov dword [rsp + 0x78], eax
test ebx, ebx
jle 0x14000cf13
test eax, eax
jle 0x14000cf13
imul ecx, r10d
movsxd rcx, ecx
movsxd rax, edi
add rcx, rax
mov rax, qword [rbp + 0x178]
lea r15, [rax + rcx*4]
imul edx, r9d
movsxd rcx, edx
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp + 0xc0]
lea r12, [rax + rcx*4]
mov r13d, r11d
mov rax, r10
shl rax, 2
mov qword [rbp + 0xc0], rax
mov rax, r9
shl rax, 2
mov qword [rbp + 0x78], rax
mov eax, dword [rsp + 0x78]
mov rcx, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0x78]
nop dword [rax + rax]
mov r10d, r11d
test ebx, ebx
jle 0x14000cf01
lea r9, [r15 + 2]
mov r11, r12
sub r11, r15
nop word [rax + rax]
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14000cedf
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, sil
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp - 0x6f]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, byte [rbp - 0x6e]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
add r9, 4
inc r10d
cmp r10d, ebx
jl 0x14000ce10
mov eax, dword [rsp + 0x78]
mov rcx, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0x78]
xor r11d, r11d
add r15, rcx
add r12, rdx
inc r13d
cmp r13d, eax
jl 0x14000cdf0
mov rcx, qword [rbp - 0x10]
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov rax, qword [rbp + 0x90]
mov rdi, qword [rbp - 0x30]
test rax, rax
je 0x14000cf47
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov rcx, rdi
mov rax, qword [0x140053030]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x6c], 0
jl 0x14000d52f
mov eax, dword [rbp + 0x6e4]
mov dword [rsp + 0x78], eax
mov rax, qword [rbp + 0x708]
mov qword [rbp + 0x90], rax
mov r15, qword [rbp + 0x6f0]
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x830]
call sub.msvcrt.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0xad0]
call sub.msvcrt.dll_memset
xor eax, eax
mov r12d, eax
mov r13d, eax
mov edi, eax
mov qword [rbp + 0xc78], rax
mov qword [rbp + 0xc80], rax
mov qword [rbp + 0xc88], rax
mov qword [rbp + 0xc90], rax
mov qword [rbp + 0xc98], rax
mov dword [rbp + 0xca0], eax
mov qword [rbp + 0xb98], rax
mov qword [rbp + 0xba0], rax
test r15, r15
je 0x14000d52f
lea edx, [rax + 7]
mov rbx, qword [rbp + 0x30]
mov rcx, rbx
mov rax, qword [0x140053050]
call qword [case.0x140012211.0]
test rax, rax
jne 0x14000d018
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12, rbx
jmp 0x14000d533
lea r8, [rbp + 0x830]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
test eax, eax
je 0x14000d04c
mov r12, qword [rbp + 0x848]
mov r13d, dword [rbp + 0x834]
mov edi, dword [rbp + 0x838]
mov rcx, rbx
mov rax, qword [0x140053010]
call qword [case.0x140012211.0]
mov rsi, rax
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14000d076
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r12, rbx
jmp 0x14000d533
mov eax, dword [rbp + 0x50]
sub eax, dword [rbp - 0x60]
mov dword [rbp + 0x50], eax
mov ebx, dword [rbp - 0x20]
sub ebx, dword [rbp + 0x1a8]
xor edx, edx
mov qword [rbp + 0x520], rdx
mov dword [rbp - 0x70], edx
xor ecx, ecx
mov qword [rbp + 0xc78], rcx
mov qword [rbp + 0xc80], rcx
mov qword [rbp + 0xc88], rcx
mov qword [rbp + 0xc90], rcx
mov qword [rbp + 0xc98], rcx
mov dword [rbp + 0xca0], ecx
mov dword [rbp + 0xc78], 0x28
mov dword [rbp + 0xc7c], ebx
neg eax
mov dword [rbp + 0xc80], eax
mov dword [rbp + 0xc84], 0x200001
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x520]
xor r8d, r8d
lea rdx, [rbp + 0xc78]
mov rcx, rsi
mov rax, qword [0x140053018]
call qword [case.0x140012211.0]
mov qword [rbp + 0xc0], rax
test rax, rax
jne 0x14000d143
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x70], eax
test eax, eax
jle 0x14000d131
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x70], eax
test eax, eax
js 0x14000d46b
mov dword [rbp - 0x70], 0x80004005
jmp 0x14000d46b
lea r8, [rbp + 0xad0]
mov edx, 0x68
mov rcx, rax
mov rax, qword [0x140053068]
call qword [case.0x140012211.0]
xor ecx, ecx
mov esi, ecx
test eax, eax
cmovne rsi, qword [rbp + 0xae8]
mov dword [rbp + 0xba0], ebx
mov eax, dword [rbp + 0x50]
mov dword [rbp + 0xba4], eax
mov rdx, qword [rbp + 0xc0]
mov rbx, qword [rbp - 0x30]
mov rcx, rbx
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov edx, 1
mov rcx, rbx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov rdx, qword [rbp + 0x90]
mov rcx, rbx
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov qword [rbp + 0x90], rax
xor ecx, ecx
mov rax, qword [0x140053070]
call qword [case.0x140012211.0]
mov r8, rax
lea rdx, [rbp + 0xb98]
mov rcx, rbx
mov rax, qword [0x1400530e8]
call qword [case.0x140012211.0]
xor eax, eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x54]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0xb98]
or r8d, 0xffffffff
mov rdx, r15
mov rcx, rbx
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x48], 1
jne 0x14000d249
cmp dword [rsp + 0x78], 0
je 0x14000d240
mov ecx, 8
mov rax, qword [0x140053118]
call qword [case.0x140012211.0]
jmp 0x14000d24e
mov dword [rbp + 0x54], 0xffffff
jmp 0x14000d254
mov eax, 0xffa8a8a8
mov dword [rbp + 0x54], eax
mov dword [rbp - 0x68], eax
mov eax, dword [rbp + 0x1a8]
mov edx, eax
neg edx
test eax, eax
mov r11d, 0
cmovns edx, r11d
mov r8d, r11d
cmovns r8d, eax
mov eax, dword [rbp - 0x60]
mov ecx, eax
neg ecx
test eax, eax
cmovns ecx, r11d
mov r9d, r11d
cmovns r9d, eax
mov eax, r13d
sub eax, r8d
movsxd r10, dword [rbp + 0xba0]
mov ebx, r10d
sub ebx, edx
cmp ebx, eax
cmovge ebx, eax
mov eax, dword [rbp + 0xba4]
sub eax, ecx
sub edi, r9d
cmp eax, edi
cmovge eax, edi
mov dword [rbp - 0x20], eax
test ebx, ebx
jle 0x14000d434
test eax, eax
jle 0x14000d434
mov eax, r10d
imul eax, ecx
movsxd rcx, eax
movsxd rax, edx
add rcx, rax
lea rsi, [rsi + rcx*4]
mov eax, r13d
imul eax, r9d
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
lea r15, [r12 + rcx*4]
mov r12d, r11d
mov rax, r10
shl rax, 2
mov qword [rbp - 0x10], rax
movsxd rax, r13d
shl rax, 2
mov qword [rbp + 0x78], rax
movzx r13d, byte [rbp + 0x56]
mov eax, dword [rbp - 0x20]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x78]
mov r14d, dword [rbp - 0x68]
mov r10d, r11d
test ebx, ebx
jle 0x14000d41d
lea r9, [rsi + 2]
mov r11, r15
sub r11, rsi
nop dword [rax + rax]
movzx ecx, byte [r9 - 1]
movzx eax, byte [r9 - 2]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x14000d3ff
movzx edi, byte [r11 + r9]
movzx r8d, dl
movzx ecx, r14b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9], dl
movzx edi, byte [r11 + r9 - 1]
movzx ecx, byte [rbp + 0x55]
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 1], dl
movzx edi, byte [r11 + r9 - 2]
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 - 2], dl
movzx edi, byte [r11 + r9 + 1]
mov ecx, 0xff
sub ecx, edi
imul ecx, r8d
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r11 + r9 + 1], dl
add r9, 4
inc r10d
cmp r10d, ebx
jl 0x14000d330
mov eax, dword [rbp - 0x20]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x78]
xor r11d, r11d
add rsi, rcx
add r15, rdx
inc r12d
cmp r12d, eax
jl 0x14000d313
mov r14d, dword [rsp + 0x70]
mov rcx, qword [rbp + 0xc0]
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov rax, qword [rbp + 0x90]
mov rsi, qword [rbp - 0x30]
test rax, rax
je 0x14000d46b
mov rdx, rax
mov rcx, rsi
mov rax, qword [0x140053078]
call qword [case.0x140012211.0]
mov rcx, rsi
mov rax, qword [0x140053030]
call qword [case.0x140012211.0]
cmp dword [rbp - 0x70], 0
jl 0x14000d52f
mov r12, qword [rbp + 0x30]
mov r9d, dword [rbp - 0x80]
mov rdi, qword [rbp + 0x70]
cmp dword [rbp - 0x48], 1
jne 0x14000d4d4
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r12
mov eax, dword [rbp + 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbp + 0x720]
mov edx, dword [rbp + 0x71c]
mov rcx, rdi
mov rax, qword [section..data]
call qword [case.0x140012211.0]
jmp 0x14000d51a
mov ecx, dword [rbp + 0x120]
mov dword [rsp + 0x50], ecx
mov eax, dword [rbp + 0x10]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
xor ecx, ecx
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], eax
mov r8d, dword [rbp + 0xcc]
mov edx, dword [rbp + 0xc8]
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
mov edx, dword [rbp - 0x78]
mov rcx, rdi
mov rax, qword [fcn.14001e740]
call qword [case.0x140012211.0]
jmp 0x14000d533
mov r12, qword [rbp + 0x30]
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x14000d54c
mov rcx, rax
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
test r12, r12
je 0x14000d561
mov rcx, r12
mov rax, qword [0x140053030]
call qword [case.0x140012211.0]
mov rax, qword [rbp + 0x140]
test rax, rax
je 0x14000d57d
mov rcx, rax
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov r12d, 1
xor r13d, r13d
mov rax, qword [rbp + 0x6e8]
test rax, rax
je 0x14000d5d1
or rcx, 0xffffffffffffffff
nop word [rax + rax]
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x14000d5a0
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0x6e8]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x6e8]
call fcn.14003e590
mov qword [rbp + 0x6e8], r13
mov rax, qword [rbp + 0x6f0]
test rax, rax
je 0x14000d612
or rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rax + rcx*2], 0
jne 0x14000d5e1
lea rcx, [rcx*2 + 2]
mov rdi, qword [rbp + 0x6f0]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x6f0]
call fcn.14003e590
mov qword [rbp + 0x6f0], r13
mov rdi, qword [rbp + 0x6f8]
test rdi, rdi
je 0x14000d64c
or rcx, 0xffffffffffffffff
lea rcx, [rcx + 1]
cmp word [rdi + rcx*2], 0
jne 0x14000d622
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbp + 0x6f8]
call fcn.14003e590
mov qword [rbp + 0x6f8], r13
mov rcx, qword [rbp + 0x700]
test rcx, rcx
je 0x14000d66c
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov qword [rbp + 0x700], r13
mov rcx, qword [rbp + 0x708]
test rcx, rcx
je 0x14000d68c
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov qword [rbp + 0x708], r13
mov rcx, qword [rbp + 0x710]
test rcx, rcx
je 0x14000d6b0
mov rax, qword [0x140053038]
call qword [case.0x140012211.0]
mov qword [rbp + 0x710], r13
nop dword [rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], r12d
jne 0x14000d6b0
mov eax, dword [0x140053c1c]
test eax, eax
jle 0x14000d76a
sub eax, 1
mov dword [0x140053c1c], eax
jne 0x14000d76a
lea rsi, [0x1400543d0]
mov rdi, rsi
mov ebx, 4
nop dword [rax]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000d6fe
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, 1
jne 0x14000d6f0
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, rsi
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea edi, [rbx + 0xb]
nop word [rax + rax]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub rdi, 1
jne 0x14000d730
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov eax, r13d
xchg dword [0x1400544d8], eax
mov eax, dword [0x140053c18]
mov dword [rsp + 0x78], eax
mov rax, qword [0x140053098]
call qword [case.0x140012211.0]
sub eax, dword [0x140053c10]
mov qword [rbp + 0x90], rax
mov dword [rbp + 0x1520], r13d
xor eax, eax
mov qword [rbp + 0x1528], rax
mov qword [rbp + 0x1530], rax
mov qword [rbp + 0x1538], rax
mov qword [rbp + 0x1540], rax
mov qword [rbp + 0x1548], rax
mov qword [rbp + 0x1550], rax
mov qword [rbp + 0x1558], rax
xor eax, eax
lock cmpxchg dword [0x1400544d8], r12d
jne 0x14000d7d1
mov eax, dword [0x140053c1c]
test eax, eax
jne 0x14000de43
mov dword [rbp - 0x78], r13d
mov dword [rbp - 0x80], r13d
mov qword [rbp + 0x348], r13
mov qword [rbp + 0x528], r13
mov ecx, 0x338
call fcn.14001e288
mov rbx, rax
test rax, rax
je 0x14000dd8a
or r14d, 0xffffffff
xor eax, eax
mov r11d, eax
mov dword [rbp + 8], eax
mov r10d, eax
mov dword [rbp + 0x28], eax
lea r12, [rbx + 7]
lea rsi, [0x140044aa2]
lea r15d, [rax + 0x67]
nop dword [rax]
movzx r9d, byte [rsi - 2]
shl r9d, 8
movzx eax, byte [rsi - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi]
or r9d, eax
shl r9d, 8
movzx eax, byte [rsi + 1]
or r9d, eax
movzx r8d, byte [rsi + 2]
shl r8d, 8
movzx eax, byte [rsi + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [rsi + 5]
or r8d, eax
xor r10d, r9d
xor r11d, r8d
lea rsi, [rsi + 8]
xor r11d, r10d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
mov ecx, r11d
rol ecx, 0xa
imul eax, eax, 0x137f
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0xab69
sub eax, ecx
xor r11d, eax
imul ecx, r11d, 0x605e
mov eax, r11d
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
mov ecx, r10d
rol ecx, 2
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov ecx, r11d
xor ecx, 0xab69605e
mov eax, 0x7f1137f
sub eax, ecx
xor r10d, eax
mov edx, r10d
ror edx, 6
mov eax, r10d
xor eax, 0x137f
imul ecx, eax, 0xab69
xor edx, ecx
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
mov ecx, r11d
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
mov ecx, r10d
rol ecx, 8
imul eax, eax, 0x7f1
sub eax, ecx
xor r11d, eax
mov eax, r11d
xor eax, 0xab69605e
ror eax, 0xc
mov ecx, r11d
ror ecx, 0xa
imul eax, eax, 0x137f
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor r11d, ecx
mov eax, r11d
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea edi, [r10 - 0x7f1]
xor edi, r11d
xor edi, 0xab69605e
mov eax, edi
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, edi
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0xab69
add ecx, eax
xor edi, ecx
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, 0x137f
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
mov ecx, r10d
rol ecx, 7
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
mov edx, edi
xor edx, r10d
xor edx, 0xac987321
mov eax, edx
ror eax, 3
sub eax, 0xab69
imul eax, eax, 0x137f
xor edi, eax
lea eax, [rdi - 0x7f1137f]
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea eax, [rdx - 0x54969fa2]
rol eax, 3
mov ecx, edx
rol ecx, 0xe
imul eax, eax, 0x7f1
add ecx, eax
xor edi, ecx
lea eax, [rdi - 0x54969fa2]
rol eax, 0xf
mov ecx, edi
ror ecx, 0xe
imul eax, eax, 0x137f
sub eax, ecx
xor edx, eax
mov eax, edx
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, edx
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, 0x7f1137f
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, r13d
xor edx, ecx
mov dword [rbp + 0x28], edx
xor edi, r14d
mov dword [rbp + 8], edi
mov byte [r12 - 4], dl
ror dword [rbp + 0x28], 8
movzx eax, byte [rbp + 8]
mov byte [r12], al
ror dword [rbp + 8], 8
movzx eax, byte [rbp + 0x28]
mov byte [r12 - 5], al
ror dword [rbp + 0x28], 8
movzx eax, byte [rbp + 8]
mov byte [r12 - 1], al
ror dword [rbp + 8], 8
movzx eax, byte [rbp + 0x28]
mov byte [r12 - 6], al
ror dword [rbp + 0x28], 8
movzx eax, byte [rbp + 8]
mov byte [r12 - 2], al
ror dword [rbp + 8], 8
movzx eax, byte [rbp + 0x28]
mov byte [r12 - 7], al
movzx eax, byte [rbp + 8]
mov byte [r12 - 3], al
mov r10d, dword [rbp + 0x28]
ror r10d, 8
mov dword [rbp + 0x28], r10d
mov r11d, dword [rbp + 8]
ror r11d, 8
mov dword [rbp + 8], r11d
mov r13d, r9d
mov r14d, r8d
lea r12, [r12 + 8]
sub r15, 1
jne 0x14000d840
xor edi, edi
mov eax, edi
xorps xmm1, xmm1
xorps xmm2, xmm2
mov r14d, dword [rsp + 0x70]
mov esi, dword [rbp - 0x78]
mov r15d, esi
nop dword [rax + rax]
movdqu xmm0, xmmword [rbx + rax]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [rbx + rax + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, 0x320
jb 0x14000db70
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd ecx, xmm1
cmp rax, 0x338
jae 0x14000dbee
nop dword [rax + rax]
xor cl, byte [rax + rbx]
inc rax
cmp rax, 0x338
jb 0x14000dbe0
movzx eax, cl
cmp rax, qword [0x140044dd8]
jne 0x14000dd82
mov qword [rbp + 0x348], rbx
mov qword [rbp + 0x528], 0x338
mov byte [rbx + 0x337], dil
xor edx, edx
lea r8d, [rdx + 0x60]
lea r13, [0x1400543d0]
mov rcx, r13
call sub.msvcrt.dll_memset
cmp byte [rbx], dil
je 0x14000dd97
nop word [rax + rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rbx + rax*2], 0
jne 0x14000dc50
lea rbx, [rbx + rax*2]
add rbx, 2
mov eax, dword [rbp - 0x80]
lea rcx, [rax + rax*2]
lea r12, [rcx*8]
add r12, r13
mov r8, r12
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
je 0x14000dd7a
mov r15d, edi
mov rax, qword [r12]
mov ecx, 0x5a4d
cmp word [rax], cx
je 0x14000dca1
mov r15d, 0xc000007b
jmp 0x14000dd09
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jb 0x14000dcb5
mov r15d, 0xc000007b
jmp 0x14000dd09
add rcx, qword [r12]
cmp rcx, qword [r12]
jae 0x14000dcc7
mov r15d, 0xc000007b
jmp 0x14000dd09
cmp dword [rcx], 0x4550
je 0x14000dcd7
mov r15d, 0xc000007b
jmp 0x14000dd09
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14000dcf5
mov r15d, 0xc000000d
jmp 0x14000dd09
mov rax, qword [rcx + 0x88]
mov qword [r12 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r12 + 8], eax
mov r13d, dword [rbx]
add rbx, 4
test r13d, r13d
je 0x14000dd60
nop word [rax + rax]
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14000dd27
inc rbx
add rbx, rax
test r15d, r15d
js 0x14000dd57
mov rcx, qword [r12]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x14000dd90
mov ecx, esi
lea rdx, section..data
mov qword [rdx + rcx*8], rax
inc esi
inc edi
cmp edi, r13d
jb 0x14000dd20
inc dword [rbp - 0x80]
cmp byte [rbx], 0
mov edi, 0
lea r13, [0x1400543d0]
jne 0x14000dc40
jmp 0x14000dd90
mov r15d, 0xc000007a
jmp 0x14000dd97
mov rcx, rbx
call fcn.14003e590
mov r15d, 0xc000007a
lea r13, [0x1400543d0]
cmp qword [rbp + 0x348], 0
je 0x14000ddb9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rbp + 0x348]
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r15d, r15d
jns 0x14000de3d
mov rdi, r13
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000ddd4
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, 1
jne 0x14000ddc6
mov esi, 0x60
mov r8d, esi
xor edx, edx
mov rcx, r13
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea edi, [rbx + 0xb]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub rdi, 1
jne 0x14000de01
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
jmp 0x14000de57
mov eax, dword [0x140053c1c]
inc eax
mov dword [0x140053c1c], eax
lea r13, [0x1400543d0]
mov esi, 0x60
xor r12d, r12d
mov eax, r12d
xchg dword [0x1400544d8], eax
mov rcx, qword [rbp + 0x90]
mov dword [rbp + 0x1528], ecx
mov edi, 1
mov dword [rbp + 0x1520], edi
mov dword [rbp + 0x1538], 0x9966f291
mov dword [rbp + 0x1530], edi
mov dword [rbp + 0x1548], edi
mov dword [rbp + 0x1540], edi
mov eax, dword [rsp + 0x78]
mov dword [rbp + 0x1558], eax
mov dword [rbp + 0x1550], edi
lea r9, [rbp + 0x1520]
mov edx, 0x2021
xor ecx, ecx
lea r8d, [r12 + 4]
mov rax, qword [0x1400530d0]
call qword [case.0x140012211.0]
nop word [rax + rax]
xor eax, eax
lock cmpxchg dword [0x1400544d8], edi
jne 0x14000ded0
mov eax, dword [0x140053c1c]
test eax, eax
jle 0x14000df7a
sub eax, edi
mov dword [0x140053c1c], eax
jne 0x14000df7a
mov rdi, r13
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000df0e
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, 1
jne 0x14000df00
mov r8, rsi
xor edx, edx
mov rcx, r13
call sub.msvcrt.dll_memset
lea rcx, section..data
lea rdx, [0x140041a20]
lea edi, [rbx + 0xb]
nop word [rax + rax]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx + 0x18]
mov qword [rcx - 8], rax
lea rdx, [rdx + 0x20]
sub rdi, 1
jne 0x14000df40
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov eax, r12d
xchg dword [0x1400544d8], eax
mov rdx, qword [rbp + 0x70]
xor ecx, ecx
mov rax, qword [0x140053160]
call qword [case.0x140012211.0]
lea rcx, [rbp + 0x530]
call fcn.14003e5b4
cmp dword [rbp + 0x88], 0
je 0x14000e419
mov rsi, r12
mov r13, r12
xor eax, eax
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c0], rax
mov dword [rbp + 0x104], r12d
lea rax, [0x1400534f0]
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x3f0], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r15, rax
test rax, rax
je 0x14000e38c
mov r8, qword [rbp + 0x3f0]
mov rdx, qword [rbp + 0x538]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rsi, r15
mov qword [rsp + 0x78], r15
mov ebx, dword [rbp + 0x3f0]
lea rax, [0x140053430]
mov qword [rbp + 0x540], rax
mov qword [rbp + 0x3f8], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r12, rax
test rax, rax
je 0x14000e389
mov r8, qword [rbp + 0x3f8]
mov rdx, qword [rbp + 0x540]
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov r13, r12
mov qword [rbp + 0x30], r12
mov rsi, qword [rbp + 0x3f8]
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x548], rax
xor eax, eax
mov dword [rbp + 0x64], eax
lea r8, [rbp + 0x294]
mov edx, 4
mov ecx, edx
call fcn.14003e5f8
test eax, eax
js 0x14000e386
mov edx, dword [rbp + 0x294]
mov dword [rbp + 0x118], edx
lea r8, [rbp + 0x64]
xor ecx, ecx
call fcn.14003e5f8
or eax, 0x10000000
jl 0x14000e386
lea r8, [rbp + 0x298]
mov edx, ebx
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e386
mov edx, dword [rbp + 0x298]
mov dword [rbp + 0x118], edx
lea r8, [rbp + 0x64]
mov ecx, dword [rbp + 0x64]
call fcn.14003e5f8
or eax, 0x10000000
jl 0x14000e386
lea r8, [rbp + 0x29c]
mov edx, esi
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e386
mov edx, dword [rbp + 0x29c]
mov dword [rbp + 0x118], edx
lea r8, [rbp + 0x64]
mov ecx, dword [rbp + 0x64]
call fcn.14003e5f8
or eax, 0x10000000
jl 0x14000e386
lea r8, [rbp + 0x2a0]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14003e5f8
test eax, eax
js 0x14000e386
mov edx, dword [rbp + 0x2a0]
mov dword [rbp + 0x118], edx
lea r8, [rbp + 0x64]
mov ecx, dword [rbp + 0x64]
call fcn.14003e5f8
or eax, 0x10000000
jl 0x14000e386
mov eax, dword [rbp + 0x64]
mov dword [rbp + 0x3c], eax
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x14000e386
mov qword [rbp + 0x40], rax
xor r9d, r9d
mov dword [rbp + 0x38], r9d
mov dword [rbp + 0x2a8], 4
lea r8, [rbp + 0x650]
lea edx, [r9 + 4]
mov rcx, rax
call fcn.14003e610
test eax, eax
js 0x14000e386
mov ecx, dword [rbp + 0x3c]
add rcx, rdi
lea rax, [rdi + 8]
cmp rax, rcx
ja 0x14000e386
mov dword [rdi], 4
mov rcx, qword [rbp + 0x650]
mov eax, dword [rbp + 0x2a8]
mov dword [rcx], eax
mov r10d, dword [rbp + 0x38]
inc r10d
mov dword [rbp + 0x38], r10d
test ebx, ebx
je 0x14000e386
cmp qword [rbp + 0x40], r9
jne 0x14000e286
lea r8, [rbp + 0x2b0]
mov edx, ebx
lea ecx, [r9 + 4]
call fcn.14003e5f8
test eax, eax
js 0x14000e71b
mov edx, dword [rbp + 0x2b0]
mov dword [rbp + 0x2b8], edx
lea r8, [rbp + 0x3c]
mov ecx, dword [rbp + 0x3c]
call fcn.14003e5f8
test eax, eax
js 0x14000e386
mov r10d, dword [rbp + 0x38]
inc r10d
jmp 0x14000e338
mov rdi, qword [rbp + 0x40]
mov qword [rbp + 0x350], rdi
test r10d, r10d
je 0x14000e2ef
nop word [rax + rax]
lea r8, [rbp + 0x2b4]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e71b
mov eax, dword [rbp + 0x2b4]
mov dword [rbp + 0x2b8], eax
mov edx, eax
lea r8, [rbp + 0x350]
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e386
inc r9d
mov rdi, qword [rbp + 0x350]
cmp r9d, r10d
jb 0x14000e2a0
lea r8, [rbp + 0x660]
mov edx, 4
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e386
mov r8, rbx
mov ecx, dword [rbp + 0x3c]
add rcx, qword [rbp + 0x40]
lea rax, [rbx + 4]
add rax, rdi
cmp rax, rcx
ja 0x14000e386
mov dword [rdi], ebx
mov rdx, r15
mov rcx, qword [rbp + 0x660]
call sub.msvcrt.dll_memcpy
mov r10d, dword [rbp + 0x38]
inc r10d
xor r9d, r9d
mov dword [rbp + 0x38], r10d
test esi, esi
je 0x14000e386
cmp qword [rbp + 0x40], 0
jne 0x14000e453
lea r8, [rbp + 0x2bc]
mov edx, esi
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e71b
mov edx, dword [rbp + 0x2bc]
mov dword [rbp + 0x2c4], edx
lea r8, [rbp + 0x3c]
mov ecx, dword [rbp + 0x3c]
call fcn.14003e5f8
test eax, eax
jns 0x14000e506
mov rsi, r15
xor r12d, r12d
mov qword [rbp + 0x38], 0
mov rdi, qword [rbp + 0x40]
test rdi, rdi
je 0x14000e3b5
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x1b8], 0
mov rdi, qword [rbp + 0x1c0]
test rdi, rdi
je 0x14000e3e7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x1c0], r12
test rsi, rsi
je 0x14000e400
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test r13, r13
je 0x14000e419
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov eax, dword [rbp + 0xf8]
mov dword [rbp + 0x518], eax
mov esi, dword [rbp + 0x164]
mov qword [rbp + 0x1e0], r12
mov rax, qword [rbp + 0x3e0]
mov qword [rbp + 0x378], rax
lea r15, section..data
lea r13, [0x140041a20]
jmp 0x14001054c
mov rdi, qword [rbp + 0x40]
mov qword [rbp + 0x358], rdi
test r10d, r10d
je 0x14000e4bf
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp + 0x2c0]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e71b
mov eax, dword [rbp + 0x2c0]
mov dword [rbp + 0x2c4], eax
mov edx, eax
lea r8, [rbp + 0x358]
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e386
inc r9d
mov rdi, qword [rbp + 0x358]
cmp r9d, r10d
jb 0x14000e470
lea r8, [rbp + 0x670]
mov edx, 4
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e386
mov r8d, esi
mov ecx, dword [rbp + 0x3c]
add rcx, qword [rbp + 0x40]
lea rax, [r8 + 4]
add rax, rdi
cmp rax, rcx
ja 0x14000e386
mov dword [rdi], esi
mov rdx, r12
mov rcx, qword [rbp + 0x670]
call sub.msvcrt.dll_memcpy
mov r10d, dword [rbp + 0x38]
inc r10d
mov dword [rbp + 0x38], r10d
mov rax, qword [rbp + 0x548]
mov qword [rbp + 0x550], rax
cmp qword [rbp + 0x40], 0
jne 0x14000e56d
lea r8, [rbp + 0x2c8]
mov edx, 8
lea ecx, [rdx - 4]
call fcn.14003e5f8
test eax, eax
js 0x14000e71b
mov edx, dword [rbp + 0x2c8]
mov dword [rbp + 0x2d0], edx
lea r8, [rbp + 0x3c]
mov ecx, dword [rbp + 0x3c]
call fcn.14003e5f8
test eax, eax
js 0x14000e386
inc dword [rbp + 0x38]
xor r12d, r12d
jmp 0x14000e62b
mov rdi, qword [rbp + 0x40]
mov qword [rbp + 0x360], rdi
xor r12d, r12d
mov r9d, r12d
test r10d, r10d
je 0x14000e5df
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp + 0x2cc]
mov edx, dword [rdi]
mov ecx, 4
call fcn.14003e5f8
test eax, eax
js 0x14000e71e
mov eax, dword [rbp + 0x2cc]
mov dword [rbp + 0x2d0], eax
mov edx, eax
lea r8, [rbp + 0x360]
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e71e
inc r9d
mov rdi, qword [rbp + 0x360]
cmp r9d, r10d
jb 0x14000e590
lea r8, [rbp + 0x680]
mov edx, 4
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x14000e71e
mov ecx, dword [rbp + 0x3c]
add rcx, qword [rbp + 0x40]
lea rax, [rdi + 0xc]
cmp rax, rcx
ja 0x14000e71e
mov dword [rdi], 8
mov rax, qword [rbp + 0x680]
movsd xmm0, qword [rbp + 0x550]
movsd qword [rax], xmm0
inc dword [rbp + 0x38]
lea r8, [rbp + 0x2d4]
mov edx, 4
mov ecx, edx
call fcn.14003e5f8
test eax, eax
js 0x14000e71e
mov edi, dword [rbp + 0x2d4]
mov dword [rbp + 0x2dc], edi
mov dword [rbp + 0x194], edi
lea r8, [rbp + 0x2d8]
mov edx, 8
call fcn.14003e5f8
test eax, eax
js 0x14000e71e
mov edx, dword [rbp + 0x2d8]
mov dword [rbp + 0x2dc], edx
lea r8, [rbp + 0x194]
mov ecx, edi
call fcn.14003e5f8
test eax, eax
js 0x14000e71e
mov qword [rbp + 0x78], r12
xor r9d, r9d
mov esi, r9d
mov qword [rbp + 0x1d8], r9
mov qword [rbp - 0x30], r9
mov r13d, r9d
mov dword [rbp - 0x20], r9d
mov r15d, r9d
mov qword [rbp + 0x70], r9
mov dword [rbp + 0x60], r9d
mov qword [rbp - 0x60], r9
mov qword [rbp + 0x10], r9
mov dword [rbp + 0xfc], r9d
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x3d8], rax
mov dword [rbp + 0x9c], 8
lea r8, [rbp + 0x9c]
mov edx, dword [rbp + 0x3c]
lea ecx, [r9 + 8]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000e7ec
mov eax, dword [rbp + 0x9c]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14000e726
mov edi, 0xc0000095
jmp 0x14000e7ec
xor r12d, r12d
mov rsi, r15
jmp 0x14000e38c
mov dword [rbp + 0x9c], ecx
mov edi, ecx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x14000e757
mov edi, 0xc0000017
jmp 0x14000e7e9
mov qword [rbp + 0x1f8], rbx
mov eax, dword [rbp + 0x38]
mov dword [rbx], eax
lea r8, [rbp + 0x1f8]
mov edx, 4
mov rcx, rbx
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000e7d5
mov rcx, qword [rbp + 0x1f8]
mov eax, dword [rbp + 0x3c]
mov dword [rcx], eax
lea r8, [rbp + 0x1f8]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000e7d5
mov ecx, dword [rbp + 0x9c]
mov rax, qword [rbp + 0x3d8]
mov qword [rcx + rbx - 8], rax
mov r8d, dword [rbp + 0x3c]
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x1f8]
call sub.msvcrt.dll_memcpy
mov r12, rbx
mov qword [rbp + 0x78], rbx
mov esi, dword [rbp + 0x9c]
jmp 0x14000e7e9
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor r9d, r9d
or edi, 0x10000000
jl 0x140010259
mov qword [rbp + 0x560], r9
mov qword [rbp + 0x568], r9
mov qword [rbp + 0x570], r9
mov qword [rbp + 0x578], r9
mov qword [rbp + 0x368], r9
mov qword [rbp + 0x558], r9
mov rbx, r9
mov qword [rbp - 0x10], rbx
test r12, r12
jne 0x14000e838
mov edi, 0xc000000d
jmp 0x14000eff4
mov qword [rbp + 0x90], rsi
test rsi, rsi
je 0x14000ef40
lea rcx, [rsi + 8]
call fcn.14001e288
mov r13, rax
mov qword [rbp + 0x178], rax
test rax, rax
je 0x14000ef40
xor al, al
mov dword [rbp - 0x80], eax
xor edi, edi
mov ecx, edi
test rsi, rsi
je 0x14000e90f
cmp rsi, 0x20
jb 0x14000e8f5
mov rdx, rsi
and rdx, 0xffffffffffffffe0
xorps xmm2, xmm2
xorps xmm1, xmm1
nop dword [rax]
movdqu xmm0, xmmword [rcx + r12]
pxor xmm0, xmm2
movdqa xmm2, xmm0
movdqu xmm0, xmmword [rcx + r12 + 0x10]
pxor xmm0, xmm1
movdqa xmm1, xmm0
add rcx, 0x20
cmp rcx, rdx
jb 0x14000e890
pxor xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
mov dword [rbp - 0x80], eax
cmp rcx, rsi
jae 0x14000e90f
nop word [rax + rax]
xor al, byte [rcx + r12]
inc rcx
cmp rcx, rsi
jb 0x14000e900
mov dword [rbp - 0x80], eax
movabs rax, 0xc81ecb17b1b54a58
mov qword [rbp + 0xb60], rax
mov r11, r12
mov rdx, r13
mov r10d, edi
mov dword [rbp - 0x14], edi
or r9d, 0xffffffff
mov dword [rbp - 0x38], r9d
mov r12d, edi
mov rbx, rsi
and ebx, 7
je 0x14000ea03
mov r8d, edi
test ebx, ebx
je 0x14000e97f
mov edi, 0x38
nop
lea r9, [r11 + 1]
movzx eax, byte [r11]
cmp r8d, 4
jge 0x14000e968
lea ecx, [rdi - 0x20]
shl eax, cl
or r12d, eax
jmp 0x14000e96f
mov ecx, edi
shl eax, cl
or r15d, eax
inc r8d
sub edi, 8
mov r11, r9
cmp r8d, ebx
jl 0x14000e950
xor edi, edi
mov r10d, r12d
xor r10d, 0xb17a307a
mov dword [rbp - 0x14], r10d
mov r9d, r15d
xor r9d, 0x42f6b18d
mov dword [rbp - 0x38], r9d
mov eax, edi
test ebx, ebx
jle 0x14000e9cb
lea rcx, [rdx + 1]
cmp eax, 4
jge 0x14000e9b3
rol r10d, 8
mov byte [rdx], r10b
jmp 0x14000e9ba
rol r9d, 8
mov byte [rdx], r9b
inc eax
mov rdx, rcx
cmp eax, ebx
jl 0x14000e9a1
mov r10d, dword [rbp - 0x14]
mov r9d, dword [rbp - 0x38]
lea eax, [rbx - 4]
test eax, eax
jle 0x14000e9e8
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr r9d, cl
shl r9d, cl
mov dword [rbp - 0x38], r9d
jmp 0x14000ea03
mov r9d, edi
mov dword [rbp - 0x38], edi
test eax, eax
jns 0x14000ea03
neg eax
shl eax, 3
mov ecx, eax
shr r10d, cl
shl r10d, cl
mov dword [rbp - 0x14], r10d
mov rax, rsi
shr rax, 3
mov qword [rbp + 0x58], rax
test rax, rax
je 0x14000ed39
mov ecx, dword [rbp + 0xb64]
mov r14d, ecx
shr r14d, 0x10
movzx esi, word [rbp + 0xb62]
movzx ebx, cx
lea r13, [rdx + 7]
add r11, 2
mov edx, ecx
nop dword [rax + rax]
movzx r8d, byte [r11 - 2]
shl r8d, 8
movzx eax, byte [r11 - 1]
or r8d, eax
shl r8d, 8
movzx eax, byte [r11]
or r8d, eax
shl r8d, 8
movzx eax, byte [r11 + 1]
or r8d, eax
movzx edi, byte [r11 + 2]
shl edi, 8
movzx eax, byte [r11 + 3]
or edi, eax
shl edi, 8
movzx eax, byte [r11 + 4]
or edi, eax
shl edi, 8
movzx eax, byte [r11 + 5]
or edi, eax
xor r9d, edi
lea r11, [r11 + 8]
lea eax, [r9 - 0x4a58]
xor eax, edx
xor eax, r8d
xor r10d, eax
mov ecx, edx
xor ecx, r10d
ror ecx, 0xf
mov eax, r10d
ror eax, 7
imul ecx, esi
add eax, ecx
xor r9d, eax
lea ecx, [r9 - 0x4e4ab5a8]
ror ecx, 9
mov eax, r9d
ror eax, 0xa
imul ecx, ebx
sub ecx, eax
xor r10d, ecx
mov ecx, ebx
xor ecx, r10d
rol ecx, 4
mov eax, r10d
rol eax, 5
imul ecx, r14d
add eax, ecx
xor r9d, eax
mov ecx, r9d
xor ecx, 0xb1b54a58
mov eax, edx
sub eax, ecx
xor r10d, eax
lea ecx, [r10 - 0x4a58]
imul ecx, esi
mov eax, r10d
shr eax, 6
sub ecx, eax
xor r9d, ecx
mov eax, r9d
ror eax, 0xf
xor eax, ebx
imul eax, eax, 0x4a58
xor r10d, eax
mov eax, r10d
not eax
ror eax, 3
add eax, r14d
imul eax, ebx
xor r9d, eax
mov eax, r9d
sub eax, edx
sub eax, 0x4a58
xor r10d, eax
mov ecx, r10d
ror ecx, 0xa
mov eax, r14d
xor eax, r10d
imul eax, esi
xor ecx, eax
xor r9d, ecx
mov ecx, r9d
xor ecx, 0x4a58
rol ecx, 6
mov eax, r9d
ror eax, 3
imul ecx, ebx
xor eax, ecx
xor r10d, eax
mov eax, r10d
ror eax, 0xf
sub eax, r14d
imul eax, eax, 0x4a58
xor r9d, eax
mov eax, r14d
xor eax, r9d
imul ecx, eax, 0x4a58
mov eax, r9d
shr eax, 1
xor ecx, eax
xor r10d, ecx
mov eax, r9d
sub eax, ebx
rol eax, 3
imul ecx, eax, 0x4a58
mov eax, r9d
shr eax, 0xf
xor ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, ebx
imul ecx, esi
mov eax, r10d
shr eax, 0xd
sub ecx, eax
xor r9d, ecx
mov ecx, 0xb1b54a58
sub ecx, r9d
ror ecx, 9
mov eax, r9d
ror eax, 0xb
imul ecx, ebx
xor eax, ecx
xor r10d, eax
mov eax, r10d
sub eax, r14d
add eax, 0x4e4ab5a8
xor r9d, eax
mov edx, r9d
ror edx, 7
mov eax, r9d
xor eax, esi
imul ecx, eax, 0x4a58
sub ecx, edx
xor r10d, ecx
mov ecx, r14d
xor ecx, r10d
rol ecx, 4
mov eax, r10d
ror eax, 0x10
imul ecx, esi
sub ecx, eax
xor r9d, ecx
mov ecx, 0xb1b54a58
sub ecx, r9d
ror ecx, 0xa
mov eax, r9d
ror eax, 4
imul ecx, ebx
add eax, ecx
xor r10d, eax
lea ecx, [r10 + 0x4e4ab5a8]
ror ecx, 4
mov eax, r10d
ror eax, 9
imul ecx, r14d
xor eax, ecx
xor r9d, eax
mov edx, dword [rbp + 0xb64]
mov eax, edx
xor eax, r9d
rol eax, 8
mov ecx, r9d
rol ecx, 2
imul eax, eax, 0x4a58
sub eax, ecx
xor r10d, eax
mov ecx, edx
sub ecx, r10d
ror ecx, 0xb
mov eax, r10d
ror eax, 0xc
imul ecx, esi
sub ecx, eax
xor r9d, ecx
mov ecx, esi
xor ecx, r9d
imul ecx, ebx
mov eax, r9d
shr eax, 8
xor ecx, eax
xor r10d, ecx
xor r9d, r10d
xor r10d, r12d
mov dword [rbp - 0x14], r10d
xor r9d, edx
xor r9d, r15d
xor r9d, 0xb1b54a58
mov dword [rbp - 0x38], r9d
mov byte [r13 - 4], r10b
ror dword [rbp - 0x14], 8
movzx eax, byte [rbp - 0x38]
mov byte [r13], al
ror dword [rbp - 0x38], 8
movzx eax, byte [rbp - 0x14]
mov byte [r13 - 5], al
ror dword [rbp - 0x14], 8
movzx eax, byte [rbp - 0x38]
mov byte [r13 - 1], al
ror dword [rbp - 0x38], 8
movzx eax, byte [rbp - 0x14]
mov byte [r13 - 6], al
ror dword [rbp - 0x14], 8
movzx eax, byte [rbp - 0x38]
mov byte [r13 - 2], al
ror dword [rbp - 0x38], 8
movzx eax, byte [rbp - 0x14]
mov byte [r13 - 7], al
movzx eax, byte [rbp - 0x38]
mov byte [r13 - 3], al
mov r10d, dword [rbp - 0x14]
ror r10d, 8
mov dword [rbp - 0x14], r10d
mov r9d, dword [rbp - 0x38]
ror r9d, 8
mov dword [rbp - 0x38], r9d
mov r12d, r8d
mov r15d, edi
lea r13, [r13 + 8]
sub qword [rbp + 0x58], 1
jne 0x14000ea40
mov r14d, dword [rsp + 0x70]
mov rsi, qword [rbp + 0x90]
mov r13, qword [rbp + 0x178]
movzx eax, byte [rbp - 0x80]
mov qword [rsi + r13], rax
mov qword [rbp + 0x368], r13
lea rdi, [rsi + 8]
mov qword [rbp + 0x558], rdi
lea rax, [0x1400534e0]
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], 8
lea rsi, [0x140053440]
mov qword [rbp + 0x570], rsi
mov qword [rbp + 0x578], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x14000edac
xor esi, esi
jmp 0x14000ef23
mov dword [rax], edi
mov edi, edi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000eea6
mov qword [rbx + 8], rax
mov r8d, edi
mov rdx, r13
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov dword [rbx + 0x10], 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0xa0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000eea6
mov qword [rbx + 0x18], rax
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rsi + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rsi + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rsi + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rsi + 0x60]
movups xmmword [rax + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x70]
movups xmmword [rax + 0x70], xmm1
movups xmm0, xmmword [rsi + 0x80]
movups xmmword [rax + 0x80], xmm0
movups xmm1, xmmword [rsi + 0x90]
movups xmmword [rax + 0x90], xmm1
mov dword [rbx + 0x20], 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000eea6
mov qword [rbx + 0x28], rax
xor esi, esi
mov edi, esi
movsd xmm0, qword [0x1400534e0]
movsd qword [rax], xmm0
jmp 0x14000ef2c
mov rdi, qword [rbx + 8]
test rdi, rdi
je 0x14000eecb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor esi, esi
mov qword [rbx + 8], rsi
jmp 0x14000eecd
xor esi, esi
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x14000eeee
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], rsi
mov rdi, qword [rbx + 0x28]
test rdi, rdi
je 0x14000ef0f
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], rsi
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp - 0x10]
mov edi, 0xc0000017
mov r15, qword [rbp + 0x70]
test edi, edi
js 0x14000ef45
mov qword [rbp + 0x1d8], rbx
mov rbx, rsi
jmp 0x14000ef45
mov edi, 0xc0000001
mov rsi, qword [rbp + 0x368]
test rsi, rsi
je 0x14000ef71
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor r12d, r12d
mov qword [rbp + 0x368], r12
jmp 0x14000ef74
xor r12d, r12d
test rbx, rbx
je 0x14000eff0
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x14000ef9a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 8], r12
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x14000efbb
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], r12
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x14000efdc
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov r13d, dword [rbp - 0x20]
or edi, 0x10000000
jl 0x140010259
mov rbx, qword [rbp + 0x1d8]
mov dword [rbp + 0x4c], 4
lea r8, [rbp + 0x4c]
mov edx, dword [rbx]
mov ecx, 4
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f089
lea r8, [rbp + 0x4c]
mov edx, ecx
mov ecx, dword [rbp + 0x4c]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f089
lea r8, [rbp + 0x4c]
mov edx, dword [rbx + 0x10]
mov ecx, dword [rbp + 0x4c]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f089
lea r8, [rbp + 0x4c]
mov edx, 4
mov ecx, dword [rbp + 0x4c]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f089
lea r8, [rbp + 0x4c]
mov edx, dword [rbx + 0x20]
mov ecx, dword [rbp + 0x4c]
call fcn.14003e5f8
mov edi, eax
mov eax, dword [rbp + 0x114]
test edi, edi
cmovns eax, dword [rbp + 0x4c]
mov dword [rbp + 0x114], eax
jmp 0x14000f08f
mov eax, dword [rbp + 0x114]
test edi, edi
js 0x14000f1eb
mov edi, eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x14000f0c2
mov edi, 0xc0000017
jmp 0x14000f1eb
mov qword [rbp + 0xa0], rsi
mov eax, dword [rbx]
mov dword [rsi], eax
lea r8, [rbp + 0xa0]
mov edx, 4
mov rcx, rsi
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov r8d, dword [rbx]
mov rdx, qword [rbx + 8]
mov rcx, qword [rbp + 0xa0]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx]
lea r8, [rbp + 0xa0]
mov rcx, qword [rbp + 0xa0]
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov eax, dword [rbx + 0x10]
mov rcx, qword [rbp + 0xa0]
mov dword [rcx], eax
lea r8, [rbp + 0xa0]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov r8d, dword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbp + 0xa0]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x10]
lea r8, [rbp + 0xa0]
mov rcx, qword [rbp + 0xa0]
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov eax, dword [rbx + 0x20]
mov rcx, qword [rbp + 0xa0]
mov dword [rcx], eax
lea r8, [rbp + 0xa0]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov r8d, dword [rbx + 0x20]
mov rdx, qword [rbx + 0x28]
mov rcx, qword [rbp + 0xa0]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx + 0x20]
lea r8, [rbp + 0xa0]
mov rcx, qword [rbp + 0xa0]
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f1d7
mov r12, rsi
mov qword [rbp - 0x30], rsi
mov r13d, dword [rbp + 0x114]
jmp 0x14000f1ef
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov r12, qword [rbp - 0x30]
or edi, 0x10000000
jl 0x140010259
xor r9d, r9d
mov qword [rbp + 0x580], r9
mov ebx, r9d
mov dword [rbp + 0x2e0], ebx
mov qword [rbp + 0x588], r9
mov esi, r9d
mov dword [rbp + 0x2e4], r9d
mov dword [rbp + 0x158], 8
lea r8, [rbp + 0x158]
mov edx, dword [rbp + 0x194]
lea ecx, [r9 + 8]
call fcn.14003e5f8
mov edi, eax
or edi, 0x10000000
jl 0x14000f4c6
mov eax, dword [rbp + 0x158]
lea rcx, [rax + 7]
and ecx, 0xfffffff8
cmp ecx, eax
jae 0x14000f26c
mov edi, 0xc0000095
mov r11d, dword [rbp + 0x170]
jmp 0x14000f29d
mov dword [rbp + 0x15c], ecx
lea r8, [rbp + 0x15c]
mov edx, 8
call fcn.14003e5f8
mov edi, eax
mov r11d, dword [rbp + 0x170]
test eax, eax
cmovns r11d, dword [rbp + 0x15c]
mov dword [rbp + 0x170], r11d
test edi, edi
js 0x140010259
cmp qword [rbp + 0x40], rbx
jne 0x14000f2b5
mov edi, 0xc000000d
jmp 0x14000f4c6
cmp dword [rbp + 0x38], 1
ja 0x14000f2c5
mov edi, 0xc000000d
jmp 0x14000f4c6
mov rcx, qword [rbp + 0x40]
mov qword [rbp + 0xe8], rcx
mov r10d, dword [rcx]
lea r8, [rbp + 0xe8]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f35a
mov edx, r10d
lea r8, [rbp + 0xe8]
mov rcx, qword [rbp + 0xe8]
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f35a
inc r9d
mov rcx, qword [rbp + 0xe8]
cmp r9d, 1
jb 0x14000f2d0
mov r9d, dword [rcx]
lea r8, [rbp + 0xe8]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f35a
mov ebx, r9d
mov dword [rbp + 0x2e0], ebx
mov rax, qword [rbp + 0xe8]
test r9d, r9d
mov rdx, rsi
cmove rax, rsi
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x580], rax
jmp 0x14000f35c
xor edx, edx
test edi, edi
js 0x140010259
cmp dword [rbp + 0x38], 2
ja 0x14000f374
mov edi, 0xc000000d
jmp 0x14000f4c6
mov rcx, qword [rbp + 0x40]
mov qword [rbp + 0xf0], rcx
mov r9d, edx
nop dword [rax]
nop word [rax + rax]
mov r10d, dword [rcx]
lea r8, [rbp + 0xf0]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f41b
mov edx, r10d
lea r8, [rbp + 0xf0]
mov rcx, qword [rbp + 0xf0]
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f41b
inc r9d
mov rcx, qword [rbp + 0xf0]
cmp r9d, 2
jb 0x14000f390
mov r9d, dword [rcx]
lea r8, [rbp + 0xf0]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x14000f41b
mov esi, r9d
mov dword [rbp + 0x2e4], r9d
mov rax, qword [rbp + 0xf0]
test r9d, r9d
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x588], rax
test edi, edi
js 0x140010259
mov dword [rbp + 0x48], 4
lea r8, [rbp + 0x48]
mov edx, r11d
mov ecx, 4
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f4a4
lea r8, [rbp + 0x48]
mov edx, ecx
mov ecx, dword [rbp + 0x48]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f4a4
lea r8, [rbp + 0x48]
mov edx, ebx
mov ecx, dword [rbp + 0x48]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f4a4
lea r8, [rbp + 0x48]
mov edx, 4
mov ecx, dword [rbp + 0x48]
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x14000f4a4
lea r8, [rbp + 0x48]
mov edx, esi
mov ecx, dword [rbp + 0x48]
call fcn.14003e5f8
mov edi, eax
mov eax, dword [rbp + 0x160]
test edi, edi
cmovns eax, dword [rbp + 0x48]
mov dword [rbp + 0x160], eax
jmp 0x14000f4aa
mov eax, dword [rbp + 0x160]
test edi, edi
js 0x140010259
cmp eax, 0x400000
jbe 0x14000f4c3
mov edi, 0x8000ffff
jmp 0x140010259
mov dword [rbp + 0x60], eax
test edi, edi
js 0x140010259
mov edi, dword [rbp + 0x60]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8d, edi
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
jne 0x14000f4f4
mov edi, 0xd0000017
jmp 0x14000f500
mov r15, rax
mov qword [rbp + 0x70], rax
mov edi, 0x10000000
test edi, edi
js 0x140010259
test r12, r12
jne 0x14000f517
mov edi, 0x80070057
jmp 0x140010259
test r15, r15
jne 0x14000f526
mov edi, 0x80070057
jmp 0x140010259
mov qword [rbp + 0x5f0], r12
mov dword [rbp + 0x600], r13d
mov qword [rbp + 0x5f8], r15
mov eax, dword [rbp + 0x60]
mov dword [rbp + 0x604], eax
xor r12d, r12d
mov dword [rbp + 0x608], r12d
lea r8, [rbp + 0x590]
lea rdx, [0x1400437d0]
lea ecx, [r12 + 1]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleExW]
test eax, eax
jne 0x14000f5a9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
mov edi, eax
jle 0x14000f580
movzx edi, ax
or edi, 0x80070000
mov edx, dword [rbp + 0x60]
test edi, edi
js 0x14000f5ef
mov edi, 0x80004005
test edi, edi
js 0x140010259
mov rbx, r12
cmp edx, 4
jae 0x14000f601
mov edi, 0xc000003e
mov rax, rbx
jmp 0x14000fa1b
lea rdx, [0x1400437b0]
mov rcx, qword [rbp + 0x590]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
test rax, rax
je 0x14000f56b
xor r9d, r9d
lea r8d, [r9 + 0x20]
lea rdx, [rbp + 0x5f0]
lea ecx, [r8 + 0x66]
call qword [case.0x140012211.0]
mov edi, eax
or edi, 0x10000000
mov edx, dword [rbp + 0x60]
cmovge edx, dword [rbp + 0x604]
mov dword [rbp + 0x60], edx
cmp edi, 0xd0000023
jne 0x14000f58c
mov edi, 0x8007007a
jmp 0x140010259
mov r11d, dword [r15]
mov dword [rbp - 0x78], r11d
lea rax, [r15 + 4]
or rsi, 0xffffffffffffffff
cmp rax, r15
cmovae rsi, rax
sbb edi, edi
and edi, 0xc0000095
cmp rax, r15
jb 0x14000f5a1
lea eax, [rdx - 4]
cmp eax, r11d
jae 0x14000f63d
mov edi, 0xc000003e
mov rax, rbx
jmp 0x14000fa1b
mov rax, r11
mov qword [rbp + 0x58], rax
add rax, rsi
or r8, 0xffffffffffffffff
cmp rax, rsi
cmovae r8, rax
sbb edi, edi
and edi, 0xc0000095
cmp rax, rsi
jb 0x14000f5a1
lea eax, [r11 + 4]
or ecx, 0xffffffff
cmp eax, 4
cmovae ecx, eax
sbb edi, edi
and edi, 0xc0000095
cmp eax, 4
jb 0x14000f5a1
mov eax, edx
sub eax, ecx
cmp eax, 4
jae 0x14000f697
mov edi, 0xc000003e
mov rax, rbx
jmp 0x14000fa1b
mov r12d, dword [r8]
lea rax, [r8 + 4]
or r15, 0xffffffffffffffff
cmp rax, r8
cmovae r15, rax
sbb edi, edi
and edi, 0xc0000095
cmp rax, r8
jb 0x14000f6de
lea eax, [rcx + 4]
or r9d, 0xffffffff
cmp eax, ecx
cmovae r9d, eax
sbb edi, edi
and edi, 0xc0000095
cmp eax, ecx
jb 0x14000f6de
mov eax, edx
sub eax, r9d
cmp eax, r12d
jae 0x14000f6e9
mov edi, 0xc000003e
mov rax, rbx
xor r12d, r12d
jmp 0x14000fa1b
lea rcx, [r15 + r12]
or r10, 0xffffffffffffffff
cmp rcx, r15
cmovae r10, rcx
sbb edi, edi
and edi, 0xc0000095
cmp rcx, r15
jb 0x14000f6de
lea eax, [r9 + r12]
or r8d, 0xffffffff
cmp eax, r9d
cmovae r8d, eax
sbb edi, edi
and edi, 0xc0000095
cmp eax, r9d
jb 0x14000f6de
mov eax, edx
sub eax, r8d
cmp eax, 4
jae 0x14000f73b
mov edi, 0xc000003e
mov rax, rbx
xor r12d, r12d
jmp 0x14000fa1b
mov r13d, dword [r10]
lea rax, [r10 + 4]
or rcx, 0xffffffffffffffff
cmp rax, r10
cmovae rcx, rax
mov qword [rbp + 0x90], rcx
sbb edi, edi
and edi, 0xc0000095
cmp rax, r10
jb 0x14000f6de
lea eax, [r8 + 4]
or ecx, 0xffffffff
cmp eax, r8d
cmovae ecx, eax
sbb edi, edi
and edi, 0xc0000095
cmp eax, r8d
jb 0x14000f6de
mov eax, edx
sub eax, ecx
cmp eax, r13d
jae 0x14000f79c
mov edi, 0xc000003e
mov rax, rbx
xor r12d, r12d
jmp 0x14000fa1b
lea eax, [rcx + r13]
or r8d, 0xffffffff
cmp eax, ecx
cmovae r8d, eax
sbb edi, edi
and edi, 0xc0000095
cmp eax, ecx
jb 0x14000f6de
cmp edx, r8d
je 0x14000f7cf
mov edi, 0xc000003e
mov rax, rbx
xor r12d, r12d
jmp 0x14000fa1b
lea ecx, [r12 + r11]
add ecx, r13d
add rcx, 0xc
mov eax, edx
cmp rcx, rax
je 0x14000f7f1
mov edi, 0xc000003e
mov rax, rbx
xor r12d, r12d
jmp 0x14000fa1b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
lea r8d, [rdx + 0x28]
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x14000f81e
mov edi, 0xc0000017
xor r12d, r12d
jmp 0x14000f98b
test rsi, rsi
je 0x14000f85e
mov eax, dword [rbp - 0x78]
mov dword [rdi], eax
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rbp + 0x58]
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000f8f7
mov qword [rdi + 8], rax
mov r8, qword [rbp + 0x58]
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x14000f866
xor eax, eax
mov dword [rdi], eax
mov qword [rdi + 8], rax
test r15, r15
je 0x14000f8a2
mov dword [rdi + 0x10], r12d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r12
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000f8f7
mov qword [rdi + 0x18], rax
mov r8, r12
mov rdx, r15
mov rcx, rax
call sub.msvcrt.dll_memcpy
xor r12d, r12d
jmp 0x14000f8ad
xor r12d, r12d
mov dword [rdi + 0x10], r12d
mov qword [rdi + 0x18], r12
mov rsi, qword [rbp + 0x90]
test rsi, rsi
je 0x14000f97d
mov dword [rdi + 0x20], r13d
mov r15, r13
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r13
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test rax, rax
je 0x14000f8f7
mov qword [rdi + 0x28], rax
mov r8, r13
mov rdx, rsi
mov rcx, rax
call sub.msvcrt.dll_memcpy
jmp 0x14000f985
mov rsi, qword [rdi + 8]
test rsi, rsi
je 0x14000f91d
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor r12d, r12d
mov qword [rdi + 8], r12
jmp 0x14000f920
xor r12d, r12d
mov rsi, qword [rdi + 0x18]
test rsi, rsi
je 0x14000f941
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x18], r12
mov rsi, qword [rdi + 0x28]
test rsi, rsi
je 0x14000f962
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rdi + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rdi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov edi, 0xc0000017
jmp 0x14000f98b
mov dword [rdi + 0x20], r12d
mov qword [rdi + 0x28], r12
mov rbx, rdi
mov edi, r12d
test edi, edi
js 0x14000f99b
mov rax, rbx
mov qword [rbp - 0x60], rbx
jmp 0x14000fa1b
test rbx, rbx
je 0x14000fa17
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x14000f9c1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 8], r12
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x14000f9e2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], r12
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x14000fa03
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rax, qword [rbp - 0x60]
or edi, 0x10000000
jl 0x140010259
mov rbx, r12
mov qword [rbp + 0x1f0], rbx
mov qword [rbp + 0x598], r12
test rax, rax
jne 0x14000fa47
mov edi, 0xd000000d
jmp 0x140010259
mov r13, qword [rax + 8]
mov qword [rbp + 0x1e0], r13
test r13, r13
jne 0x14000fa61
mov edi, 0xd000000d
jmp 0x140010259
mov eax, dword [rax]
test eax, eax
jne 0x14000fa71
mov edi, 0xd000000d
jmp 0x140010259
lea rbx, [rax - 8]
mov qword [rbp + 0x90], rbx
mov rcx, rbx
call fcn.14001e288
mov r12, rax
mov qword [rbp + 0x178], rax
test rax, rax
je 0x14000ffc3
xor r15b, r15b
mov dword [rbp - 0x78], r15d
movabs rax, 0x7f1137fab69605e
mov qword [rbp + 0xb58], rax
mov r8, r13
mov rdx, r12
mov r9, rbx
and r9d, 7
je 0x14000fb97
xor ecx, ecx
mov dword [rbp - 0x24], ecx
mov dword [rbp - 0x40], 0xffffffff
mov r11d, ecx
mov esi, ecx
mov edi, ecx
test r9d, r9d
je 0x14000fb14
lea r14d, [rcx + 0x38]
nop
lea r10, [r8 + 1]
movzx eax, byte [r8]
cmp edi, 4
jge 0x14000faf7
lea ecx, [r14 - 0x20]
shl eax, cl
or esi, eax
jmp 0x14000faff
mov ecx, r14d
shl eax, cl
or r11d, eax
inc edi
sub r14d, 8
mov r8, r10
cmp edi, r9d
jl 0x14000fae0
mov r14d, dword [rsp + 0x70]
xor ecx, ecx
mov r10d, esi
xor r10d, 0x92f65a5
mov dword [rbp - 0x24], r10d
mov edi, r11d
xor edi, 0x699a899c
mov dword [rbp - 0x40], edi
mov eax, ecx
test r9d, r9d
jle 0x14000fb60
lea rcx, [rdx + 1]
cmp eax, 4
jge 0x14000fb47
rol r10d, 8
mov byte [rdx], r10b
jmp 0x14000fb4d
rol edi, 8
mov byte [rdx], dil
inc eax
mov rdx, rcx
cmp eax, r9d
jl 0x14000fb35
mov r10d, dword [rbp - 0x24]
mov edi, dword [rbp - 0x40]
xor ecx, ecx
lea eax, [r9 - 4]
test eax, eax
jle 0x14000fb7b
mov ecx, 4
sub ecx, eax
shl ecx, 3
shr edi, cl
shl edi, cl
mov dword [rbp - 0x40], edi
jmp 0x14000fbaa
mov edi, ecx
mov dword [rbp - 0x40], ecx
test eax, eax
jns 0x14000fbaa
neg eax
shl eax, 3
mov ecx, eax
shr r10d, cl
shl r10d, cl
mov dword [rbp - 0x24], r10d
jmp 0x14000fbaa
xor eax, eax
mov esi, eax
or r11d, 0xffffffff
mov edi, eax
mov dword [rbp - 0x40], eax
mov r10d, eax
mov dword [rbp - 0x24], eax
mov rax, rbx
shr rax, 3
mov qword [rbp + 0x58], rax
test rax, rax
je 0x14000fee9
mov r15d, dword [rbp + 0xb5c]
mov r14d, r15d
shr r14d, 0x10
movzx ebx, r15w
lea r12, [rdx + 7]
lea r13, [r8 + 2]
nop dword [rax + rax]
movzx r9d, byte [r13 - 2]
shl r9d, 8
movzx eax, byte [r13 - 1]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13]
or r9d, eax
shl r9d, 8
movzx eax, byte [r13 + 1]
or r9d, eax
movzx r8d, byte [r13 + 2]
shl r8d, 8
movzx eax, byte [r13 + 3]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 4]
or r8d, eax
shl r8d, 8
movzx eax, byte [r13 + 5]
or r8d, eax
xor r10d, r9d
xor edi, r8d
lea r13, [r13 + 8]
xor edi, r10d
xor edi, r15d
xor edi, 0xab69605e
lea ecx, [rdi + 0x54969fa2]
rol ecx, 5
mov eax, edi
rol eax, 0xa
imul ecx, ebx
add eax, ecx
xor r10d, eax
lea edx, [r15 + r10]
ror edx, 9
mov ecx, r10d
rol ecx, 2
movzx eax, word [rbp + 0xb5a]
imul eax, edx
sub eax, ecx
xor edi, eax
mov eax, edi
sub eax, ebx
imul ecx, eax, 0x605e
mov eax, edi
shr eax, 0xd
sub ecx, eax
xor r10d, ecx
movzx edx, word [rbp + 0xb5a]
xor edx, r10d
rol edx, 6
mov ecx, r10d
rol ecx, 2
mov eax, r14d
imul eax, edx
sub eax, ecx
xor edi, eax
mov ecx, edi
xor ecx, 0xab69605e
mov eax, r15d
sub eax, ecx
xor r10d, eax
mov ecx, r10d
ror ecx, 6
mov eax, r10d
xor eax, ebx
movzx edx, word [rbp + 0xb5a]
imul eax, edx
xor ecx, eax
xor edi, ecx
lea eax, [r15 + rdi]
ror eax, 0xf
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
add ecx, eax
xor r10d, ecx
lea ecx, [r10 + 0x54969fa2]
ror ecx, 0xe
mov eax, r10d
rol eax, 8
imul ecx, r14d
sub ecx, eax
xor edi, ecx
mov ecx, edi
xor ecx, 0xab69605e
ror ecx, 0xc
mov eax, edi
ror eax, 0xa
imul ecx, ebx
xor eax, ecx
xor r10d, eax
mov ecx, r14d
xor ecx, r10d
imul ecx, edx
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, edi
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, r14d
xor r10d, eax
mov edi, r10d
sub edi, r14d
xor edi, ecx
xor edi, 0xab69605e
mov ecx, edi
xor ecx, r14d
rol ecx, 2
imul ecx, ebx
mov eax, edi
shr eax, 2
add ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, r15d
ror ecx, 6
mov eax, r10d
rol eax, 7
imul ecx, edx
add eax, ecx
xor edi, eax
mov edx, edi
ror edx, 9
mov eax, edi
xor eax, ebx
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov ecx, r10d
movzx eax, word [rbp + 0xb5a]
xor ecx, eax
rol ecx, 5
mov eax, r10d
rol eax, 7
imul ecx, r14d
add eax, ecx
xor edi, eax
mov edx, edi
xor edx, r10d
xor edx, r15d
xor edx, 0xab69605e
mov eax, edx
ror eax, 3
movzx r10d, word [rbp + 0xb5a]
sub eax, r10d
imul eax, ebx
xor edi, eax
mov eax, edi
sub eax, r15d
ror eax, 1
mov ecx, edi
ror ecx, 6
imul eax, eax, 0x605e
sub eax, ecx
xor edx, eax
lea ecx, [rdx - 0x54969fa2]
rol ecx, 3
mov eax, edx
rol eax, 0xe
imul ecx, r14d
add eax, ecx
xor edi, eax
lea ecx, [rdi - 0x54969fa2]
rol ecx, 0xf
mov eax, edi
ror eax, 0xe
imul ecx, ebx
sub ecx, eax
xor edx, ecx
mov ecx, edx
xor ecx, 0x605e
imul ecx, r10d
mov eax, edx
shr eax, 3
xor ecx, eax
xor edi, ecx
mov eax, edi
xor eax, r15d
rol eax, 4
mov ecx, edi
rol ecx, 2
imul eax, eax, 0x605e
xor ecx, eax
xor ecx, esi
xor edx, ecx
mov dword [rbp - 0x24], edx
xor edi, r11d
mov dword [rbp - 0x40], edi
mov byte [r12 - 4], dl
ror dword [rbp - 0x24], 8
movzx eax, byte [rbp - 0x40]
mov byte [r12], al
ror dword [rbp - 0x40], 8
movzx eax, byte [rbp - 0x24]
mov byte [r12 - 5], al
ror dword [rbp - 0x24], 8
movzx eax, byte [rbp - 0x40]
mov byte [r12 - 1], al
ror dword [rbp - 0x40], 8
movzx eax, byte [rbp - 0x24]
mov byte [r12 - 6], al
ror dword [rbp - 0x24], 8
movzx eax, byte [rbp - 0x40]
mov byte [r12 - 2], al
ror dword [rbp - 0x40], 8
movzx eax, byte [rbp - 0x24]
mov byte [r12 - 7], al
movzx eax, byte [rbp - 0x40]
mov byte [r12 - 3], al
mov r10d, dword [rbp - 0x24]
ror r10d, 8
mov dword [rbp - 0x24], r10d
mov edi, dword [rbp - 0x40]
ror edi, 8
mov dword [rbp - 0x40], edi
mov esi, r9d
mov r11d, r8d
lea r12, [r12 + 8]
sub qword [rbp + 0x58], 1
jne 0x14000fbe0
mov r14d, dword [rsp + 0x70]
mov rbx, qword [rbp + 0x90]
mov r15d, dword [rbp - 0x78]
mov r12, qword [rbp + 0x178]
mov r13, qword [rbp + 0x1e0]
xor ecx, ecx
mov eax, ecx
test rbx, rbx
je 0x14000ff8c
cmp rbx, 0x20
jb 0x14000ff73
mov rcx, rbx
and rcx, 0xffffffffffffffe0
xorps xmm1, xmm1
xorps xmm2, xmm2
nop dword [rax]
movdqu xmm0, xmmword [r12 + rax]
pxor xmm0, xmm1
movdqa xmm1, xmm0
movdqu xmm0, xmmword [r12 + rax + 0x10]
pxor xmm0, xmm2
movdqa xmm2, xmm0
add rax, 0x20
cmp rax, rcx
jb 0x14000ff10
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd r15d, xmm1
cmp rax, rbx
jae 0x14000ff8c
nop dword [rax + rax]
xor r15b, byte [rax + r12]
inc rax
cmp rax, rbx
jb 0x14000ff80
movzx eax, r15b
cmp rax, qword [rbx + r13]
jne 0x14000ffbb
mov qword [rbp + 0x598], rbx
mov r10, r12
mov qword [rbp + 0x10], r12
xor r12d, r12d
mov qword [rbp + 0x1f0], r12
mov dword [rbp + 0xfc], ebx
mov edi, 0x10000000
jmp 0x14000fffc
mov rcx, r12
call fcn.14003e590
xor r12d, r12d
mov rbx, qword [rbp + 0x1f0]
mov edi, 0xd0000001
test rbx, rbx
je 0x14000fff2
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x1f0], r12
mov r10, qword [rbp + 0x10]
mov ebx, dword [rbp + 0xfc]
test edi, edi
js 0x140010259
mov dword [rbp + 0xa8], r12d
mov qword [rbp + 0x228], r10
cmp ebx, 4
jb 0x140010250
mov eax, dword [r10]
mov dword [rbp - 0x78], eax
lea r8, [rbp + 0x228]
mov edx, 4
mov rcx, r10
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x140010255
lea r8, [rbp + 0xa8]
mov edx, 4
xor ecx, ecx
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x140010255
mov eax, ebx
mov r9d, dword [rbp + 0xa8]
sub eax, r9d
cmp eax, 4
jb 0x140010250
mov rcx, qword [rbp + 0x228]
mov r12d, dword [rcx]
lea r8, [rbp + 0x228]
mov edx, 4
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x140010255
lea r8, [rbp + 0xa8]
mov edx, 4
mov ecx, r9d
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x140010255
mov eax, ebx
mov ecx, dword [rbp + 0xa8]
sub eax, ecx
cmp eax, r12d
jb 0x140010250
lea r8, [rbp + 0xa8]
mov edx, r12d
call fcn.14003e5f8
mov edi, eax
test eax, eax
js 0x140010255
mov edx, ebx
lea rcx, [rdx + r10]
mov rsi, qword [rbp + 0x228]
lea rax, [rsi + r12]
cmp rcx, rax
jb 0x140010250
sub rdx, rsi
sub rdx, r12
add rdx, r10
cmp rdx, 8
jae 0x140010250
xor eax, eax
mov r13d, eax
mov edi, eax
mov ebx, eax
test rsi, rsi
je 0x1400101eb
mov r9, rsi
lea r8, [rbp + 0x5a0]
mov edx, r12d
mov rcx, rsi
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x140010241
mov r11, qword [rbp + 0x5a0]
cmp rsi, r11
jae 0x1400101df
mov r10d, dword [rbp + 0x2ec]
nop word [rax + rax]
lea r8, [rbp + 0x5a8]
mov edx, 4
mov rcx, r9
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x140010241
cmp qword [rbp + 0x5a8], r11
ja 0x1400101e4
lea r8, [rbp + 0x2e8]
mov edx, dword [r9]
mov ecx, 4
call fcn.14003e5f8
mov edi, eax
test eax, eax
cmovns r10d, dword [rbp + 0x2e8]
mov dword [rbp + 0x2ec], r10d
js 0x140010241
mov edx, r10d
lea r8, [rbp + 0x5b0]
mov rcx, r9
call fcn.14003e610
mov edi, eax
test eax, eax
js 0x140010241
mov r9, qword [rbp + 0x5b0]
cmp r9, r11
ja 0x1400101e4
inc ebx
cmp r9, r11
jb 0x140010160
cmp r9, r11
je 0x1400101eb
mov edi, 0xc000000d
jmp 0x140010255
test r12d, r12d
je 0x14001021a
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, r12
mov edx, 8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
mov r13, rax
test rax, rax
jne 0x140010216
mov edi, 0xc0000017
jmp 0x140010241
xor eax, eax
mov edi, eax
test rsi, rsi
je 0x14001022d
mov r8, r12
mov rdx, rsi
mov rcx, r13
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0x1c0], r13
mov dword [rbp + 0x1bc], r12d
mov dword [rbp + 0x1b8], ebx
test edi, edi
js 0x140010255
mov eax, dword [rbp - 0x78]
cmp eax, dword [rbp + 0x1b8]
je 0x140010255
mov edi, 0xc000003e
bts edi, 0x1c
mov rbx, qword [rbp + 0x78]
test rbx, rbx
je 0x140010276
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp + 0x1d8]
test rbx, rbx
je 0x14001030e
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x1400102ac
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
xor r12d, r12d
mov qword [rbx + 8], r12
jmp 0x1400102af
xor r12d, r12d
mov rsi, qword [rbx + 0x18]
test rsi, rsi
je 0x1400102d0
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x18], r12
mov rsi, qword [rbx + 0x28]
test rsi, rsi
je 0x1400102f1
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbx + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rbp + 0x1d8], r12
jmp 0x140010311
xor r12d, r12d
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x14001032e
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp + 0x70]
test rbx, rbx
je 0x14001034b
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rsi, qword [rbp - 0x60]
test rsi, rsi
je 0x1400103cb
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140010375
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rsi + 8], r12
mov rbx, qword [rsi + 0x18]
test rbx, rbx
je 0x140010396
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rsi + 0x18], r12
mov rbx, qword [rsi + 0x28]
test rbx, rbx
je 0x1400103b7
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov qword [rsi + 0x28], r12
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
mov rbx, qword [rbp + 0x10]
test rbx, rbx
je 0x1400103e8
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test edi, edi
js 0x140010522
mov r9d, dword [rbp + 0x1b8]
cmp r9d, 1
jb 0x140010522
mov rdi, qword [rbp + 0x1c0]
test rdi, rdi
je 0x140010522
test r9d, r9d
je 0x140010522
mov qword [rbp + 0x370], rdi
mov r10d, dword [rdi]
lea r8, [rbp + 0x370]
mov edx, 4
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x140010522
mov dword [rbp + 0x5c4], r10d
mov rax, qword [rbp + 0x370]
test r10d, r10d
cmove rax, r12
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x690], rax
cmp r10d, 4
jne 0x140010522
mov eax, dword [rax]
mov dword [rbp + 0x104], eax
test eax, eax
js 0x140010522
cmp r9d, 1
jbe 0x140010522
mov qword [rbp + 0xe0], rdi
mov r9d, r12d
lea r8, [rbp + 0xe0]
mov edx, 4
mov rcx, rdi
call fcn.14003e610
test eax, eax
js 0x140010522
mov edx, dword [rdi]
lea r8, [rbp + 0xe0]
mov rcx, qword [rbp + 0xe0]
call fcn.14003e610
test eax, eax
js 0x140010522
inc r9d
cmp r9d, 1
jae 0x1400104d4
mov rdi, qword [rbp + 0xe0]
jmp 0x140010491
mov rcx, qword [rbp + 0xe0]
mov edi, dword [rcx]
lea r8, [rbp + 0xe0]
mov edx, 4
call fcn.14003e610
test eax, eax
js 0x140010522
mov dword [rbp + 0x51c], edi
mov rax, qword [rbp + 0xe0]
test edi, edi
cmove rax, r12
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x698], rax
cmp edi, 8
jne 0x140010522
mov rax, qword [rax]
mov qword [rbp + 0x6a0], rax
mov rsi, qword [rsp + 0x78]
mov r13, qword [rbp + 0x30]
jmp 0x14000e38c
lea r15, section..data
lea r13, [0x140041a20]
jmp 0x140010546
mov r14d, 0x8007000e
mov esi, dword [rbp + 0x104]
mov edi, 1
xor eax, eax
lock cmpxchg dword [0x1400544d8], edi
jne 0x140010551
mov eax, dword [0x140053c1c]
test eax, eax
jle 0x1400105ef
sub eax, edi
mov dword [0x140053c1c], eax
jne 0x1400105ef
lea rdi, [0x1400543d0]
mov ebx, 4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001058f
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
add rdi, 0x18
sub rbx, 1
jne 0x140010581
xor edx, edx
lea r8d, [rbx + 0x60]
lea rcx, [0x1400543d0]
call sub.msvcrt.dll_memset
lea ecx, [rbx + 0xb]
nop
mov rax, qword [r13]
mov qword [r15], rax
mov rax, qword [r13 + 8]
mov qword [r15 + 8], rax
mov rax, qword [r13 + 0x10]
mov qword [r15 + 0x10], rax
lea r15, [r15 + 0x20]
mov rax, qword [r13 + 0x18]
mov qword [r15 - 8], rax
lea r13, [r13 + 0x20]
sub rcx, 1
jne 0x1400105b0
mov rax, qword [r13]
mov qword [r15], rax
mov rax, qword [r13 + 8]
mov qword [r15 + 8], rax
lea edi, [rcx + 1]
mov eax, r12d
xchg dword [0x1400544d8], eax
lea rcx, [rbp + 0x1e0]
call fcn.14001df50
test r14d, r14d
jns 0x14001066d
cmp r14d, 0xd0000034
jne 0x14001061e
mov dword [rbp + 0x80], 0xc004f012
jmp 0x140010692
cmp r14d, 0xd00000e5
je 0x140010661
cmp r14d, 0xc004d501
je 0x140010661
cmp r14d, 0xd000003e
jne 0x140010645
mov dword [rbp + 0x80], 0xc004f028
jmp 0x140010692
mov dword [rbp + 0x80], r14d
cmp r14d, 0x8007007a
jne 0x140010692
mov dword [rbp + 0x80], 0xc004f01e
jmp 0x140010692
mov dword [rbp + 0x80], 0xc004f027
jmp 0x140010692
cmp esi, 4
je 0x14001067e
mov dword [rbp + 0x80], 0xc004f01e
jmp 0x140010692
lea rcx, [rbp + 0x378]
call fcn.14001df28
mov ecx, dword [rax]
mov dword [rbp + 0x168], ecx
lea rcx, [rbp + 0x378]
call fcn.14001df50
cmp dword [rbp + 0x80], 0
jl 0x1400106bb
cmp dword [rbp + 0x168], 0
jne 0x1400106c2
mov r15d, 0x80070005
jmp 0x140010e2e
mov byte [0x140053c3b], 1
mov r15d, 0x80004005
mov byte [0x140053d50], 0
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_SetProcessShutdownParameters]
lea r13, [0x140041558]
mov qword [rbp + 0x3b0], r13
mov qword [rbp + 0x3b8], r12
lea rcx, [rbp + 0xe40]
call fcn.1400047b0
lea rcx, [rbp + 0xec0]
call fcn.1400047b0
mov dword [rbp + 0xb40], 0
mov word [rbp + 0xb44], 0xf00
mov dword [rsp + 0x20], edi
mov r9d, 2
mov r8d, r9d
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0x12e0]
call fcn.1400045d0
mov dword [rsp + 0x60], 0x5596e9d6
mov dword [rsp + 0x58], 0x77116514
mov dword [rsp + 0x50], 0xec877a02
mov dword [rsp + 0x48], 0xf9dd46d4
mov dword [rsp + 0x40], 0x98c2b4b2
mov dword [rsp + 0x38], 0x9bf2c075
mov dword [rsp + 0x30], 0x750bcfb9
mov dword [rsp + 0x28], 0x59934ace
mov dword [rsp + 0x20], 0x400
mov r9d, 3
lea r8d, [r9 + 7]
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0x1260]
call fcn.1400045d0
lea rdx, [rbp + 0xec0]
lea rcx, [rbp + 0xe40]
call fcn.140002fb0
test al, al
je 0x140010deb
lea rdx, [rbp + 0xe40]
lea rcx, [rbp + 0x3b0]
call fcn.140002ef8
lea rdx, [rbp + 0xec0]
lea rcx, [rbp + 0x3b0]
call fcn.140002e1c
lea rcx, [rbp + 0x610]
call fcn.140004300
xor r9d, r9d
mov r8d, edi
lea rdx, [0x1400448f0]
lea rcx, [rbp + 0x1160]
call fcn.1400045d0
mov r8d, 0x15
lea rdx, [rbp + 0x1160]
lea rcx, [rbp + 0x610]
call fcn.140003be0
lea rcx, [rbp + 0x1160]
call fcn.140004540
mov r9d, 0x12
mov r8d, edi
lea rdx, [0x1400437e4]
lea rcx, [rbp + 0x11e0]
call fcn.1400045d0
mov r8d, 0xb
lea rdx, [rbp + 0x11e0]
lea rcx, [rbp + 0x610]
call fcn.140003d30
lea rcx, [rbp + 0x11e0]
call fcn.140004540
lea rcx, [rbp + 0x1360]
call fcn.1400029d0
mov rdx, rax
mov r8d, 0xb
lea rcx, [rbp + 0x610]
call fcn.140003d30
lea rcx, [rbp + 0x1360]
call fcn.140004540
mov r8d, 0xb
lea rdx, [rbp + 0xe40]
lea rcx, [rbp + 0x610]
call fcn.140003d30
mov r8d, 0xb
lea rdx, [rbp + 0x12e0]
lea rcx, [rbp + 0x610]
call fcn.140003d30
mov r8d, 0xb
lea rdx, [rbp + 0x1260]
lea rcx, [rbp + 0x610]
call fcn.140003d30
lea rdx, [rbp + 0x610]
lea rcx, [rbp + 0x3b0]
call fcn.140002ca0
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
mov rcx, qword [rbp + 0x3b8]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoInitializeSecurity]
mov r15d, eax
test eax, eax
js 0x140010db5
lea rax, [rbp + 0x3e8]
mov qword [rsp + 0x20], rax
mov r9d, edi
xor r8d, r8d
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionTouchKeyboard
mov rcx, 0xffffffff80000002
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegOpenKeyExW]
test eax, eax
jle 0x14001096a
movzx eax, ax
or eax, 0x80070000
test eax, eax
js 0x1400109f2
mov dword [rbp + 0x16c], r12d
mov dword [rbp + 0x2f0], 4
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x16c]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.DelayStart
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegQueryValueExW]
test eax, eax
jle 0x1400109c1
movzx eax, ax
or eax, 0x80070000
test eax, eax
js 0x1400109e5
cmp dword [rbp + 0x16c], 2
jb 0x1400109e5
xor r9d, r9d
lea r8, str.TabTip_MessageBox__
lea rdx, str.TabTip_has_just_called_CoInitializeSecurity.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
lea rdx, [0x140044788]
lea rcx, [rbp + 0x13e0]
call fcn.1400026a4
lea rax, [0x140041018]
mov qword [rbp + 0x13e0], rax
movzx r9d, byte [0x140053c3a]
movzx r8d, byte [0x140053c38]
movzx edx, byte [0x140053c3b]
lea rcx, [rbp + 0x13e0]
call fcn.140002048
mov qword [rbp + 0x390], r12
lea rax, [rbp + 0x390]
mov qword [rsp + 0x20], rax
lea r9, [0x1400448d0]
mov r8d, edi
xor edx, edx
lea rcx, [0x140044358]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
test eax, eax
js 0x140010a7f
mov rcx, qword [rbp + 0x390]
mov rax, qword [rcx]
mov r8, rdi
mov edx, edi
mov rax, qword [rax + 0x18]
call qword [case.0x140012211.0]
call fcn.14001e01c
mov byte [0x140053c38], al
call fcn.140002478
test eax, eax
setne bl
cmp byte [0x140053c38], 0
jne 0x140010ab0
test bl, bl
jne 0x140010aa9
cmp byte [0x140053c3a], bl
je 0x140010ab0
mov byte [0x140053c3b], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [0x140053d60], rax
lea rcx, [rbp + 0x2f4]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140012e70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__beginthreadex]
mov r14, rax
mov ecx, 0x43
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rbp + 0x150], r12
test eax, eax
je 0x140010e6d
mov sil, 1
xor dil, dil
mov qword [rbp + 0x148], r12
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
lea r9, [0x140044840]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1400443d0]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
test eax, eax
js 0x140010c0d
mov qword [rbp + 0x388], r12
lea r8, [rbp + 0x388]
lea rdx, [0x140044378]
lea rcx, [0x1400284f0]
call fcn.140011680
test eax, eax
js 0x140010bcc
mov qword [rbp + 0x380], r12
mov rcx, qword [rbp + 0x388]
mov rax, qword [rcx]
lea r8, [rbp + 0x380]
lea rdx, [0x1400448c0]
mov rax, qword [rax]
call qword [case.0x140012211.0]
test eax, eax
js 0x140010bbf
mov rcx, qword [rbp + 0x148]
mov rax, qword [rcx]
lea r9, [0x140053c30]
lea r8, [0x1400448c0]
mov rdx, qword [rbp + 0x380]
mov rax, qword [rax + 0x18]
call qword [case.0x140012211.0]
nop
lea rcx, [rbp + 0x380]
call fcn.1400121e4
nop
mov rdx, qword [rbp + 0x150]
test rdx, rdx
setne al
test al, al
je 0x140010c00
mov rcx, qword [rbp + 0x148]
mov rax, qword [rcx]
lea r9, [0x140054250]
lea r8, [0x1400448b0]
mov rax, qword [rax + 0x18]
call qword [case.0x140012211.0]
nop
lea rcx, [rbp + 0x388]
call fcn.14001215c
nop
mov rcx, qword [0x140053d60]
test rcx, rcx
je 0x140010c26
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_SetEvent]
mov qword [0x140053d60], r12
test bl, bl
jne 0x140010c4d
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x593
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x6a8]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jle 0x140010ca3
nop word [rax + rax]
lea rcx, [rbp + 0x6a8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x6a8]
call qword [sym.imp.USER32.dll_DispatchMessageW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x6a8]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jg 0x140010c70
lea rcx, [0x140053d78]
call fcn.1400023a4
lea rcx, [0x140053df8]
call fcn.1400023a4
test dil, dil
je 0x140010cc5
call fcn.140027f40
mov byte [rsp + 0x28], bl
movzx edx, sil
lea rcx, [rbp + 0x13e0]
call fcn.1400020cc
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x12]
mov ecx, dword [rbp + 0x2f4]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
or edx, 0xffffffff
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x148]
test rcx, rcx
setne al
test al, al
je 0x140010d6b
mov edx, dword [0x140053c30]
test edx, edx
je 0x140010d2a
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x140012211.0]
mov rcx, qword [rbp + 0x148]
mov edx, dword [0x140054250]
test edx, edx
je 0x140010d6b
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x140012211.0]
xor edx, edx
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoDisconnectObject]
mov rcx, qword [rbp + 0x150]
mov qword [rbp + 0x150], r12
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [case.0x140012211.0]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [0x140053d68]
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_UnregisterWait]
nop
lea rcx, [rbp + 0x148]
call fcn.14001e650
nop
lea rcx, [rbp + 0x150]
call fcn.140012e38
nop
lea rcx, [rbp + 0x390]
call fcn.14001e650
nop
lea rcx, [rbp + 0x13e0]
call fcn.1400021b8
test r15d, r15d
jne 0x140010dca
mov eax, 0x16
cmp byte [0x140053c3c], r15b
cmovne r15d, eax
mov edx, r15d
lea rcx, [rbp + 0xf40]
call fcn.140002740
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
lea rcx, [rbp + 0x610]
call fcn.1400042a8
lea rcx, [rbp + 0x1260]
call fcn.140004540
lea rcx, [rbp + 0x12e0]
call fcn.140004540
lea rcx, [rbp + 0xec0]
call fcn.140004540
lea rcx, [rbp + 0xe40]
call fcn.140004540
mov qword [rbp + 0x3b0], r13
lea rcx, [rbp + 0x3b0]
call fcn.140002b20
lea rcx, [rbp + 0xf40]
call fcn.140001e74
mov eax, r15d
mov rcx, qword [rbp + 0x1930]
xor rcx, rsp
call fcn.140020ba0
lea r11, [rsp + 0x1a40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor sil, sil
xor dil, dil
test bl, bl
jne 0x140010b0c
call fcn.140020524
test eax, eax
js 0x140010b0f
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoResumeClassObjects]
test eax, eax
js 0x140010b0c
mov dil, 1
lea rax, [rbp + 0x150]
mov qword [rsp + 0x20], rax
lea r9, [0x1400448b0]
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [0x140044938]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
jmp 0x140010b0f