Function at 0x14009a030
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x8f8
movdqa xmmword [rsp + 0x8e0], xmm12
movdqa xmmword [rsp + 0x8d0], xmm11
movdqa xmmword [rsp + 0x8c0], xmm10
movdqa xmmword [rsp + 0x8b0], xmm9
movaps xmmword [rsp + 0x8a0], xmm8
movaps xmmword [rsp + 0x890], xmm7
movdqa xmmword [rsp + 0x880], xmm6
mov rdi, r8
mov r13, rdx
mov qword [rsp + 0x158], rcx
mov rcx, qword [rdx + 0x130]
test rcx, rcx
je 0x14009a0af
mov rdx, rdi
call fcn.140100390
test al, al
je 0x14009cdfa
lea rax, [r13 + 0x20]
mov qword [rsp + 0x268], rax
lea rax, [r13 + 0x88]
mov qword [rsp + 0x170], rax
lea rax, [r13 + 0xf8]
mov qword [rsp + 0x178], rax
lea rax, [r13 + 0xfb]
mov qword [rsp + 0x368], rax
lea rax, [r13 + 0x28]
mov qword [rsp + 0x30], rax
lea rax, [0x1401ca348]
lea rcx, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
xorps xmm7, xmm7
movaps xmm8, xmmword [0x140198e50]
movq xmm0, rcx
movq xmm9, rax
punpcklqdq xmm9, xmm0
movdqa xmm10, xmmword [str.uespemosarenegylmodnarodsetybdetG]
movdqa xmm11, xmmword [0x140198e80]
lea rax, [0x1401ca5e0]
movq xmm0, rax
movdqa xmm6, xmmword [0x140198e60]
punpcklqdq xmm6, xmm0
lea rax, [r13 + 0xc8]
mov qword [rsp + 0x160], rax
lea rax, [r13 + 0xe0]
mov qword [rsp + 0x580], rax
lea rax, [r13 + 0x50]
mov qword [rsp + 0x588], rax
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x378], rdi
mov rdx, qword [r13 + 0x118]
mov rax, qword [r13 + 0x120]
mov rcx, r12
mov r8, rdi
call qword [rax + 0x18]
mov rax, qword [rsp + 0x438]
cmp rax, 3
je 0x14009a340
cmp eax, 4
je 0x14009d00f
mov r8d, 0xa0
lea rcx, [rsp + 0x7e0]
mov rdx, r12
call sub.msvcrt.dll_memcpy
movzx eax, word [rsp + 0x848]
lea ecx, [rax - 0x12d]
cmp ecx, 3
jae 0x14009a3ee
cmp qword [r13], 0
je 0x14009a211
mov rax, qword [r13 + 8]
test rax, rax
je 0x14009a211
mov rdx, qword [r13 + 0x10]
mov r8, qword [r13 + 0x18]
mov rcx, qword [rsp + 0x268]
call qword [rax + 0x10]
mov qword [r13], 0
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401ca448]
call fcn.140090520
cmp byte [rsp + 0x70], 2
je 0x14009a24b
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401ca468]
call fcn.140090520
cmp byte [rsp + 0x70], 2
je 0x14009a27d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401ca488]
call fcn.140090520
cmp byte [rsp + 0x70], 2
je 0x14009a2af
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rcx, rbp
mov rdx, qword [rsp + 0x30]
lea r8, [0x1401ca4a8]
call fcn.140090520
cmp byte [rsp + 0x70], 2
je 0x14009a2e1
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
mov ecx, eax
or ecx, 4
cmp ecx, 5
je 0x14009a410
cmp al, 0xa
jb 0x14009a31d
cmp qword [r13 + 0x108], 0
je 0x14009a31d
mov r8, qword [r13 + 0x100]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x178]
movabs rcx, 0x101010101010101
mov qword [rax + 0x10], rcx
movups xmmword [rax], xmm8
jmp 0x14009a410
mov rbx, qword [rsp + 0x440]
mov qword [rsp + 0x5a8], rbx
mov rsi, qword [rbx]
test rsi, rsi
je 0x14009d085
mov rax, qword [rbx + 8]
mov rcx, rsi
call qword [rax + 0x38]
movabs rcx, 0xd756778c30d904b4
xor rdx, rcx
movabs rcx, 0xb0a24f49624e92f
xor rax, rcx
or rax, rdx
jne 0x14009d085
cmp byte [rsi], 1
jne 0x14009d085
cmp byte [rsi + 1], 2
jne 0x14009d085
cmp dword [rsi + 4], 0
jne 0x14009d085
cmp qword [r13], 0
je 0x14009a6dd
mov rax, qword [r13 + 8]
test rax, rax
je 0x14009d085
mov r8, qword [r13 + 0x10]
mov r9, qword [r13 + 0x18]
lea rcx, [rsp + 0x500]
mov rdx, qword [rsp + 0x268]
call qword [rax]
mov rax, qword [r13 + 0x128]
cmp rax, 1
jbe 0x14009a717
jmp 0x14009d078
add eax, 0xfffffecd
cmp eax, 2
jae 0x14009d2c8
cmp qword [r13], 0
je 0x14009a410
cmp qword [r13 + 8], 0
je 0x14009d2c8
nop
movups xmm0, xmmword [0x1401ca4d8]
movaps xmmword [rsp + 0x60], xmm0
movdqu xmm0, xmmword [0x1401ca4c8]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x7e0]
mov rdx, rbp
call fcn.1400903e0
mov rsi, rax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x14009a459
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
test rsi, rsi
je 0x14009d2c8
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, r15
call fcn.1400106d0
cmp qword [rsp + 0x270], 0
jne 0x14009d2c8
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0x280]
mov qword [rsp + 0x270], 0
mov qword [rsp + 0x280], 0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x290], rax
mov rcx, rbp
mov rdx, r15
call fcn.140103860
mov r15, qword [rsp + 0x50]
movabs rax, 0x8000000000000000
cmp r15, rax
je 0x14009d2c8
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
lea rax, [rsp + 0x68]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x190], xmm1
movaps xmmword [rsp + 0x1a0], xmm2
movaps xmmword [rsp + 0x1b0], xmm3
mov rcx, r12
mov rdx, rbx
mov r8, r14
call fcn.140006260
mov rcx, rbp
mov rdx, r12
call fcn.14002c130
cmp byte [rsp + 0x50], 3
je 0x14009cff5
movups xmm0, xmmword [rsp + 0x50]
movdqu xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x270], xmm0
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x2c0], rax
movdqu xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x2b0], xmm0
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movdqa xmmword [rsp + 0x280], xmm1
movzx eax, byte [rsp + 0x270]
cmp al, 3
je 0x14009cff5
cmp al, 2
jb 0x14009a5dc
mov rsi, qword [rsp + 0x278]
lea rcx, [rsi + 0x18]
mov rax, qword [rsi]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x280]
mov rdx, qword [rsp + 0x288]
mov r8, qword [rsp + 0x290]
lea rcx, [rsp + 0x298]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x2a0]
mov rdx, qword [rsp + 0x2a8]
mov r8, qword [rsp + 0x2b0]
lea rcx, [rsp + 0x2b8]
call qword [rax + 0x10]
movdqa xmm0, xmmword [rsp + 0x180]
movdqa xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movaps xmm3, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0x3c0], xmm3
movaps xmmword [rsp + 0x3b0], xmm2
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmmword [rsp + 0x390], xmm0
lea rax, [rsp + 0x450]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov qword [rsp + 0x438], r15
mov qword [rsp + 0x440], rbx
mov qword [rsp + 0x448], r14
mov rax, qword [r13 + 0x110]
cmp byte [rax + 0x1b8], 0
lea r15, [rsp + 0x270]
je 0x14009ab60
mov r8d, dword [rsp + 0x464]
test r8, r8
je 0x14009a801
cmp r14, r8
jbe 0x14009a7de
cmp byte [rbx + r8], 0xbf
jg 0x14009a7e4
jmp case.default.0x14009a7d5
lea rax, [0x1401ca348]
mov qword [rsp + 0x500], rax
lea rax, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
mov qword [rsp + 0x508], rax
lea rax, [rsp + 0x510]
movups xmmword [rax], xmm7
mov rax, qword [r13 + 0x128]
cmp rax, 1
ja 0x14009d078
inc rax
mov qword [r13 + 0x128], rax
mov rdx, qword [r13 + 0x90]
mov r8, qword [r13 + 0x98]
lea rsi, [rsp + 0x390]
mov rcx, rsi
call fcn.140006260
mov rcx, rbp
mov rdx, rsi
call fcn.14002c130
cmp byte [rsp + 0x50], 3
je case.default.0x14009a7d5
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x570], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x560], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x550], xmm3
movaps xmmword [rsp + 0x540], xmm2
movaps xmmword [rsp + 0x530], xmm1
movaps xmmword [rsp + 0x520], xmm0
movaps xmmword [rsp + 0x600], xmm7
movaps xmmword [rsp + 0x610], xmm7
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
lea rcx, [0x140198e90]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor ecx, ecx
jmp 0x14009b090
jne case.default.0x14009a7d5
cmp r8d, 4
jne 0x14009a801
mov rcx, rbx
lea rdx, str.httphttpswswssftpfile__file:__
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x14009b747
mov ebx, dword [r13 + 0xb4]
mov rsi, qword [r13 + 0x90]
mov r14, qword [r13 + 0x98]
test r14, r14
je 0x14009a863
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x14009a849
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov qword [0x140205100], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapAlloc
mov rbp, rax
test rax, rax
jne 0x14009a868
jmp case.default.0x14009a7d5
mov ebp, 1
mov rcx, rbp
mov rdx, rsi
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], r14
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x68]
movups xmmword [rcx + 0x28], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rcx + 0x38], al
mov eax, dword [r13 + 0xb0]
movdqu xmm0, xmmword [r13 + 0xa0]
mov dword [rsp + 0x7c], ebx
mov dword [rsp + 0x78], eax
movdqu xmm1, xmmword [r13 + 0xb8]
movdqu xmmword [rsp + 0x80], xmm1
movdqu xmmword [rsp + 0x68], xmm0
lea rdi, [rsp + 0x50]
mov rcx, rdi
lea rdx, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
call fcn.140105110
mov rcx, rdi
call fcn.140104f70
cmp dword [rsp + 0x70], 0
mov rax, qword [rsp + 0x60]
je 0x14009a902
mov r8d, dword [rsp + 0x74]
cmp rax, r8
jae 0x14009a907
mov r8, rax
jmp 0x14009a926
test r8, r8
je 0x14009a921
cmp rax, r8
jbe 0x14009a921
mov rax, qword [rsp + 0x58]
cmp byte [rax + r8], 0xbf
jle case.default.0x14009a7d5
mov qword [rsp + 0x60], r8
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x7c]
mov rbx, qword [rsp + 0x58]
mov rcx, r8
inc eax
je 0x14009a957
mov rcx, r8
sub rcx, rax
jbe 0x14009a951
cmp byte [rbx + rax], 0xbf
jg 0x14009a957
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
test rcx, rcx
je 0x14009a96c
cmp byte [rbx + rax], 0x2f
sete al
test al, al
je 0x14009a976
jmp 0x14009aa50
xor eax, eax
test al, al
jne 0x14009aa50
cmp dword [rsp + 0x68], 0
jne 0x14009aa50
mov rcx, r8
test r8, r8
je 0x14009aa35
lea rcx, [rbx + r8]
xor eax, eax
nop word cs:[rax + rax]
movzx edx, byte [rcx - 1]
test dl, dl
js 0x14009a9b0
dec rcx
jmp 0x14009aa0f
movzx r9d, byte [rcx - 2]
cmp r9b, 0xc0
jge 0x14009a9e0
movzx r10d, byte [rcx - 3]
cmp r10b, 0xc0
jge 0x14009a9ea
movzx r11d, byte [rcx - 4]
add rcx, 0xfffffffffffffffc
and r11d, 7
shl r11d, 6
and r10d, 0x3f
or r10d, r11d
jmp 0x14009a9f2
add rcx, 0xfffffffffffffffe
and r9d, 0x1f
jmp 0x14009a9fd
add rcx, 0xfffffffffffffffd
and r10d, 0xf
shl r10d, 6
and r9d, 0x3f
or r9d, r10d
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp edx, 0x110000
je 0x14009aa1c
cmp edx, 0x20
jne 0x14009aa1c
inc rax
cmp rbx, rcx
jne 0x14009a9a0
mov rcx, r8
sub rcx, rax
jb 0x14009aa50
je 0x14009aa35
cmp r8, rcx
jbe 0x14009aa35
cmp byte [rbx + rcx], 0xbf
jle case.default.0x14009a7d5
cmp r8, rcx
jb 0x14009aa50
mov qword [rsp + 0x60], rcx
mov r8, rcx
nop word cs:[rax + rax]
xor eax, eax
nop word cs:[rax + rax]
cmp r8, rax
je 0x14009aa9a
movzx r9d, byte [rbx + rax]
cmp r9b, 0x20
setae cl
cmp r9b, 0x7f
setne dl
inc rax
cmp r9b, 9
je 0x14009aa60
and cl, dl
jne 0x14009aa60
mov byte [rsp + 0x1a0], 2
mov sil, 2
cmp qword [rsp + 0x50], 0
jne 0x14009aae9
jmp 0x14009aafa
mov rcx, r15
mov rdx, rbx
call fcn.140006260
mov byte [rsp + 0x290], 0
movdqu xmm0, xmmword [rsp + 0x270]
movdqu xmm1, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x190], xmm1
mov rsi, qword [rsp + 0x290]
mov qword [rsp + 0x1a0], rsi
cmp qword [rsp + 0x50], 0
je 0x14009aafa
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
cmp sil, 2
je 0x14009ab60
movups xmm0, xmmword [0x1401ca4f8]
movaps xmmword [rsp + 0x280], xmm0
movdqu xmm0, xmmword [0x1401ca4e8]
movdqa xmmword [rsp + 0x270], xmm0
mov rcx, rdi
mov rdx, qword [rsp + 0x30]
mov r8, r15
lea r9, [rsp + 0x180]
call fcn.140099380
cmp byte [rsp + 0x70], 2
je 0x14009ab60
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
nop word cs:[rax + rax]
mov rbx, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x14009abbb
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x14009aba1
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov qword [0x140205100], rax
mov rcx, rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x14009abc1
jmp case.default.0x14009a7d5
mov r14d, 1
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm12, xmmword [r13 + 0xb4]
mov rcx, qword [rsp + 0x160]
movzx eax, byte [rcx + 0x10]
mov byte [rsp + 0x5c0], al
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x5b0], xmm0
movzx r15d, word [r13 + 0xb0]
movzx r10d, word [r13 + 0xb2]
mov r8d, dword [r13 + 0xc4]
mov r12d, dword [r13 + 0xa0]
mov ebp, dword [r13 + 0xa4]
mov edi, dword [r13 + 0xa8]
mov ebx, dword [r13 + 0xac]
mov rdx, qword [r13 + 0xf0]
cmp rdx, qword [r13 + 0xe0]
jne 0x14009ac63
mov rcx, qword [rsp + 0x580]
mov dword [rsp + 0x40], r8d
mov word [rsp + 0x28], r10w
call fcn.140047da0
movzx r10d, word [rsp + 0x28]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [r13 + 0xf0]
mov rax, qword [r13 + 0xe8]
imul rcx, rdx, 0x58
mov qword [rax + rcx], rsi
mov qword [rax + rcx + 8], r14
mov qword [rax + rcx + 0x10], rsi
mov dword [rax + rcx + 0x18], r12d
mov dword [rax + rcx + 0x1c], ebp
mov dword [rax + rcx + 0x20], edi
mov dword [rax + rcx + 0x24], ebx
mov word [rax + rcx + 0x28], r15w
mov word [rax + rcx + 0x2a], r10w
movdqu xmmword [rax + rcx + 0x2c], xmm12
mov dword [rax + rcx + 0x3c], r8d
movdqa xmm0, xmmword [rsp + 0x5b0]
movdqu xmmword [rax + rcx + 0x40], xmm0
movzx edx, byte [rsp + 0x5c0]
mov byte [rax + rcx + 0x50], dl
mov rdx, qword [r13 + 0xe8]
mov rax, qword [r13 + 0xf0]
inc rax
mov qword [r13 + 0xf0], rax
mov rcx, qword [r13 + 0x110]
mov r8, qword [rcx + 0x188]
test r8, r8
je 0x14009ad10
cmp r8d, 1
lea rdi, [rsp + 0x50]
jne 0x14009d2a7
cmp qword [rcx + 0x190], rax
ja 0x14009ad68
jmp 0x14009d603
movzx r8d, word [rsp + 0x848]
lea r9, [rsp + 0x438]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rax
mov word [rsp + 0x68], r8w
mov rdx, qword [rcx + 0x190]
mov rax, qword [rcx + 0x198]
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x50]
mov r8, rdi
call qword [rax + 0x28]
mov rax, qword [rsp + 0x270]
test rax, rax
jne 0x14009d29d
mov esi, dword [rsp + 0x464]
test rsi, rsi
je 0x14009cf8d
mov r14, qword [rsp + 0x440]
mov rbx, qword [rsp + 0x448]
cmp rbx, rsi
jbe 0x14009ad99
cmp byte [r14 + rsi], 0xbf
jg 0x14009ad9f
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
cmp esi, 4
jne 0x14009adba
mov rcx, r14
lea rdx, str.httphttpswswssftpfile__file:__
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x14009adf4
cmp rbx, rsi
jbe 0x14009adcb
cmp byte [r14 + rsi], 0xbf
jg 0x14009add1
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
cmp esi, 5
jne 0x14009cf8d
mov rcx, r14
lea rdx, [0x1401f08e8]
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14009cf8d
mov rax, qword [r13 + 0x110]
cmp byte [rax + 0x1ba], 0
je 0x14009ae3e
cmp rbx, rsi
jbe 0x14009ae15
cmp byte [r14 + rsi], 0xbf
jg 0x14009ae1b
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
cmp esi, 5
jne 0x14009d023
mov rcx, r14
lea rdx, [0x1401f08e8]
mov r8, rsi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14009d023
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movups xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
mov rax, qword [rsp + 0x170]
cmp qword [rax], 0
je 0x14009aeb8
mov r8, qword [r13 + 0x90]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x170]
mov qword [rcx + 0x50], rax
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rcx + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov rax, qword [rsp + 0x30]
movups xmm0, xmmword [rax + 0x50]
movaps xmmword [rsp + 0x1d0], xmm0
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x1b0], xmm3
movaps xmmword [rsp + 0x1a0], xmm2
movdqa xmmword [rsp + 0x190], xmm1
movaps xmmword [rsp + 0x180], xmm0
mov qword [r13 + 0x28], 0
mov qword [r13 + 0x40], 0
mov qword [r13 + 0x48], 8
mov rax, qword [rsp + 0x588]
movups xmmword [rax], xmm7
mov r14, qword [r13 + 0xe8]
mov rax, qword [r13 + 0xf0]
lea rdx, [rax - 1]
mov qword [r13 + 0x60], 8
mov qword [r13 + 0x68], 0
mov qword [r13 + 0x70], 2
mov qword [r13 + 0x78], 0
mov word [r13 + 0x80], 0
sub rax, 1
jb 0x14009c32f
mov rcx, qword [rsp + 0x160]
cmp byte [rcx], 0
je 0x14009b009
mov r9d, dword [r13 + 0xbc]
mov r8d, dword [r13 + 0xc0]
cmp r9d, r8d
ja case.default.0x14009a7d5
mov rcx, qword [r13 + 0x90]
mov r10, qword [r13 + 0x98]
test r9, r9
je 0x14009b655
cmp r10, r9
jbe 0x14009b64f
cmp byte [rcx + r9], 0xc0
jge 0x14009b655
jmp case.default.0x14009a7d5
xor ecx, ecx
jmp 0x14009b677
mov cl, 1
jmp 0x14009b090
mov cl, 2
jmp 0x14009b090
mov cl, 3
jmp 0x14009b090
movzx r10d, byte [rsp + 0x394]
mov byte [rsp + 0x54], r10b
mov r10d, dword [rsp + 0x390]
mov dword [rsp + 0x50], r10d
mov qword [rsp + 0x180], 0
mov r10, qword [rsp + 0x5c2]
mov r11, qword [rsp + 0x5c8]
lea rsi, [rsp + 0x18a]
mov qword [rsi + 6], r11
mov qword [rsi], r10
mov qword [rsp + 0x198], 0
mov qword [rsp + 0x1a0], 8
movaps xmm0, xmmword [rsp + 0x610]
movups xmmword [rsi + 0x1e], xmm0
mov qword [rsp + 0x1b8], 8
mov qword [rsp + 0x1c0], 0
mov qword [rsp + 0x1c8], 2
mov qword [rsp + 0x1d0], 0
mov word [rsp + 0x1d8], 0
movzx r10d, word [rsp + 0x38e]
mov word [rsi + 0x54], r10w
mov r10d, dword [rsp + 0x38a]
mov dword [rsi + 0x50], r10d
mov byte [rsp + 0x1e0], 0
mov r10, qword [rsp + 0x5d1]
mov r11, qword [rsp + 0x5d8]
mov qword [rsi + 0x5e], r11
mov qword [rsi + 0x57], r10
lea r11, [0x1401b74c0]
mov qword [rsp + 0x1f0], r11
lea r10, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
mov qword [rsp + 0x1f8], r10
movaps xmm0, xmmword [rsp + 0x600]
movups xmmword [rsi + 0x76], xmm0
mov qword [rsp + 0x210], r11
lea r10, [0x1401cd048]
mov qword [rsp + 0x218], r10
mov qword [rsp + 0x220], 1
mov qword [rsp + 0x228], 0
mov word [rsp + 0x230], 0xffff
movzx r10d, word [rsp + 0x388]
mov word [rsi + 0xac], r10w
mov r10d, dword [rsp + 0x384]
mov dword [rsi + 0xa8], r10d
mov byte [rsp + 0x238], cl
mov byte [rsp + 0x239], r8b
mov byte [rsp + 0x23a], r9b
movzx ecx, byte [rsp + 0x54]
mov byte [rsi + 0xb5], cl
mov ecx, dword [rsp + 0x50]
mov dword [rsi + 0xb1], ecx
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], rdx
mov qword [rsp + 0x250], 0
mov byte [rsp + 0x258], 2
mov eax, dword [rsp + 0x4d9]
mov ecx, dword [rsp + 0x4dc]
mov dword [rsi + 0xd2], ecx
mov dword [rsi + 0xcf], eax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0xa0], rax
movaps xmm0, xmmword [rsp + 0x560]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm0, xmmword [rsp + 0x520]
movaps xmm1, xmmword [rsp + 0x530]
movaps xmm2, xmmword [rsp + 0x540]
movaps xmm3, xmmword [rsp + 0x550]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
mov rcx, r15
lea rdx, [rsp + 0x180]
mov r8, rbp
call fcn.140099c50
movups xmm0, xmmword [rsp + 0x500]
movups xmm1, xmmword [rsp + 0x510]
movaps xmmword [rsp + 0x4f0], xmm1
movaps xmmword [rsp + 0x4e0], xmm0
cmp dword [rsp + 0x270], 3
je 0x14009da8c
lea rcx, [rsp + 0x27a]
mov rax, qword [rcx]
mov rcx, qword [rcx + 6]
mov qword [rsp + 0x358], rax
mov qword [rsp + 0x35e], rcx
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x5a0], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x168], rax
mov rbx, qword [rsp + 0x298]
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x40], rax
mov r13, qword [rsp + 0x2b0]
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x590], rax
mov r15, qword [rsp + 0x2c0]
mov r8d, 0x88
mov rcx, rbp
lea rdx, [rsp + 0x2c8]
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x500]
movdqu xmm1, xmmword [rsp + 0x510]
lea rsi, [rsp + 0x68]
movups xmmword [rsi + 0x70], xmm0
movdqu xmmword [rsi + 0x80], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0x390]
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov r14, qword [rsp + 0x48]
movzx edi, word [r14 + 0x80]
mov rcx, qword [r14 + 0x70]
mov rdx, qword [r14 + 0x78]
call fcn.1400d1b80
mov rbp, rax
mov r12, rdx
mov rdx, qword [r14 + 0x48]
mov r8, qword [r14 + 0x50]
mov rcx, rsi
call fcn.14006bce0
mov rdx, qword [r14 + 0x60]
mov r8, qword [r14 + 0x68]
lea rcx, [rsp + 0x80]
call fcn.14006c0a0
movdqu xmm0, xmmword [r14 + 0x28]
mov word [rsp + 0xa8], di
mov rax, qword [r14 + 0x38]
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r12
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
test r15, r15
je 0x14009b44f
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x590]
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x168]
je 0x14009b4c0
lea rsi, [r14 + 0x30]
jmp 0x14009b49b
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x68
dec rbx
je 0x14009b4c0
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14009b480
lea rcx, [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
jmp 0x14009b480
cmp qword [rsp + 0x5a0], 0
je 0x14009b4dc
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x14009b50b
lea rsi, [rdi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
dec r13
jne 0x14009b4f0
cmp qword [rsp + 0x28], 0
je 0x14009b524
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rdx, qword [r9 - 0xe]
mov r8, qword [r9 - 8]
mov qword [rsp + 0x358], rdx
mov qword [rsp + 0x35e], r8
movdqu xmm0, xmmword [rsp + 0x68]
movdqu xmm1, xmmword [rsp + 0x88]
movups xmm2, xmmword [rsp + 0x98]
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x390], rdx
movups xmm3, xmmword [rsp + 0x78]
mov r13, qword [rsp + 0x48]
mov rsi, qword [r13 + 0x110]
add rsi, 0x10
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], cx
mov rax, qword [rsp + 0x358]
mov rcx, qword [rsp + 0x35e]
mov qword [r9 - 8], rcx
mov qword [r9 - 0xe], rax
movdqu xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm3
movdqu xmmword [rsp + 0x88], xmm1
movups xmmword [rsp + 0x98], xmm2
mov r8d, 0xa8
lea rcx, [rsp + 0xa8]
lea rdx, [rsp + 0x390]
call sub.msvcrt.dll_memcpy
mov rcx, rsi
mov rdx, rbp
call fcn.14007d4f0
mov rsi, rax
mov rbx, rdx
mov r14, qword [r13 + 0x118]
mov rdi, qword [r13 + 0x120]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14009b627
cmp qword [rdi + 0x10], 0x11
jb 0x14009b616
mov r14, qword [r14 - 8]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov qword [r13 + 0x118], rsi
mov qword [r13 + 0x120], rbx
lea rcx, [rsp + 0x5a8]
call fcn.14005bcb0
mov rdi, qword [rsp + 0x378]
jmp 0x14009a18f
jne case.default.0x14009a7d5
test r8, r8
je 0x14009b671
cmp r10, r8
jbe 0x14009b66b
cmp byte [rcx + r8], 0xbf
jg 0x14009b671
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
add rcx, r9
sub r8, r9
imul r15, rdx, 0x58
add r15, r14
imul r12, rax, 0x58
cmp byte [r14 + r12 + 0x40], 0
je 0x14009b6bb
mov r9d, dword [r14 + r12 + 0x34]
mov eax, dword [r14 + r12 + 0x38]
cmp r9d, eax
ja case.default.0x14009a7d5
mov rdx, qword [r15 + 8]
mov r10, qword [r15 + 0x10]
test r9, r9
je 0x14009b6d3
cmp r10, r9
jbe 0x14009b6cd
cmp byte [rdx + r9], 0xc0
jge 0x14009b6d3
jmp case.default.0x14009a7d5
xor edx, edx
test rcx, rcx
jne 0x14009b6f9
test rdx, rdx
jne 0x14009b846
jmp 0x14009b718
jne case.default.0x14009a7d5
test rax, rax
je 0x14009b6ee
cmp r10, rax
jbe 0x14009b6e8
cmp byte [rdx + rax], 0xbf
jg 0x14009b6ee
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
add rdx, r9
sub rax, r9
test rcx, rcx
je 0x14009b6c2
test rdx, rdx
je 0x14009b846
cmp r8, rax
jne 0x14009b846
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14009b846
cmp word [r13 + 0xb0], 0
je 0x14009b771
movzx esi, word [r13 + 0xb2]
mov bx, 1
cmp word [r14 + r12 + 0x28], 0
je 0x14009b7fb
movzx edx, word [r14 + r12 + 0x2a]
jmp 0x14009b82c
mov ebx, dword [r13 + 0xb4]
mov rsi, qword [r13 + 0x90]
mov r14, qword [r13 + 0x98]
test rbx, rbx
je 0x14009b798
cmp r14, rbx
jbe 0x14009b79f
cmp byte [rsi + rbx], 0xbf
jg 0x14009b7a5
jmp case.default.0x14009a7d5
mov edx, dword [r13 + 0xb4]
mov rcx, qword [r13 + 0x90]
test rdx, rdx
je 0x14009b7d8
cmp qword [r13 + 0x98], rdx
jbe 0x14009b7d2
cmp byte [rcx + rdx], 0xbf
jg 0x14009b7d8
jmp case.default.0x14009a7d5
xor ebx, ebx
jmp 0x14009a816
jne case.default.0x14009a7d5
cmp ebx, 5
jne 0x14009a816
mov rcx, rsi
lea rdx, [0x1401f08e8]
mov r8, rbx
call sub.msvcrt.dll_memcmp
mov ebx, 5
test eax, eax
jne 0x14009a816
jmp 0x14009ab60
jne case.default.0x14009a7d5
call fcn.140105580
mov ebx, eax
mov esi, edx
cmp word [r14 + r12 + 0x28], 0
je 0x14009b7fb
test bx, bx
je 0x14009b846
movzx edx, word [r14 + r12 + 0x2a]
mov bx, 1
jmp 0x14009b82c
mov edx, dword [r14 + r12 + 0x2c]
mov rcx, qword [r15 + 8]
test rdx, rdx
je 0x14009b820
cmp qword [r15 + 0x10], rdx
jbe 0x14009b81a
cmp byte [rcx + rdx], 0xbf
jg 0x14009b820
jmp case.default.0x14009a7d5
jne case.default.0x14009a7d5
call fcn.140105580
test bx, bx
je 0x14009b83d
mov ebx, eax
cmp bx, 1
jne 0x14009b846
cmp si, dx
je 0x14009c32f
jmp 0x14009b846
test ax, ax
je 0x14009c32f
movups xmm0, xmmword [0x1401ca558]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401ca548]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
lea rsi, [rsp + 0x270]
mov r8, rsi
call fcn.1400906f0
cmp byte [rsp + 0x70], 2
je 0x14009b89d
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
movups xmm0, xmmword [0x1401ca648]
movaps xmmword [rsp + 0x280], xmm0
movdqu xmm0, xmmword [0x1401ca638]
movdqa xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400906f0
cmp byte [rsp + 0x70], 2
je 0x14009b8ee
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
lea rax, [0x1401caec8]
mov qword [rsp + 0x20], rax
mov r8d, 7
mov rcx, rdi
lea rdx, str.cookie2
mov r9, rsi
call fcn.14002cb50
movzx ebp, byte [rsp + 0x60]
cmp ebp, 3
jne 0x14009b926
lea rdi, [rsp + 0x50]
jmp 0x14009c291
mov rdi, qword [rsp + 0x1a8]
test rdi, rdi
je 0x14009c27f
mov rdx, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
cmp dword [rsp + 0x180], 2
mov qword [rsp + 0x28], rdx
jne 0x14009b9fa
movdqu xmm0, xmmword [rsp + 0x188]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm10
movdqa xmmword [rsp + 0x50], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmm11
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x70], xmm0
lea rax, [rsp + 0x80]
movaps xmmword [rax], xmm7
mov qword [rax + 0x10], 0
xor eax, eax
cmp ebp, 2
setne al
mov qword [rsp + 0x520], rax
mov r8d, 8
lea rsi, [rsp + 0x50]
mov rcx, rsi
lea r14, [rsp + 0x520]
mov rdx, r14
call fcn.1400f2f90
cmp ebp, 2
lea rbx, [0x1401caec8]
mov r15, rdi
jne 0x14009ba59
movzx eax, byte [rsp + 0x28]
mov qword [rsp + 0x520], rax
mov r8d, 8
mov rcx, rsi
mov rdx, r14
call fcn.1400f2f90
jmp 0x14009bb19
xor ecx, ecx
cmp ebp, 2
setne cl
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rbx, 0x1efac7090aef4a21
imul rcx, rbx
cmp ebp, 2
jne 0x14009ba74
movzx eax, dl
xor ecx, eax
imul ebx, ecx
and ebx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ebx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
jmp 0x14009bc55
test ebp, ebp
mov rdx, qword [rsp + 0x28]
je 0x14009bada
lea rcx, [rsp + 0x50]
mov r8, r13
call fcn.1400f2f90
jmp 0x14009bb19
lea rax, [rdx + r13]
test ebp, ebp
lea r10, [0x1401caec8]
movabs r11, 0x100000001b3
mov qword [rsp + 0x40], r13
je 0x14009bcdc
test r13, r13
je 0x14009bd17
mov r8, r13
and r8, 7
je 0x14009c0d4
mov rdx, qword [rsp + 0x28]
nop word cs:[rax + rax]
movzx ebx, byte [rdx]
inc rdx
xor rbx, rcx
imul rbx, r11
mov rcx, rbx
dec r8
jne 0x14009bac0
jmp 0x14009c0dc
test r13, r13
lea rdi, [rsp + 0x50]
je 0x14009bb19
mov r12, rdx
xor esi, esi
nop dword [rax]
movzx eax, byte [r12 + rsi]
movzx eax, byte [rax + rbx]
mov byte [rsp + 0x520], al
mov r8d, 1
mov rcx, rdi
mov rdx, r14
call fcn.1400f2f90
inc rsi
cmp r13, rsi
jne 0x14009baf0
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x60]
mov r9, qword [rsp + 0x80]
shl r9, 0x38
or r9, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x58]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rcx
mov rbx, rdx
shr rbx, 0x20
xor rbx, rdx
xor rbx, rax
mov rdi, r15
and ebx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ebx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
test ebp, ebp
je 0x14009c17a
cmp ebp, 2
mov rdx, qword [rsp + 0x28]
jne 0x14009bd48
xor ecx, ecx
jmp 0x14009bc70
inc rcx
inc rbp
mov rax, rbp
nop word cs:[rax + rax]
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x14009bc70
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x14009c27f
movzx eax, word [r13 + rbp*4 + 2]
mov r9d, esi
and r9d, eax
mov r8d, ebp
sub r8d, r9d
mov r9d, esi
and r9d, r8d
cmp rcx, r9
ja 0x14009c27f
cmp ax, bx
jne 0x14009bc59
cmp rdi, r15
jbe case.default.0x14009a7d5
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
jne 0x14009bc59
add rax, r10
add rax, 0x40
cmp byte [rax + 8], dl
jne 0x14009bc59
jmp 0x14009bdf3
test r13, r13
je 0x14009c14e
mov r8, r13
and r8, 3
je 0x14009cd99
mov rdx, qword [rsp + 0x28]
movzx r9d, byte [rdx]
movzx ebx, byte [r9 + r10]
xor rbx, rcx
imul rbx, r11
inc rdx
mov rcx, rbx
dec r8
jne 0x14009bcf7
jmp 0x14009cda1
and ecx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ecx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
mov ebx, ecx
mov rdx, qword [rsp + 0x28]
xor r14d, r14d
mov qword [rsp + 0x168], rdi
jmp 0x14009bd60
inc r14
inc rbp
mov rax, rbp
nop
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x14009bd60
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x14009c27f
movzx eax, word [r13 + rbp*4 + 2]
mov ecx, esi
and ecx, eax
mov r8d, ebp
sub r8d, ecx
mov ecx, esi
and ecx, r8d
cmp r14, rcx
ja 0x14009c27f
cmp ax, bx
jne 0x14009bd55
cmp rdi, r15
jbe case.default.0x14009a7d5
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
je 0x14009bd55
add rax, r10
add rax, 0x40
mov rcx, qword [rsp + 0x40]
cmp qword [rax + 0x10], rcx
jne 0x14009bd55
mov rcx, qword [rax + 8]
mov r8, qword [rsp + 0x40]
mov rdi, r10
call sub.msvcrt.dll_memcmp
mov r10, rdi
mov rdi, qword [rsp + 0x168]
mov rdx, qword [rsp + 0x28]
test eax, eax
jne 0x14009bd55
cmp r15, rdi
mov r13, qword [rsp + 0x48]
jae case.default.0x14009a7d5
imul rsi, r15, 0x68
cmp qword [r10 + rsi], 0
je 0x14009be28
add r10, rsi
mov rdx, qword [r10 + 8]
lea rcx, [rsp + 0x180]
call fcn.140034930
mov r12, qword [rsp + 0x1d0]
cmp r12, rbp
jbe case.default.0x14009a7d5
mov rax, qword [rsp + 0x1c8]
mov dword [rax + rbp*4], 0xffff
mov rcx, qword [rsp + 0x1a8]
cmp rcx, r15
jbe case.default.0x14009a7d5
mov r8, qword [rsp + 0x1a0]
lea rdx, [r8 + rsi]
movups xmm0, xmmword [r8 + rsi]
movups xmm1, xmmword [r8 + rsi + 0x10]
movups xmm2, xmmword [r8 + rsi + 0x20]
movups xmm3, xmmword [r8 + rsi + 0x30]
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x80], xmm3
movups xmm0, xmmword [r8 + rsi + 0x40]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [r8 + rsi + 0x50]
movaps xmmword [rsp + 0xa0], xmm0
mov r9, qword [r8 + rsi + 0x60]
mov qword [rsp + 0xb0], r9
dec rcx
imul r9, rcx, 0x68
mov r10, qword [r8 + r9 + 0x60]
movdqu xmm0, xmmword [r8 + r9 + 0x50]
movdqu xmm1, xmmword [r8 + r9 + 0x40]
movups xmm2, xmmword [r8 + r9]
movups xmm3, xmmword [r8 + r9 + 0x10]
movups xmm4, xmmword [r8 + r9 + 0x20]
movups xmm5, xmmword [r8 + r9 + 0x30]
movups xmmword [r8 + rsi], xmm2
movups xmmword [r8 + rsi + 0x10], xmm3
movups xmmword [r8 + rsi + 0x20], xmm4
movups xmmword [r8 + rsi + 0x30], xmm5
movdqu xmmword [r8 + rsi + 0x40], xmm1
movdqu xmmword [r8 + rsi + 0x50], xmm0
mov qword [r8 + rsi + 0x60], r10
mov qword [rsp + 0x1a8], rcx
cmp rcx, r15
mov r9d, 0
cmovbe rdx, r9
jbe 0x14009bfd3
movzx r8d, word [r8 + rsi + 0x60]
movzx r9d, word [rsp + 0x1d8]
and r9w, r8w
movzx r11d, r9w
jmp 0x14009bf50
inc r10
mov r11, r10
nop dword [rax]
mov r10, r11
mov r11d, 0
cmp r10, r12
jae 0x14009bf50
movzx r11d, word [rax + r10*4]
cmp r11, 0xffff
cmovne r9, r11
je 0x14009bf43
cmp r9, rcx
jb 0x14009bf43
mov word [rax + r10*4], r15w
mov word [rax + r10*4 + 2], r8w
cmp qword [rdx], 0
je 0x14009bfd3
mov r10, qword [rdx + 8]
mov r8, qword [rsp + 0x1c0]
cmp r10, r8
jae case.default.0x14009a7d5
mov r9, qword [rdx + 0x10]
mov rdx, qword [rsp + 0x1b8]
lea r10, [r10 + r10*8]
mov qword [rdx + r10*8], 0
mov qword [rdx + r10*8 + 8], r15
cmp r9, r8
jae case.default.0x14009a7d5
lea r8, [r9 + r9*8]
mov qword [rdx + r8*8 + 0x10], 0
mov qword [rdx + r8*8 + 0x18], r15
test rcx, rcx
lea rsi, [rsp + 0x270]
je 0x14009c045
lea r8, [rbp + 1]
movzx ecx, word [rsp + 0x1d8]
nop dword [rax]
mov rdx, r8
mov r8d, 0
cmp rdx, r12
jae 0x14009bff0
movzx r8d, word [rax + rdx*4]
cmp r8w, 0xffff
je 0x14009c045
movzx r9d, word [rax + rdx*4 + 2]
mov r10d, ecx
and r10d, r9d
mov r11d, edx
sub r11d, r10d
test r11d, ecx
je 0x14009c045
cmp rbp, r12
jae case.default.0x14009a7d5
mov word [rax + rbp*4], r8w
mov word [rax + rbp*4 + 2], r9w
mov dword [rax + rdx*4], 0xffff
lea r8, [rdx + 1]
mov rbp, rdx
jmp 0x14009bff0
lea rcx, [rsp + 0x68]
mov rax, qword [rcx + 0x20]
mov qword [rsp + 0x3b0], rax
movdqu xmm0, xmmword [rcx]
movdqu xmm1, xmmword [rcx + 0x10]
movdqa xmmword [rsp + 0x3a0], xmm1
movdqa xmmword [rsp + 0x390], xmm0
mov rax, qword [rsp + 0x90]
test rax, rax
je 0x14009c099
mov rdx, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa0]
lea rcx, [rsp + 0xa8]
call qword [rax + 0x10]
cmp byte [rsp + 0x3b0], 2
lea rdi, [rsp + 0x50]
je 0x14009c291
mov rax, qword [rsp + 0x390]
mov rdx, qword [rsp + 0x398]
mov r8, qword [rsp + 0x3a0]
lea rcx, [rsp + 0x3a8]
call qword [rax + 0x10]
jmp 0x14009c291
mov rbx, rcx
mov rdx, qword [rsp + 0x28]
cmp r13, 8
jb 0x14009bc15
movzx ecx, byte [rdx]
xor rcx, rbx
imul rcx, r11
movzx r8d, byte [rdx + 1]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 2]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 3]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 4]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 5]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 6]
xor rcx, r8
imul rcx, r11
movzx ebx, byte [rdx + 7]
add rdx, 8
xor rbx, rcx
imul rbx, r11
cmp rdx, rax
jne 0x14009c0e6
jmp 0x14009bc15
and ecx, 0x7fff
movzx esi, word [rsp + 0x1d8]
mov eax, ecx
and eax, esi
mov r10, qword [rsp + 0x1a0]
mov r13, qword [rsp + 0x1c8]
mov r12, qword [rsp + 0x1d0]
mov ebx, ecx
mov r11, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x40]
dec rcx
xor edx, edx
mov rbp, rax
jmp 0x14009c196
inc rdx
inc rbp
mov rax, rbp
nop dword [rax]
mov rbp, rax
mov eax, 0
cmp rbp, r12
jae 0x14009c1a0
movzx r15d, word [r13 + rbp*4]
cmp r15, 0xffff
je 0x14009c27f
movzx eax, word [r13 + rbp*4 + 2]
mov r8d, esi
and r8d, eax
mov r9d, ebp
sub r9d, r8d
mov r8d, esi
and r8d, r9d
cmp rdx, r8
ja 0x14009c27f
cmp ax, bx
jne 0x14009c190
cmp rdi, r15
jbe case.default.0x14009a7d5
imul rax, r15, 0x68
cmp qword [r10 + rax + 0x40], 0
je 0x14009c190
add rax, r10
add rax, 0x40
mov r8, qword [rsp + 0x40]
cmp qword [rax + 0x10], r8
jne 0x14009c190
cmp qword [rsp + 0x40], 0
je 0x14009bdf3
mov rax, qword [rax + 8]
movzx r8d, byte [r11]
lea r9, [0x1401caec8]
movzx r8d, byte [r8 + r9]
cmp r8b, byte [rax]
jne 0x14009c190
xor r8d, r8d
nop dword [rax]
cmp rcx, r8
je 0x14009bdf3
movzx r9d, byte [r11 + r8 + 1]
mov r14, r10
lea r10, [0x1401caec8]
movzx r10d, byte [r9 + r10]
lea r9, [r8 + 1]
cmp r10b, byte [rax + r8 + 1]
mov r10, r14
mov r8, r9
je 0x14009c240
cmp r9, qword [rsp + 0x40]
jb 0x14009c190
jmp 0x14009bdf3
mov r13, qword [rsp + 0x48]
lea rdi, [rsp + 0x50]
lea rsi, [rsp + 0x270]
movups xmm0, xmmword [0x1401ca438]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401ca428]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400906f0
cmp byte [rsp + 0x70], 2
je 0x14009c2e0
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
movups xmm0, xmmword [0x1401ca670]
movaps xmmword [rsp + 0x280], xmm0
movups xmm0, xmmword [0x1401ca660]
movaps xmmword [rsp + 0x270], xmm0
mov rcx, rdi
lea rdx, [rsp + 0x180]
mov r8, rsi
call fcn.1400906f0
cmp byte [rsp + 0x70], 2
je 0x14009c32f
mov rax, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call qword [rax + 0x10]
mov rdx, qword [r13 + 0x90]
mov r8, qword [r13 + 0x98]
lea rsi, [rsp + 0x270]
mov rcx, rsi
call fcn.140006260
mov rcx, rdi
mov rdx, rsi
call fcn.14002c130
cmp byte [rsp + 0x50], 3
je case.default.0x14009a7d5
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x3e0], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x3d0], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x3c0], xmm3
movaps xmmword [rsp + 0x3b0], xmm2
movaps xmmword [rsp + 0x3a0], xmm1
movaps xmmword [rsp + 0x390], xmm0
cmp qword [r13], 0
mov rsi, qword [rsp + 0x598]
je 0x14009c400
mov rax, qword [r13 + 8]
test rax, rax
je 0x14009c400
mov r8, qword [r13 + 0x10]
mov r9, qword [r13 + 0x18]
mov rcx, rdi
mov rdx, qword [rsp + 0x268]
call qword [rax]
movdqa xmm12, xmmword [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
jmp 0x14009c40a
xor ebx, ebx
xor r14d, r14d
movdqa xmm12, xmm9
movaps xmmword [rsp + 0x5e0], xmm7
movaps xmmword [rsp + 0x5f0], xmm7
mov rax, qword [rsp + 0x178]
movzx eax, byte [rax]
lea rcx, [0x140198ebc]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor eax, eax
jmp 0x14009c4f0
movzx ecx, byte [rsp + 0x274]
mov byte [rsp + 0x54], cl
mov ecx, dword [rsp + 0x270]
mov dword [rsp + 0x50], ecx
mov qword [rsp + 0x620], 0
mov qword [rsp + 0x638], 0
mov qword [rsp + 0x640], 8
movaps xmm0, xmmword [rsp + 0x5f0]
lea rdx, [rsp + 0x6db]
movups xmmword [rdx - 0x93], xmm0
mov qword [rsp + 0x658], 8
mov qword [rsp + 0x660], 0
mov qword [rsp + 0x668], 2
mov qword [rsp + 0x670], 0
mov word [rsp + 0x678], 0
mov byte [rsp + 0x680], 0
lea r8, [0x1401b74c0]
mov qword [rsp + 0x690], r8
lea rcx, str.description___is_deprecated__use_DisplaySequenceDataDataMagicParamdecompression_not_finished_but_EOF_reachedcorrupt_deflate_streamincomplete_frameInvalid_checksum
mov qword [rsp + 0x698], rcx
movaps xmm0, xmmword [rsp + 0x5e0]
movups xmmword [rdx - 0x3b], xmm0
mov qword [rsp + 0x6b0], r8
lea rcx, [0x1401cd048]
mov qword [rsp + 0x6b8], rcx
mov qword [rsp + 0x6c0], 1
mov qword [rsp + 0x6c8], 0
mov word [rsp + 0x6d0], 0xffff
mov byte [rsp + 0x6d8], al
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0x6d9], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x6da], al
movzx eax, byte [rsp + 0x54]
mov byte [rdx + 4], al
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x6e0], rax
mov qword [rsp + 0x6e8], rsi
mov qword [rsp + 0x6f0], 0
mov byte [rsp + 0x6f8], 2
movzx eax, byte [rsp + 0x390]
test rax, rax
mov qword [rsp + 0x598], rsi
je 0x14009c668
cmp eax, 1
jne 0x14009c66c
mov bpl, 1
movzx r15d, byte [rsp + 0x391]
jmp 0x14009c6e0
xor ebp, ebp
jmp 0x14009c6e0
mov r15, qword [rsp + 0x398]
movzx eax, byte [0x140205110]
mov rax, qword [0x140205100]
test rax, rax
jne 0x14009c69c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov qword [0x140205100], rax
mov r8d, 0x20
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rsi, rax
lea rdx, [r15 + 0x18]
mov rax, qword [r15]
mov r8, qword [r15 + 8]
mov r9, qword [r15 + 0x10]
mov rcx, rdi
call qword [rax]
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov bpl, 2
mov rax, qword [rsp + 0x3a0]
mov r8, qword [rsp + 0x3a8]
mov r9, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x280]
lea rdx, [rsp + 0x3b8]
call qword [rax]
mov rax, qword [rsp + 0x3c0]
mov r8, qword [rsp + 0x3c8]
mov r9, qword [rsp + 0x3d0]
lea rcx, [rsp + 0x2a0]
lea rdx, [rsp + 0x3d8]
call qword [rax]
movzx eax, word [rsp + 0x3e0]
mov byte [rsp + 0x270], bpl
mov byte [rsp + 0x271], r15b
mov qword [rsp + 0x278], rsi
mov word [rsp + 0x2c0], ax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x280]
movups xmm1, xmmword [rsp + 0x290]
movups xmm2, xmmword [rsp + 0x2a0]
movups xmm3, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0x90], xmm3
movaps xmmword [rsp + 0x80], xmm2
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
movzx eax, byte [rsp + 0x270]
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x271]
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x272]
mov dword [rsp + 0x52], eax
movzx eax, word [rsp + 0x276]
mov word [rsp + 0x56], ax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x700]
lea rdx, [rsp + 0x620]
lea rdi, [rsp + 0x50]
mov r8, rdi
call fcn.140099c50
movdqa xmmword [rsp + 0x520], xmm12
mov qword [rsp + 0x530], rbx
mov qword [rsp + 0x538], r14
cmp dword [rsp + 0x700], 3
je 0x14009da9b
lea rcx, [rsp + 0x70a]
mov rax, qword [rcx]
mov rcx, qword [rcx + 6]
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e6], rcx
mov rax, qword [rsp + 0x718]
mov qword [rsp + 0x28], rax
mov rsi, qword [rsp + 0x720]
mov rbx, qword [rsp + 0x728]
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x738]
mov r13, qword [rsp + 0x740]
mov rax, qword [rsp + 0x748]
mov qword [rsp + 0x168], rax
mov r15, qword [rsp + 0x750]
mov r8d, 0x88
mov rcx, rdi
lea rdx, [rsp + 0x758]
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x520]
movdqa xmm1, xmmword [rsp + 0x530]
lea rax, [rsp + 0x68]
movups xmmword [rax + 0x70], xmm0
movdqu xmmword [rax + 0x80], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0x270]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
movzx edi, word [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1c8]
mov rdx, qword [rsp + 0x1d0]
call fcn.1400d1b80
mov r12, rax
mov rbp, rdx
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a8]
lea rcx, [rsp + 0x68]
call fcn.14006bce0
mov rdx, qword [rsp + 0x1b8]
mov r8, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x80]
call fcn.14006c0a0
movdqa xmm0, xmmword [rsp + 0x180]
mov word [rsp + 0xa8], di
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], rbp
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
test r15, r15
je 0x14009c990
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, qword [rsp + 0x168]
call sub.kernel32.dll_HeapFree
test rbx, rbx
lea r12, [rsp + 0x438]
lea rbp, [rsp + 0x50]
lea r15, [rsp + 0x270]
mov rdi, r14
mov r14, rsi
je 0x14009ca00
lea rsi, [r14 + 0x30]
jmp 0x14009c9db
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x68
dec rbx
je 0x14009ca00
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14009c9c0
lea rcx, [rsi + 0x28]
mov rdx, qword [rsi + 0x18]
mov r8, qword [rsi + 0x20]
call qword [rax + 0x10]
jmp 0x14009c9c0
cmp qword [rsp + 0x28], 0
je 0x14009ca19
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x14009ca4b
lea rsi, [rdi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rsi - 0x18]
mov rdx, qword [rsi - 0x10]
mov r8, qword [rsi - 8]
mov rcx, rsi
call qword [rax + 0x10]
add rsi, 0x48
dec r13
jne 0x14009ca30
cmp qword [rsp + 0x40], 0
je 0x14009ca64
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x50]
movzx ecx, word [rsp + 0x58]
lea r9, [rsp + 0x68]
mov rdx, qword [r9 - 0xe]
mov r8, qword [r9 - 8]
mov qword [rsp + 0x4e0], rdx
mov qword [rsp + 0x4e6], r8
movups xmm2, xmmword [rsp + 0x68]
movdqu xmm0, xmmword [rsp + 0x88]
movdqu xmm1, xmmword [rsp + 0x98]
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x270], rdx
movups xmm3, xmmword [rsp + 0x78]
movaps xmm4, xmmword [rsp + 0x180]
mov r13, qword [rsp + 0x48]
movups xmm5, xmmword [r13 + 0x28]
movups xmmword [r13 + 0x28], xmm4
movaps xmmword [rsp + 0x180], xmm5
movaps xmm4, xmmword [rsp + 0x190]
movups xmm5, xmmword [r13 + 0x38]
movups xmmword [r13 + 0x38], xmm4
movaps xmmword [rsp + 0x190], xmm5
movaps xmm4, xmmword [rsp + 0x1a0]
movups xmm5, xmmword [r13 + 0x48]
movups xmmword [r13 + 0x48], xmm4
movaps xmmword [rsp + 0x1a0], xmm5
movaps xmm4, xmmword [rsp + 0x1b0]
movups xmm5, xmmword [r13 + 0x58]
movups xmmword [r13 + 0x58], xmm4
movaps xmmword [rsp + 0x1b0], xmm5
movaps xmm4, xmmword [rsp + 0x1c0]
movups xmm5, xmmword [r13 + 0x68]
movups xmmword [r13 + 0x68], xmm4
movaps xmmword [rsp + 0x1c0], xmm5
movaps xmm4, xmmword [rsp + 0x1d0]
movups xmm5, xmmword [r13 + 0x78]
movups xmmword [r13 + 0x78], xmm4
movaps xmmword [rsp + 0x1d0], xmm5
mov rsi, qword [r13 + 0x110]
add rsi, 0x10
mov qword [rsp + 0x50], rax
mov word [rsp + 0x58], cx
mov rax, qword [rsp + 0x4e0]
mov rcx, qword [rsp + 0x4e6]
mov qword [r9 - 8], rcx
mov qword [r9 - 0xe], rax
movups xmmword [rsp + 0x68], xmm2
movups xmmword [rsp + 0x78], xmm3
movdqu xmmword [rsp + 0x88], xmm0
movdqu xmmword [rsp + 0x98], xmm1
mov r8d, 0xa8
lea rcx, [rsp + 0xa8]
mov rdx, r15
call sub.msvcrt.dll_memcpy
mov rcx, rsi
mov rdx, rbp
call fcn.14007d4f0
mov rsi, rax
mov rbx, rdx
mov r14, qword [r13 + 0x118]
mov rdi, qword [r13 + 0x120]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14009cbfe
cmp qword [rdi + 0x10], 0x11
jb 0x14009cbed
mov r14, qword [r14 - 8]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov qword [r13 + 0x118], rsi
mov qword [r13 + 0x120], rbx
cmp byte [rsp + 0x390], 2
jb 0x14009cc41
mov rsi, qword [rsp + 0x398]
lea rcx, [rsi + 0x18]
mov rax, qword [rsi]
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
call qword [rax + 0x10]
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x3a8]
mov r8, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call qword [rax + 0x10]
mov rax, qword [rsp + 0x3c0]
mov rdx, qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x3d0]
lea rcx, [rsp + 0x3d8]
call qword [rax + 0x10]
cmp qword [rsp + 0x1d0], 0
mov rdi, qword [rsp + 0x378]
je 0x14009ccb0
mov r8, qword [rsp + 0x1c8]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x1a8]
test r14, r14
je 0x14009cd10
lea rbx, [rsi + 0x30]
jmp 0x14009cceb
mov rax, qword [rbx - 0x18]
mov rdx, qword [rbx - 0x10]
mov r8, qword [rbx - 8]
mov rcx, rbx
call qword [rax + 0x10]
add rbx, 0x68
dec r14
je 0x14009cd10
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x14009ccd0
lea rcx, [rbx + 0x28]
mov rdx, qword [rbx + 0x18]
mov r8, qword [rbx + 0x20]
call qword [rax + 0x10]
jmp 0x14009ccd0
cmp qword [rsp + 0x198], 0
je 0x14009cd2c
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x1b8]
mov r14, qword [rsp + 0x1c0]
test r14, r14
je 0x14009cd6b
lea rbx, [rsi + 0x38]
nop word cs:[rax + rax]
mov rax, qword [rbx - 0x18]
mov rdx, qword [rbx - 0x10]
mov r8, qword [rbx - 8]
mov rcx, rbx
call qword [rax + 0x10]
add rbx, 0x48
dec r14
jne 0x14009cd50
cmp qword [rsp + 0x1b0], 0
je 0x14009cd87
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x7e0]
call fcn.14009dab0
jmp 0x14009a18f
mov rdx, qword [rsp + 0x28]
mov rbx, rcx
cmp r13, 4
jb 0x14009bc15
movzx ecx, byte [rdx]
movzx ecx, byte [rcx + r10]
xor rcx, rbx
imul rcx, r11
movzx r8d, byte [rdx + 1]
movzx r8d, byte [r8 + r10]
xor r8, rcx
imul r8, r11
movzx ecx, byte [rdx + 2]
movzx ecx, byte [rcx + r10]
xor rcx, r8
imul rcx, r11
movzx r8d, byte [rdx + 3]
movzx ebx, byte [r8 + r10]
xor rbx, rcx
imul rbx, r11
add rdx, 4
cmp rdx, rax
jne 0x14009cdab
jmp 0x14009bc15
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009ce25
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rbx, rax
movabs rax, 0x8000000000000000
mov qword [rbx], rax
mov qword [rbx + 0x58], 1
lea rax, [0x1401cb698]
mov qword [rbx + 0x60], rax
mov word [rbx + 0x68], 1
mov r15, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x14009cebf
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009cea8
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x14009cec5
jmp case.default.0x14009a7d5
mov r14d, 1
mov rcx, r14
mov rdx, r15
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [r13 + 0xb4]
movups xmm0, xmmword [r13 + 0xc8]
movzx eax, byte [r13 + 0xd8]
mov byte [rsp + 0x60], al
movaps xmmword [rsp + 0x50], xmm0
movzx r8d, word [r13 + 0xb0]
mov rax, r13
movzx r13d, word [r13 + 0xb2]
mov edx, dword [rax + 0xc4]
mov r12d, dword [rax + 0xa0]
mov ebp, dword [rax + 0xa4]
mov r15d, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
mov rax, qword [rbx]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14009cf65
test rax, rax
je 0x14009cf65
mov word [rsp + 0x48], r8w
mov r8, qword [rbx + 8]
mov rcx, qword [0x140205100]
mov dword [rsp + 0x30], edx
xor edx, edx
call sub.kernel32.dll_HeapFree
movzx r8d, word [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0x18], r12d
mov dword [rbx + 0x1c], ebp
mov dword [rbx + 0x20], r15d
mov dword [rbx + 0x24], edi
mov word [rbx + 0x28], r8w
mov word [rbx + 0x2a], r13w
jmp 0x14009d256
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movdqu xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movdqa xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.1400af4d0
jmp 0x14009d8d2
test r15, r15
je 0x14009d2c8
mov rcx, qword [0x140205100]
xor edx, edx
mov r8, rbx
jmp 0x14009d2c3
mov rax, qword [rsp + 0x158]
mov qword [rax], 4
jmp 0x14009d8f2
test rbx, rbx
je 0x14009d666
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d05d
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x14009d66b
jmp case.default.0x14009a7d5
lea rcx, [rsp + 0x500]
call fcn.14006ebe0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d0b0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rsi, rax
mov qword [rax], rbx
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d0f7
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rbx, rax
movabs rax, 0x8000000000000000
mov qword [rbx], rax
mov qword [rbx + 0x58], rsi
lea rax, [0x1401cb2d8]
mov qword [rbx + 0x60], rax
mov word [rbx + 0x68], 1
mov r14, qword [r13 + 0x90]
mov rsi, qword [r13 + 0x98]
test rsi, rsi
je 0x14009d18d
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d176
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x14009d193
jmp case.default.0x14009a7d5
mov r15d, 1
mov rcx, r15
mov rdx, r14
mov r8, rsi
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [r13 + 0xb4]
mov rcx, qword [rsp + 0x160]
movzx eax, byte [rcx + 0x10]
mov byte [rsp + 0x60], al
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x50], xmm0
movzx r8d, word [r13 + 0xb0]
movzx r12d, word [r13 + 0xb2]
mov edx, dword [r13 + 0xc4]
mov rax, r13
mov r13d, dword [r13 + 0xa0]
mov ebp, dword [rax + 0xa4]
mov r14d, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
mov rax, qword [rbx]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14009d233
test rax, rax
je 0x14009d233
mov word [rsp + 0x48], r8w
mov r8, qword [rbx + 8]
mov rcx, qword [0x140205100]
mov dword [rsp + 0x30], edx
xor edx, edx
call sub.kernel32.dll_HeapFree
movzx r8d, word [rsp + 0x48]
mov edx, dword [rsp + 0x30]
mov qword [rbx], rsi
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0x18], r13d
mov dword [rbx + 0x1c], ebp
mov dword [rbx + 0x20], r14d
mov dword [rbx + 0x24], edi
mov word [rbx + 0x28], r8w
mov word [rbx + 0x2a], r12w
movdqu xmmword [rbx + 0x2c], xmm6
mov dword [rbx + 0x3c], edx
movdqa xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rbx + 0x40], xmm0
movzx eax, byte [rsp + 0x60]
mov byte [rbx + 0x50], al
mov eax, dword [rsp + 0x270]
mov ecx, dword [rsp + 0x273]
mov dword [rbx + 0x51], eax
mov dword [rbx + 0x54], ecx
mov rax, qword [rsp + 0x158]
mov qword [rax], 3
mov qword [rax + 8], rbx
jmp 0x14009d8f2
cmp rax, 1
jne 0x14009d5fa
cmp qword [rsp + 0x438], 0
je 0x14009d2c8
mov r8, qword [rsp + 0x440]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x7e0]
mov r8d, 0xa0
call sub.msvcrt.dll_memcpy
mov rsi, qword [r13 + 0x90]
mov rbx, qword [r13 + 0x98]
test rbx, rbx
je 0x14009d33b
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d324
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x14009d341
jmp case.default.0x14009a7d5
mov r14d, 1
mov rcx, r14
mov rdx, rsi
mov r8, rbx
call sub.msvcrt.dll_memcpy
movups xmm6, xmmword [r13 + 0xb4]
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x390], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rsp + 0x3a0], al
movzx eax, word [r13 + 0xb0]
mov word [rsp + 0x48], ax
movzx eax, word [r13 + 0xb2]
mov word [rsp + 0x170], ax
mov eax, dword [r13 + 0xc4]
mov dword [rsp + 0x30], eax
mov r15d, dword [r13 + 0xa0]
mov ebp, dword [r13 + 0xa4]
mov r12d, dword [r13 + 0xa8]
mov rax, r13
mov r13d, dword [r13 + 0xac]
mov rdi, qword [rax + 0x130]
mov qword [rax + 0x130], 0
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x2d0], xmm0
movups xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x2c0], xmm0
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x2b0], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movups xmm2, xmmword [rsp + 0x70]
movups xmm3, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x2a0], xmm3
movaps xmmword [rsp + 0x290], xmm2
movaps xmmword [rsp + 0x280], xmm1
movaps xmmword [rsp + 0x270], xmm0
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x180], xmm0
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0x190], xmm0
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1a0], xmm0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d490
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x30
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rsi, rax
movaps xmm0, xmmword [rsp + 0x180]
movaps xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmmword [rsp + 0x1a0]
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d4f7
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x58
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r15d
mov dword [rax + 0x1c], ebp
mov dword [rax + 0x20], r12d
mov dword [rax + 0x24], r13d
movzx ecx, word [rsp + 0x48]
mov word [rax + 0x28], cx
movzx ecx, word [rsp + 0x170]
mov word [rax + 0x2a], cx
movups xmmword [rax + 0x2c], xmm6
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x3c], ecx
movzx ecx, byte [rsp + 0x3a0]
mov byte [rax + 0x50], cl
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [rax + 0x40], xmm0
mov ecx, dword [rsp + 0x438]
mov edx, dword [rsp + 0x43b]
mov dword [rax + 0x54], edx
mov dword [rax + 0x51], ecx
movaps xmm0, xmmword [rsp + 0x270]
movaps xmm1, xmmword [rsp + 0x280]
movaps xmm2, xmmword [rsp + 0x290]
movaps xmm3, xmmword [rsp + 0x2a0]
mov rdx, qword [rsp + 0x158]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm2
movups xmmword [rdx + 0x30], xmm3
movaps xmm0, xmmword [rsp + 0x2b0]
movups xmmword [rdx + 0x40], xmm0
movaps xmm0, xmmword [rsp + 0x2c0]
movups xmmword [rdx + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x2d0]
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x70], 0
mov qword [rdx + 0x78], rsi
lea rcx, [0x1401c9920]
mov qword [rdx + 0x80], rcx
mov qword [rdx + 0x88], rdi
mov qword [rdx + 0x90], rax
jmp 0x14009d8f2
movdqu xmm6, xmmword [rsp + 0x278]
mov r14, qword [r13 + 0x90]
mov rbx, qword [r13 + 0x98]
test rbx, rbx
je 0x14009d943
js case.default.0x14009a7d5
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d64b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x14009d948
jmp case.default.0x14009a7d5
mov edi, 1
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
movdqu xmm6, xmmword [rsp + 0x464]
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [rsp + 0x488]
mov byte [rsp + 0x60], al
movzx eax, word [rsp + 0x460]
mov word [rsp + 0x48], ax
movzx r15d, word [rsp + 0x462]
mov eax, dword [rsp + 0x474]
mov dword [rsp + 0x30], eax
mov r12d, dword [rsp + 0x450]
mov r13d, dword [rsp + 0x454]
mov ebp, dword [rsp + 0x458]
mov r14d, dword [rsp + 0x45c]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d706
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rsi, rax
mov qword [rax + 0x58], 1
lea rax, [0x1401cb620]
mov qword [rsi + 0x60], rax
mov word [rsi + 0x68], 0
mov qword [rsi], rbx
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rbx
mov dword [rsi + 0x18], r12d
mov dword [rsi + 0x1c], r13d
mov dword [rsi + 0x20], ebp
mov dword [rsi + 0x24], r14d
movzx eax, word [rsp + 0x48]
mov word [rsi + 0x28], ax
mov word [rsi + 0x2a], r15w
movdqu xmmword [rsi + 0x2c], xmm6
mov eax, dword [rsp + 0x30]
mov dword [rsi + 0x3c], eax
movzx eax, byte [rsp + 0x60]
mov byte [rsi + 0x50], al
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi + 0x40], xmm0
mov eax, dword [rsp + 0x270]
mov ecx, dword [rsp + 0x273]
mov dword [rsi + 0x54], ecx
mov dword [rsi + 0x51], eax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x478]
movaps xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsp + 0x438]
movups xmm1, xmmword [rsp + 0x448]
movups xmm2, xmmword [rsp + 0x458]
movups xmm3, xmmword [rsp + 0x468]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm2
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d813
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
mov rdi, rax
mov qword [rax], rsi
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d85a
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
mov qword [rax + 0x58], rdi
lea rcx, [0x1401cb788]
mov qword [rax + 0x60], rcx
mov word [rax + 0x68], 2
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
movaps xmm2, xmmword [rsp + 0x70]
movaps xmm3, xmmword [rsp + 0x80]
movups xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm1
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x30], xmm3
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rax + 0x40], xmm0
mov rcx, qword [rsp + 0xa0]
mov qword [rax + 0x50], rcx
mov rcx, qword [rsp + 0x158]
mov qword [rcx], 3
mov qword [rcx + 8], rax
lea rcx, [rsp + 0x7e0]
call fcn.14009dab0
movaps xmm6, xmmword [rsp + 0x880]
movaps xmm7, xmmword [rsp + 0x890]
movaps xmm8, xmmword [rsp + 0x8a0]
movaps xmm9, xmmword [rsp + 0x8b0]
movaps xmm10, xmmword [rsp + 0x8c0]
movaps xmm11, xmmword [rsp + 0x8d0]
movaps xmm12, xmmword [rsp + 0x8e0]
add rsp, 0x8f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
movups xmm7, xmmword [r13 + 0xb4]
mov rax, qword [rsp + 0x160]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [rax + 0x10]
mov byte [rsp + 0x60], al
movzx r14d, word [r13 + 0xb0]
movzx r15d, word [r13 + 0xb2]
mov eax, dword [r13 + 0xc4]
mov dword [rsp + 0x30], eax
mov r12d, dword [r13 + 0xa0]
mov rax, r13
mov r13d, dword [r13 + 0xa4]
mov ebp, dword [rax + 0xa8]
mov edi, dword [rax + 0xac]
movzx eax, byte [0x140205110]
mov rcx, qword [0x140205100]
test rcx, rcx
jne 0x14009d9d9
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je case.default.0x14009a7d5
mov rcx, rax
mov qword [0x140205100], rax
mov r8d, 0x70
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je case.default.0x14009a7d5
movdqu xmmword [rax + 0x58], xmm6
mov word [rax + 0x68], 2
mov qword [rax], rbx
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rbx
mov dword [rax + 0x18], r12d
mov dword [rax + 0x1c], r13d
mov dword [rax + 0x20], ebp
mov dword [rax + 0x24], edi
mov word [rax + 0x28], r14w
mov word [rax + 0x2a], r15w
movups xmmword [rax + 0x2c], xmm7
mov ecx, dword [rsp + 0x30]
mov dword [rax + 0x3c], ecx
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rax + 0x40], xmm0
movzx ecx, byte [rsp + 0x60]
mov byte [rax + 0x50], cl
mov ecx, dword [rsp + 0x270]
mov edx, dword [rsp + 0x273]
mov dword [rax + 0x51], ecx
mov dword [rax + 0x54], edx
mov rcx, qword [rsp + 0x158]
mov qword [rcx], 3
mov qword [rcx + 8], rax
cmp qword [rsp + 0x438], 0
je 0x14009d8e5
mov r8, qword [rsp + 0x440]
mov rcx, qword [0x140205100]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14009d8e5
ud2
lea rcx, [rsp + 0x4e0]
call fcn.14006ebe0
ud2
lea rcx, [rsp + 0x520]
call fcn.14006ebe0
ud2