Function at 0x14004ff50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
nop
push r12
mov qword [rsp], rbx
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
nop
sub rsp, 8
mov qword [rsp], r14
push r15
sub rsp, 0x860
xchg rcx, rbx
mov rcx, rdx
xchg rcx, rbx
xor edi, edi
mov dword [rsp + 0xc0], edi
xchg rdx, r14
mov rcx, r14
xchg r14, rdx
call fcn.1400704f0
test rax, rax
je 0x140051918
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
movdqu xmmword [rsp + 0x128], xmm0
xchg rdi, r15
mov qword [rsp + 0x138], r15
xchg rdi, r15
mov dword [rsp + 0xc0], 0x1332cdc
add dword [rsp + 0xc0], 0x2dd8e0e9
sub dword [rsp + 0xc0], 0x1a4e501c
xor dword [rsp + 0xc0], 0x6870e4ea
sub dword [rsp + 0xc0], 0x1286d29d
xor dword [rsp + 0xc0], 0x7c040360
sub dword [rsp + 0xc0], 0x164285c5
lea ecx, [rdi + 0x20]
call fcn.1401fcb6c
mov qword [rsp + 0x88], rax
test rax, rax
je 0x1400500fc
xorps xmm0, xmm0
xchg r13, rax
movups xmmword [r13], xmm0
xchg r13, rax
mov dword [rax + 8], 0x5523a3f5
add dword [rax + 8], 0xfafbaf3
sub dword [rax + 8], 0x58ae8d27
add dword [rax + 8], 0x4cda707
add dword [rax + 8], 0x59fdfb53
xor dword [rax + 8], 0x291b8295
add dword [rax + 8], 0xa620180
sub dword [rax + 8], 0x1ca6e32
xor dword [rax + 8], 0x4c8389dd
mov dword [rax + 0xc], 0x4f43a0ea
add dword [rax + 0xc], 0x12f51af0
sub dword [rax + 0xc], 0x1b539a1e
add dword [rax + 0xc], 0x27ab63d1
sub dword [rax + 0xc], 0x11333308
sub dword [rax + 0xc], 0x4be142b7
sub dword [rax + 0xc], 0x117c0fcd
lea rcx, [0x140002b88]
mov qword [rax], rcx
lea rcx, [0x1400017e0]
xchg r9, rcx
mov qword [rax + 0x10], r9
xchg r9, rcx
lea rcx, [rsp + 0x128]
mov qword [rax + 0x18], rcx
jmp 0x140050103
xchg r12, rax
mov r12, rdi
xchg r12, rax
or dword [rsp + 0xc0], 2
lea rcx, [rax + 0x10]
mov qword [rsp + 0xe8], rcx
xchg rdx, rax
mov qword [rsp + 0xf0], rdx
xchg rdx, rax
lea rdx, [rsp + 0xe8]
xchg r13, rdx
mov qword [rsp + 0x88], r13
xchg r13, rdx
test rax, rax
je 0x140050156
lock inc dword [rax + 8]
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xe8]
mov byte [rsp + 0x1c0], 6
add byte [rsp + 0x1c0], 0x28
add byte [rsp + 0x1c0], 1
sub byte [rsp + 0x1c0], 0xa
xor byte [rsp + 0x1c0], 0x32
xor byte [rsp + 0x1c0], 0xf
xor byte [rsp + 0x1c0], 0x77
sub byte [rsp + 0x1c0], 0x6e
mov qword [rsp + 0x1c8], rcx
mov qword [rsp + 0x1d0], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x218], xmm0
xchg rbx, r15
mov rdx, r15
xchg r15, rbx
lea rcx, [rsp + 0x1c0]
call fcn.140071b10
nop
xchg rbx, r15
mov r15, qword [rsp + 0x1d0]
xchg rbx, r15
nop
movabs r14, 0xffffffff6cf0e35e
sub r14, 0x5e31f64d
add r14, 0x3f590693
xor r14, 0x381a73cf
xor r14, 0x6fa139d5
xor r14, 0x30147fcb
add r14, 0x7fffffff
add r14, 0x5647398b
test rbx, rbx
je 0x14005025e
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14005025e
xchg r9, rax
mov r9, qword [rbx]
xchg r9, rax
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14005025e
xchg r15, rax
mov r15, qword [rbx]
xchg r15, rax
xchg rcx, rbp
mov rbp, rbx
xchg rbp, rcx
call qword [rax + 8]
nop
xchg rbx, r11
mov r11, qword [rsp + 0xf0]
xchg r11, rbx
test rbx, rbx
je 0x1400502b4
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400502b4
mov rax, qword [rbx]
xchg r10, rcx
mov r10, rbx
xchg r10, rcx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400502b4
mov rax, qword [rbx]
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [rax + 8]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140050308
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050303
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x140050303
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
xchg r11, r13
mov r11, qword [rsp + 0x128]
xchg r11, r13
mov qword [rsp + 0x70], r13
mov r12, qword [rsp + 0x130]
xchg r12, rdx
mov qword [rsp + 0x78], rdx
xchg rdx, r12
xchg rdx, rax
mov rdx, qword [rsp + 0x138]
xchg rdx, rax
xchg rdx, rax
mov qword [rsp + 0x80], rdx
xchg rdx, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x128], xmm0
xchg r10, rdi
mov qword [rsp + 0x138], r10
xchg r10, rdi
and dword [rsp + 0xc0], 0xfffffffe
mov r15, r12
sub r15, r13
lea rsi, [r15 + 0xf]
and rsi, 0xfffffffffffffff0
cmp r15, rsi
je 0x1400503ee
jbe 0x140050393
lea rax, [rsi + r13]
mov qword [rsp + 0x78], rax
jmp 0x1400503ee
jae 0x1400503ee
sub rax, r13
cmp rsi, rax
jbe 0x1400503c1
lea r8, [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.1400356e0
mov r13, qword [rsp + 0x70]
jmp 0x1400503ee
mov rbx, rsi
sub rbx, r15
xchg rbx, rdi
mov r8, rdi
xchg rdi, rbx
xor edx, edx
xchg rdi, rcx
mov rdi, r12
xchg rdi, rcx
call sub.VCRUNTIME140.dll_memset
add r12, rbx
xchg r12, rbx
mov qword [rsp + 0x78], rbx
xchg rbx, r12
call fcn.14017a0e0
movabs rcx, 0x272e21213c63a12f
add rcx, 0xc071b67
sub rcx, 0xc4df08c
xor rcx, 0x1c728639
add rcx, 0x29ad6747
xor rcx, 0x28f770f8
xor rcx, 0x41bc0c59
xor rcx, 0x6804619b
sub rcx, 0xf218df3
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
or rax, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x148], rax
mov r9d, 0x7c4cc59b
sub r9d, 0x217eb256
add r9d, 0x1b72fb06
sub r9d, 0x2e73bbd4
xor r9d, 0x4a737aea
xor r9d, 0x6fb83c6b
sub r9d, 0x60d70cf1
add r9d, 0x78402d27
xor r9d, 0x796f353c
lea r8, [rsp + 0x140]
mov rdx, r13
lea rcx, [rsp + 0x70]
call fcn.140033ec0
mov eax, 0x20ae3722
xor eax, 0x72cfc452
sub eax, 0x4488943c
add eax, 0x71b661ad
sub eax, 0x3ab6b16f
add eax, 0x472060c
add eax, 0x26eb10f5
sub eax, 0x5961ffc0
sub eax, 0x16d426b2
xor ecx, ecx
cpuid
mov dword [rsp + 0x170], eax
mov dword [rsp + 0x174], ebx
mov dword [rsp + 0x178], ecx
mov dword [rsp + 0x17c], edx
xchg r13, r11
mov r11, qword [rsp + 0x8a0]
xchg r11, r13
bt ecx, 0x19
jae 0x140050581
lea rcx, [rsp + 0x440]
call fcn.1400278a0
lea r8, [rsp + 0x140]
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x440]
call fcn.140027bd0
xchg r13, rdx
mov r13, qword [rsp + 0x70]
xchg r13, rdx
nop
add rdx, 0x1aec6efb
sub rdx, 0x1aec6eeb
xchg r10, rdx
mov r9, r10
xchg r10, rdx
mov r8d, esi
lea rcx, [rsp + 0x440]
call fcn.140027aa0
jmp 0x140050602
xor edx, edx
mov r8d, 0x2d163e76
xor r8d, 0x6a1fba58
xor r8d, 0xaf4d8d6
sub r8d, 0x1a23fcea
xor r8d, 0x5407e189
sub r8d, 0x2b71196c
add r8d, 0x3ff637c7
sub r8d, 0x7c639ee2
lea rcx, [rsp + 0x240]
call sub.VCRUNTIME140.dll_memset
lea r8, [rsp + 0x140]
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x240]
call fcn.140026250
xchg rdx, r8
mov r8, qword [rsp + 0x70]
xchg rdx, r8
add rdx, 0x10
mov r8d, esi
lea rcx, [rsp + 0x240]
call fcn.140026130
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xchg rdi, rcx
mov qword [rsp + 0x48], rcx
xchg rdi, rcx
mov qword [rsp + 0x50], 0x5bd9655d
sub qword [rsp + 0x50], 0x100eefed
sub qword [rsp + 0x50], 0x43a98eee
add qword [rsp + 0x50], 0x67f70d91
sub qword [rsp + 0x50], 0x266ac849
sub qword [rsp + 0x50], 0x9cae92a
sub qword [rsp + 0x50], 0x3fe24299
mov word [rsp + 0x38], di
lea rcx, [r13 + 0x108]
call fcn.14007b4d0
test rax, rax
jne 0x140050e6f
lea rdx, [r13 + 0xc8]
lea r8d, [rax + 0x21]
lea rcx, [rsp + 0x1f8]
call fcn.140073dd0
nop
xchg r14, rax
mov rdx, r14
xchg r14, rax
lea rcx, [rsp + 0x150]
call fcn.1401fc680
nop
xchg r8, rdx
mov r8, qword [rsp + 0x210]
xchg rdx, r8
cmp rdx, 0x10
jb 0x14005070c
inc rdx
mov rcx, qword [rsp + 0x1f8]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x140050707
nop
add rdx, 0x27f94d4e
sub rdx, 0x27f94d27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffd56b7a68
add rax, 0xffffffffd56b7a60
cmp rax, 0x1f
jbe 0x140050707
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movdqa xmm0, xmmword [0x140002c80]
movdqu xmmword [rsp + 0x208], xmm0
mov byte [rsp + 0x1f8], 0x69
xor byte [rsp + 0x1f8], 0x73
xor byte [rsp + 0x1f8], 0x58
xor byte [rsp + 0x1f8], 0x7c
add byte [rsp + 0x1f8], 8
sub byte [rsp + 0x1f8], 0x46
mov dword [rsp + 0x98], 0x1a8787fb
add dword [rsp + 0x98], 0x4896a19
xor dword [rsp + 0x98], 0x4c0ab57f
sub dword [rsp + 0x98], 0x3df37a92
add dword [rsp + 0x98], 0x40541333
xor dword [rsp + 0x98], 0x1ccbb06f
xor dword [rsp + 0x98], 0x6d21f70e
xor dword [rsp + 0x98], 0x5e96ab1b
add dword [rsp + 0x98], 0x7cf0ea80
mov dword [rsp + 0x9e], 0x111522c6
xor dword [rsp + 0x9e], 0x5aca044f
sub dword [rsp + 0x9e], 0x8a8736d
sub dword [rsp + 0x9e], 0x33c1f45
xor dword [rsp + 0x9e], 0x7e61eea4
sub dword [rsp + 0x9e], 0x304ab085
add dword [rsp + 0x9e], 0x3d9997eb
add dword [rsp + 0x9e], 0xb0849a70
mov dword [rsp + 0xa2], 0x2e0f11eb
xor dword [rsp + 0xa2], 0x1d2f0171
sub dword [rsp + 0xa2], 0x610fb97
xor dword [rsp + 0xa2], 0x706dc1c9
xor dword [rsp + 0xa2], 0x7d59665d
xor dword [rsp + 0xa2], 0x31c0cd4e
add dword [rsp + 0xa2], 0x1f59bb3d
add dword [rsp + 0xa2], 0xcdf2c45c
xor eax, eax
mov word [rsp + 0xa6], ax
xchg rdx, rdi
mov rdi, rdx
xchg rdi, rdx
nop word [rax + rax]
movzx eax, word [rsp + rdx*2 + 0x9e]
movzx ecx, byte [rsp + rdx + 0x98]
add cx, ax
mov word [rsp + rdx*2 + 0x9e], cx
mov byte [rsp + rdx + 0x98], 0x39
sub byte [rsp + rdx + 0x98], 4
add byte [rsp + rdx + 0x98], 0x1b
xor byte [rsp + rdx + 0x98], 0x4e
xor byte [rsp + rdx + 0x98], 0x17
sub byte [rsp + rdx + 0x98], 3
sub byte [rsp + rdx + 0x98], 6
inc rdx
cmp rdx, 4
jb 0x140050879
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea rax, [rsp + 0x9e]
xchg r10, r14
mov r8, r10
xchg r14, r10
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140050903
lea rdx, [rsp + 0x9e]
lea rcx, [rsp + 0x180]
call fcn.140030c50
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140050983
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005097e
nop
sub rdx, 0x2e0a2ad9
add rdx, 0x2e0a2b00
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14005097e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rsp + 0x190]
movups xmmword [rsp + 0x48], xmm1
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x190], xmm0
mov word [rsp + 0x180], di
xchg rdi, rbx
mov rax, rbx
xchg rbx, rdi
nop dword [rax + rax]
mov byte [rsp + rax + 0x9e], 0x4e
sub byte [rsp + rax + 0x9e], 0x45
add byte [rsp + rax + 0x9e], 0x5e
sub byte [rsp + rax + 0x9e], 0x61
add byte [rsp + rax + 0x9e], 0x1e
sub byte [rsp + rax + 0x9e], 0x24
inc rax
cmp rax, 8
jb 0x1400509c4
lea rdx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rdx, qword [rsp + 0x150]
mov r12, qword [rsp + 0x160]
add r12, rdx
lea rsi, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rsi, qword [rsp + 0x150]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xd8], rdi
cmp rsi, r12
jne 0x140050ab8
xchg rsi, rdi
mov rdi, rsi
xchg rsi, rdi
mov r15d, 0x120b80ec
xor r15d, 0x24a36465
add r15d, 0x229712a0
sub r15d, 0x25285653
add r15d, 0x21a98e4
add r15d, 0x4466d59e
xor r15d, 0x4b23dd47
xor r15d, 0x69eb4ae8
xor r15d, 0x585198f0
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xc8], di
jmp 0x140050c3f
mov rax, r12
sub rax, rsi
mov r15, rdi
mov ebx, 0x686fe0bc
xor ebx, 0x46825eec
add ebx, 0xec17bbc
sub ebx, 0x2949f389
xor ebx, 0x51b14d9f
sub ebx, 0x385731d1
xor ebx, 0x43559cdd
add ebx, 0x17ca524e
xor ebx, 0x65f397e3
mov qword [rsp + 0xe0], rbx
movabs rcx, 0x7fffffff0b1db506
xor rcx, 0x4bd687a7
sub rcx, 0xcd471cd
sub rcx, 0x290a94be
xor rcx, 0x7f53d853
sub rcx, 0x571fcc58
add rcx, 0x7fffffff
add rcx, 0x615fd812
cmp rax, rcx
ja 0x14005251e
cmp rax, 8
jb 0x140050bc1
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x140050b68
mov rbx, rcx
jmp 0x140050b9c
mov eax, 0xdf43e58
add eax, 0xfdca77
xor eax, 0x4e688f33
add eax, 0x40fccb2
add eax, 0xf0e6aac
xor eax, 0x6d3640f5
xor eax, 0x19a1ddc0
sub eax, 0x3390179
sub eax, 0x23f620ec
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xc8]
call fcn.14002f920
xchg r8, rax
mov qword [rsp + 0xc8], r8
xchg r8, rax
mov qword [rsp + 0xe0], rbx
lea rcx, [rsp + 0xc8]
cmp rbx, 8
cmovae rcx, qword [rsp + 0xc8]
movsx eax, byte [rsi]
mov word [rcx + r15*2], ax
xchg r15, rcx
mov rcx, qword [rsp + 0xd8]
xchg r15, rcx
inc r15
mov qword [rsp + 0xd8], r15
inc rsi
cmp rsi, r12
je 0x140050c10
mov rbx, qword [rsp + 0xe0]
jmp 0x140050bc1
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rax, qword [rsp + 0xc8]
mov word [rax + r15*2], di
mov r15, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xd8]
lea r9, [rsp + 0xc8]
mov r12, qword [rsp + 0xc8]
cmp r15, 8
cmovae r9, r12
xchg r13, r9
mov r9, qword [rsp + 0x48]
xchg r9, r13
mov rcx, qword [rsp + 0x50]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
sub rax, r13
cmp rsi, rax
ja 0x140050cb5
lea rax, [rsi + r13]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r13*2]
lea r8, [rsi + rsi]
xchg rsi, rdx
mov rsi, r9
xchg rsi, rdx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r13]
mov word [rbx + rax*2], di
jmp 0x140050ce9
xchg rsi, r15
mov qword [rsp + 0x20], r15
xchg rsi, r15
movzx r8d, byte [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140034ef0
mov r15, qword [rsp + 0xe0]
xchg rbx, r12
mov rbx, qword [rsp + 0xc8]
xchg r12, rbx
cmp r15, 8
jb 0x140050d43
lea rdx, [r15*2 + 2]
mov rax, r12
cmp rdx, 0x1000
jb 0x140050d3b
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov r12, qword [r12 - 8]
sub rax, r12
nop
sub rax, 0xffffffff86b043e2
add rax, 0xffffffff86b043da
cmp rax, 0x1f
jbe 0x140050d3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1401fcba8
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], 0x7788546b
sub qword [rsp + 0xe0], 0x53805051
xor qword [rsp + 0xe0], 0x5f684545
sub qword [rsp + 0xe0], 0x4b3f0fb
sub qword [rsp + 0xe0], 0x5c20e321
xor qword [rsp + 0xe0], 0x57236a6
add qword [rsp + 0xe0], 0x2d264551
add qword [rsp + 0xe0], 0xe87ab3
xor qword [rsp + 0xe0], 0x4e081bee
mov word [rsp + 0xc8], di
mov rdx, qword [rsp + 0x168]
cmp rdx, 0x10
jb 0x140050e1b
inc rdx
mov rcx, qword [rsp + 0x150]
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x140050e16
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x140050e16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movdqa xmm0, xmmword [0x140002c80]
movdqu xmmword [rsp + 0x160], xmm0
mov byte [rsp + 0x150], 0x27
xor byte [rsp + 0x150], 0x50
sub byte [rsp + 0x150], 0xf
sub byte [rsp + 0x150], 0x5c
xor byte [rsp + 0x150], 0x5e
sub byte [rsp + 0x150], 0x52
xchg r13, r11
mov r11, qword [rsp + 0x8a0]
xchg r13, r11
jmp 0x1400511a0
mov dword [rsp + 0x88], 0x6a13fdac
add dword [rsp + 0x88], 0xb641c64
sub dword [rsp + 0x88], 0x2d58e3cf
xor dword [rsp + 0x88], 0x30d63979
sub dword [rsp + 0x88], 0x3cf6b1ab
add dword [rsp + 0x88], 0x291c77f2
xor dword [rsp + 0x88], 0xca7abb4
add dword [rsp + 0x88], 0x8ead782b
mov dword [rsp + 0x8e], 0x39fce45e
sub dword [rsp + 0x8e], 0x3bcbe5a
add dword [rsp + 0x8e], 0x1b9c6a88
sub dword [rsp + 0x8e], 0x29999a04
add dword [rsp + 0x8e], 0x235ce3ca
add dword [rsp + 0x8e], 0xb3e224f7
mov dword [rsp + 0x92], 0x5da08fab
xor dword [rsp + 0x92], 0x7aad79b9
xor dword [rsp + 0x92], 0x4ae1e
add dword [rsp + 0x92], 0x45ccea50
sub dword [rsp + 0x92], 0x2fdc641f
xor dword [rsp + 0x92], 0x421490cc
add dword [rsp + 0x92], 0x805ab07d
xor eax, eax
mov word [rsp + 0x96], ax
xchg r8, rdi
mov rdx, r8
xchg rdi, r8
movzx eax, word [rsp + rdx*2 + 0x8e]
movzx ecx, byte [rsp + rdx + 0x88]
add cx, ax
mov word [rsp + rdx*2 + 0x8e], cx
mov byte [rsp + rdx + 0x88], 0x60
xor byte [rsp + rdx + 0x88], 0x51
xor byte [rsp + rdx + 0x88], 0xb
sub byte [rsp + rdx + 0x88], 0xe
xor byte [rsp + rdx + 0x88], 0x7c
sub byte [rsp + rdx + 0x88], 0x2b
xor byte [rsp + rdx + 0x88], 0x25
inc rdx
cmp rdx, 4
jb 0x140050f69
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
lea rax, [rsp + 0x8e]
mov r8, r14
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140050fed
lea rdx, [rsp + 0x8e]
lea rcx, [rsp + 0x1a0]
call fcn.140030c50
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140051078
lea rdx, [rdx*2 + 2]
xchg r11, rcx
mov r11, qword [rsp + 0x38]
xchg r11, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x140051073
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x140051073
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movups xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rsp + 0x1b0]
movups xmmword [rsp + 0x48], xmm1
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1a0], di
xchg r11, rax
mov r11, rdi
xchg r11, rax
nop dword [rax + rax]
mov byte [rsp + rax + 0x8e], 0x58
xor byte [rsp + rax + 0x8e], 0x24
sub byte [rsp + rax + 0x8e], 0x61
add byte [rsp + rax + 0x8e], 0x4a
sub byte [rsp + rax + 0x8e], 0x52
add byte [rsp + rax + 0x8e], 8
add byte [rsp + rax + 0x8e], 8
sub byte [rsp + rax + 0x8e], 0x23
inc rax
cmp rax, 8
jb 0x1400510b7
lea rcx, [r13 + 0x108]
call fcn.14007b3f0
mov r9, rax
xchg r14, rdx
mov rsi, rdx
xchg r14, rdx
inc rsi
cmp word [rax + rsi*2], 0
jne 0x14005111c
xchg r15, rdx
mov rdx, qword [rsp + 0x48]
xchg r15, rdx
mov rcx, qword [rsp + 0x50]
xchg rsi, rax
mov rsi, rcx
xchg rsi, rax
sub rax, r15
cmp rsi, rax
ja 0x140051182
lea rax, [r15 + rsi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x1400511a0
mov qword [rsp + 0x20], rsi
movzx r8d, byte [rsp + 0x30]
xchg rsi, r14
mov rdx, r14
xchg rsi, r14
lea rcx, [rsp + 0x38]
call fcn.140034ef0
mov dword [rsp + 0xa8], 0x400a3033
xor dword [rsp + 0xa8], 0x39bedc49
add dword [rsp + 0xa8], 0x294391f
sub dword [rsp + 0xa8], 0x10397809
sub dword [rsp + 0xa8], 0x340ad767
add dword [rsp + 0xa8], 0xbef220cd
mov dword [rsp + 0xae], 0x328865e6
xor dword [rsp + 0xae], 0x5be9b178
xor dword [rsp + 0xae], 0x475da20e
add dword [rsp + 0xae], 0x4817ffc6
xor dword [rsp + 0xae], 0xd221991
xor dword [rsp + 0xae], 0x79072c74
xor dword [rsp + 0xae], 0x1b376ca6
xor dword [rsp + 0xae], 0x5941064b
xor dword [rsp + 0xae], 0xbf7ad66e
mov dword [rsp + 0xb2], 0x70993dc8
sub dword [rsp + 0xb2], 0x2d5d946f
add dword [rsp + 0xb2], 0x18e03eba
xor dword [rsp + 0xb2], 0x33a3e99c
xor dword [rsp + 0xb2], 0x166295de
add dword [rsp + 0xb2], 0x85946b22
mov byte [rsp + 0xac], 0x7b
xor byte [rsp + 0xac], 0x5e
sub byte [rsp + 0xac], 0xb
sub byte [rsp + 0xac], 0x10
add byte [rsp + 0xac], 0x4c
xor byte [rsp + 0xac], 0x70
xor byte [rsp + 0xac], 0xd0
mov dword [rsp + 0xb6], 0x5f7b756d
sub dword [rsp + 0xb6], 0x48f51c5c
add dword [rsp + 0xb6], 0xba66434
xor dword [rsp + 0xb6], 0x45fd3c2b
sub dword [rsp + 0xb6], 0x18218394
add dword [rsp + 0xb6], 0x17f71c30
xor dword [rsp + 0xb6], 0x179ab228
xor dword [rsp + 0xb6], 0x6f2e9122
sub dword [rsp + 0xb6], 0x1f1239b9
xchg rdi, rsi
mov rdx, rsi
xchg rdi, rsi
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rsp + rdx*2 + 0xae]
movzx ecx, byte [rsp + rdx + 0xa8]
add cx, ax
mov word [rsp + rdx*2 + 0xae], cx
mov byte [rsp + rdx + 0xa8], 0x2b
add byte [rsp + rdx + 0xa8], 0
add byte [rsp + rdx + 0xa8], 0x51
sub byte [rsp + rdx + 0xa8], 0x4a
xor byte [rsp + rdx + 0xa8], 0xc
sub byte [rsp + rdx + 0xa8], 0x26
sub byte [rsp + rdx + 0xa8], 0x18
inc rdx
cmp rdx, 5
jb 0x140051338
lea rax, [rsp + 0xae]
xchg rsi, r9
mov r9, r14
xchg r9, rsi
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400513b2
xchg r15, r12
mov r12, qword [rsp + 0x48]
xchg r15, r12
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x14005141d
lea rax, [rsi + r15]
xchg r11, rax
mov qword [rsp + 0x48], r11
xchg r11, rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
lea rdx, [rsp + 0xae]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x140051444
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xae]
movzx r8d, byte [rsp + 0x30]
xchg rsi, r13
mov rdx, r13
xchg r13, rsi
lea rcx, [rsp + 0x38]
call fcn.140034ef0
nop
xchg rbx, rdi
mov rax, rbx
xchg rbx, rdi
nop word [rax + rax]
mov byte [rsp + rax + 0xae], 0x29
add byte [rsp + rax + 0xae], 0x54
sub byte [rsp + rax + 0xae], 0x39
add byte [rsp + rax + 0xae], 0x16
sub byte [rsp + rax + 0xae], 0x18
xor byte [rsp + rax + 0xae], 0x2a
sub byte [rsp + rax + 0xae], 0x68
inc rax
cmp rax, 0xa
jb 0x140051453
lea rcx, [r13 + 0x138]
call fcn.14007b3f0
xchg r9, rcx
mov rcx, rax
xchg r9, rcx
xchg r9, r14
mov rsi, r9
xchg r9, r14
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400514b6
mov r15, qword [rsp + 0x48]
xchg r13, rcx
mov r13, qword [rsp + 0x50]
xchg r13, rcx
xchg r13, rcx
mov rax, r13
xchg r13, rcx
sub rax, r15
cmp rsi, rax
ja 0x140051524
lea rax, [r15 + rsi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
xchg r9, rdx
mov r9, rdx
xchg r9, rdx
call sub.VCRUNTIME140.dll_memmove
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x14005153c
mov qword [rsp + 0x20], rsi
movzx r8d, byte [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140034ef0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xchg r9, rdi
mov qword [rsp + 0x68], r9
xchg r9, rdi
mov r15, qword [r13 + 0x78]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
sub rbx, rsi
lea rcx, [r13 + 0xf0]
call fcn.14007b3f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1e8], xmm1
nop
inc r14
cmp word [rax + r14*2], 0
jne 0x140051586
mov r8, r14
xchg r9, rax
mov rdx, r9
xchg r9, rax
lea rcx, [rsp + 0x1d8]
call fcn.140030c50
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
lea rcx, [rsp + 0x1d8]
call fcn.140053ba0
xorps xmm0, xmm0
movups xmmword [rsp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x118], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x108], xmm0
xchg r14, rax
movups xmm1, xmmword [r14 + 0x10]
xchg r14, rax
movups xmmword [rsp + 0x118], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0x79bdd746
xor qword [rax + 0x18], 0x55bf9e36
add qword [rax + 0x18], 0xeb07453
add qword [rax + 0x18], 0x377367c8
sub qword [rax + 0x18], 0x45705f20
add qword [rax + 0x18], 0x35ba92a6
xor qword [rax + 0x18], 0x570b5c14
xor qword [rax + 0x18], 0x1eb5d0ee
xor qword [rax + 0x18], 0x2bced5ec
mov word [rax], di
lea rdx, [rsp + 0x108]
cmp qword [rsp + 0x120], 8
cmovae rdx, qword [rsp + 0x108]
lea rax, [rsp + 0x58]
xchg r14, rax
mov qword [rsp + 0x20], r14
xchg r14, rax
xchg rbx, r14
mov r9, r14
xchg r14, rbx
xchg r13, r8
mov r13, rsi
xchg r13, r8
xchg r8, r15
mov rcx, r8
xchg r8, r15
call fcn.140194470
test al, al
sete bl
xchg rdx, r11
mov r11, qword [rsp + 0x120]
xchg rdx, r11
cmp rdx, 8
jb 0x140051716
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x108]
xchg rcx, rsi
mov rax, rsi
xchg rcx, rsi
cmp rdx, 0x1000
jb 0x140051711
nop
sub rdx, 0x69a35dfd
add rdx, 0x69a35e24
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffa3c01847
sub rax, 0xffffffffa3c0184f
cmp rax, 0x1f
jbe 0x140051711
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x118], xmm0
mov word [rsp + 0x108], di
xchg r12, rdx
mov r12, qword [rsp + 0x1f0]
xchg rdx, r12
cmp rdx, 8
jb 0x140051798
lea rdx, [rdx*2 + 2]
xchg rcx, r13
mov r13, qword [rsp + 0x1d8]
xchg rcx, r13
xchg r12, rcx
mov rax, r12
xchg rcx, r12
cmp rdx, 0x1000
jb 0x140051793
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051793
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
test bl, bl
je 0x140051983
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140051807
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
cmp rdx, 0x1000
xchg rsi, rcx
mov rax, rsi
xchg rsi, rcx
jb 0x1400517ee
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
nop
sub rax, 0xffffffffc7c7d107
add rax, 0xffffffffc7c7d0ff
cmp rax, 0x1f
ja 0x1400523d3
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xchg r10, rdi
mov qword [rsp + 0x68], r10
xchg r10, rdi
xchg rdx, rdi
mov rdi, qword [rsp + 0x50]
xchg rdi, rdx
cmp rdx, 8
jb 0x140051866
lea rdx, [rdx*2 + 2]
xchg rcx, r12
mov r12, qword [rsp + 0x38]
xchg rcx, r12
cmp rdx, 0x1000
mov rax, rcx
jb 0x140051861
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffa8919b94
add rax, 0xffffffffa8919b8c
cmp rax, 0x1f
ja 0x14005236c
call fcn.1401fcba8
xchg rdi, r12
mov qword [rsp + 0x48], r12
xchg r12, rdi
mov qword [rsp + 0x50], 0x5c5b10af
xor qword [rsp + 0x50], 0x68a55938
add qword [rsp + 0x50], 0x1ec52109
sub qword [rsp + 0x50], 0x50130a88
add qword [rsp + 0x50], 0x281c19c0
xor qword [rsp + 0x50], 0x85bb7a6
xor qword [rsp + 0x50], 0x9be9255
xor qword [rsp + 0x50], 0x4301771b
sub qword [rsp + 0x50], 0x69282b29
mov word [rsp + 0x38], di
test rsi, rsi
je 0x140051918
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
xchg rdi, rsi
mov rax, rdi
xchg rdi, rsi
cmp rdx, 0x1000
jb 0x14005190a
sub rdx, 0xffffffffffffffd9
mov rsi, qword [rsi - 8]
sub rax, rsi
sub rax, 8
cmp rax, 0x1f
ja 0x140052517
xchg r15, rcx
mov r15, rsi
xchg r15, rcx
call fcn.1401fcba8
xor al, al
add rsp, 0x860
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
add rsp, 8
mov r13, qword [rsp - 8]
nop
add rsp, 8
xchg qword [rsp - 8], r12
push rcx
push rcx
xchg qword [rsp + 0x10], rdi
pop rcx
pop rcx
add rsp, 8
push rdx
push rdx
push rcx
push rax
push rdx
xchg qword [rsp + 0x28], rsi
pop rdx
pop rax
pop rcx
pop rdx
pop rdx
add rsp, 8
push rcx
push rcx
push rcx
push rdx
push rcx
push rdx
push rcx
push rdx
xchg qword [rsp + 0x40], rbx
pop rdx
pop rcx
pop rdx
pop rcx
pop rdx
pop rcx
pop rcx
pop rcx
add rsp, 8
ret
cmp byte [rsp + 0x8b8], 0
je 0x140051b25
xchg rcx, rbx
mov rbx, qword [rsp + 0x58]
xchg rcx, rbx
test rcx, rcx
je 0x1400519f4
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400519e1
nop
sub rdx, 0x53698b80
add rdx, 0x53698ba7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400523d3
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg rdx, r9
mov r9, qword [rsp + 0x50]
xchg r9, rdx
cmp rdx, 8
jb 0x140051a53
lea rdx, [rdx*2 + 2]
xchg r10, rcx
mov r10, qword [rsp + 0x38]
xchg rcx, r10
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051a4e
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffd04d0d90
add rax, 0xffffffffd04d0d88
cmp rax, 0x1f
ja 0x14005236c
call fcn.1401fcba8
mov word [rsp + 0x38], di
mov qword [rsp + 0x50], 0x472f2e4b
add qword [rsp + 0x50], 0x1816b222
add qword [rsp + 0x50], 0x13660a4a
sub qword [rsp + 0x50], 0x49a1f3fd
xor qword [rsp + 0x50], 0x3728aded
add qword [rsp + 0x50], 0x26139cc6
add qword [rsp + 0x50], 0x396cdd2
add qword [rsp + 0x50], 0x12b1c82d
sub qword [rsp + 0x50], 0x5a7d8e15
xchg rdi, r11
mov qword [rsp + 0x48], r11
xchg r11, rdi
test rsi, rsi
je 0x140051b10
xchg rdx, r14
mov r14, qword [rsp + 0x80]
xchg rdx, r14
sub rdx, rsi
cmp rdx, 0x1000
mov rax, rsi
jb 0x140051b02
nop
sub rdx, 0x76d132c6
add rdx, 0x76d132ed
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052517
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.1401fcba8
mov al, 0x68
sub al, 0x66
xor al, 0x6c
sub al, 0x53
add al, 0xc
add al, 0x19
xor al, 0x76
sub al, 0x35
jmp 0x14005191a
mov r14, qword [rsp + 0x60]
xchg r8, rdi
mov rdi, qword [rsp + 0x58]
xchg rdi, r8
sub r14, r8
cmp r14, 0x20
jae 0x140051b82
mov ecx, 0x3f618d22
sub ecx, 0x390d4164
add ecx, 0x184eb8b6
add ecx, 0x1e52d200
add ecx, 0x34cbbc74
xor ecx, 0x3299c80a
sub ecx, 0x2ca342fc
add ecx, 0x9660c35
sub ecx, 0x201b240e
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1400517a0
nop
add r14, 0xfffffffff0228373
sub r14, 0xfffffffff0228383
xchg r11, r12
mov r11, qword [r8]
xchg r12, r11
cmp r12, r14
jbe 0x140051bdd
mov ecx, 0x256ae8ec
add ecx, 0x5310e202
sub ecx, 0x2c236a93
sub ecx, 0x4f7416f
sub ecx, 0x19d86e64
sub ecx, 0x26c3bc1c
xor ecx, 0x7ea629c9
xor ecx, 0x7862d8d5
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1400517a0
mov eax, 0x497d2333
sub eax, 0x366640b6
add eax, 0x3b235411
xor eax, 0x4ef8b1ae
add eax, 0x5a106c80
xor eax, 0x5d16f3ae
xor eax, 0x45ecc274
sub eax, 0x4228c279
xor ecx, ecx
cpuid
bt ecx, 0x19
jae 0x140051c71
lea rcx, [rsp + 0x650]
call fcn.1400278a0
xchg rbx, r8
mov rbx, qword [rsp + 0x58]
xchg r8, rbx
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x650]
call fcn.140027bd0
mov rdx, qword [rsp + 0x58]
nop
sub rdx, 0x52cbd184
add rdx, 0x52cbd194
xchg r10, rdx
mov r9, r10
xchg rdx, r10
mov r8d, r14d
lea rcx, [rsp + 0x650]
call fcn.140027970
jmp 0x140051caa
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x340]
call fcn.140026250
xchg rdx, rbx
mov rbx, qword [rsp + 0x58]
xchg rbx, rdx
neg rdx
add rdx, 0xfffffffffffffff0
neg rdx
mov r8d, r14d
lea rcx, [rsp + 0x340]
call fcn.140026020
mov r15, qword [rsp + 0x58]
lea rdx, [r15 + 0x10]
cmp r15, rdx
je 0x140051cef
xchg rbp, rbx
mov rbp, qword [rsp + 0x60]
xchg rbx, rbp
sub rbx, rdx
xchg rbx, r14
mov r8, r14
xchg rbx, r14
xchg r9, r15
mov rcx, r9
xchg r15, r9
call sub.VCRUNTIME140.dll_memmove
lea rcx, [rbx + r15]
mov qword [rsp + 0x60], rcx
jmp 0x140051cf4
mov rcx, qword [rsp + 0x60]
cmp r12, r14
je 0x140051d1c
sub r14, r12
xchg r8, rax
mov r8, rcx
xchg r8, rax
sub rax, r14
cmp rax, rcx
cmovne rcx, rax
xchg rcx, r9
mov qword [rsp + 0x60], r9
xchg rcx, r9
mov dword [rsp + 0x20], edi
mov r9b, SHCreateMemStream
add r9b, 0x31
xor r9b, 1
xor r9b, 0x30
xor r9b, 0x49
sub r9b, 0x15
sub r9b, 0x2e
movzx r8d, r9b
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x228]
call fcn.14003a550
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r14, rdi
mov rdi, qword [rsp + 0x8b0]
xchg rdi, r14
xchg rsi, r14
mov rcx, rsi
xchg r14, rsi
call fcn.14004dab0
mov rcx, r14
call fcn.1400704f0
test rax, rax
jne 0x140051f4a
mov ecx, 0x6ba02a58
xor ecx, 0x6af3bca1
xor ecx, 0x234ec254
add ecx, 0x8e19a88
add ecx, 0x4663a6db
sub ecx, 0x7162905a
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140051e1a
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
xchg r13, rax
mov r13, rcx
xchg r13, rax
cmp rdx, 0x1000
jb 0x140051e01
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xfffffffff6a77873
add rax, 0xfffffffff6a7786b
cmp rax, 0x1f
ja 0x140052146
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xchg rdi, r11
mov qword [rsp + 0x68], r11
xchg rdi, r11
xchg rdx, r9
mov r9, qword [rsp + 0x50]
xchg rdx, r9
cmp rdx, 8
jb 0x140051e73
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051e6e
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff8f1e8073
add rax, 0xffffffff8f1e806b
cmp rax, 0x1f
ja 0x1400521c2
call fcn.1401fcba8
xchg rdi, r15
mov qword [rsp + 0x48], r15
xchg r15, rdi
mov qword [rsp + 0x50], 0x665f732b
sub qword [rsp + 0x50], 0x35417295
sub qword [rsp + 0x50], 0x326b1ab
add qword [rsp + 0x50], 0x3dd3ac4a
xor qword [rsp + 0x50], 0x6b3c0b4c
add qword [rsp + 0x50], 0x1cc64cb9
add qword [rsp + 0x50], 0x20878ed4
xor qword [rsp + 0x50], 0x3f7669b7
xor qword [rsp + 0x50], 0x132a5b6
mov word [rsp + 0x38], di
test rsi, rsi
je 0x140051f43
xchg rdx, rcx
mov rcx, qword [rsp + 0x80]
xchg rcx, rdx
sub rdx, rsi
mov rax, rsi
cmp rdx, 0x1000
jb 0x140051f28
nop
sub rdx, 0x17fadbf8
add rdx, 0x17fadc1f
mov rsi, qword [rsi - 8]
sub rax, rsi
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14005227d
xchg rsi, r10
mov rcx, r10
xchg rsi, r10
call fcn.1401fcba8
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x80], rdi
xor al, al
jmp 0x14005191a
xor edx, edx
xchg r14, rbp
mov rcx, rbp
xchg r14, rbp
call fcn.14004e1c0
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov byte [rsp + 0xf8], 0x5a
xor byte [rsp + 0xf8], 0x3c
sub byte [rsp + 0xf8], 0x47
add byte [rsp + 0xf8], 0x43
xor byte [rsp + 0xf8], 0x69
add byte [rsp + 0xf8], 0xd
add byte [rsp + 0xf8], 6
sub byte [rsp + 0xf8], 0x1c
xor byte [rsp + 0xf8], 2
xor eax, eax
mov qword [rsp + 0x100], rax
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.140054410
mov byte [rsp + 0xf8], 0x2a
sub byte [rsp + 0xf8], 0xa
add byte [rsp + 0xf8], 0x59
xor byte [rsp + 0xf8], 0x38
sub byte [rsp + 0xf8], 0x31
add byte [rsp + 0xf8], 0x44
add byte [rsp + 0xf8], 0xe
xor byte [rsp + 0xf8], 0x5b
xor byte [rsp + 0xf8], 0x3d
mov byte [rsp + 0xc0], 0x59
sub byte [rsp + 0xc0], 0x1a
add byte [rsp + 0xc0], 4
xor byte [rsp + 0xc0], 0x3a
sub byte [rsp + 0xc0], 0x63
add byte [rsp + 0xc0], 0x59
sub byte [rsp + 0xc0], 0x65
sub byte [rsp + 0xc0], 9
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0xf8]
mov rcx, rbx
call fcn.14004db20
movzx ebx, al
mov dl, 0x3e
sub dl, 8
add dl, 0x39
sub dl, 0x3c
xor dl, 0x76
xor dl, 0x16
sub dl, 0x28
sub dl, 0x27
lea rcx, [rsp + 0x100]
call fcn.140054410
nop
test bl, bl
jne 0x1400522a6
mov edx, 0x4eb665b0
sub edx, 0x7b637b8
sub edx, 0x2bc997ac
sub edx, 0x5f4b3b3
add edx, 0x38da24f8
add edx, 0x10e33e8c
xor edx, 0x121947e1
add edx, 0x1177a1ba
xor edx, 0x5e5da3b7
xchg r14, rcx
mov r14, rcx
xchg rcx, r14
call fcn.14004e1c0
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.140030770
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140052160
xchg r15, rdx
mov r15, qword [rsp + 0x68]
xchg r15, rdx
sub rdx, rcx
xchg rcx, r15
mov rax, r15
xchg r15, rcx
cmp rdx, 0x1000
jb 0x14005214d
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xfffffffff6d20301
add rax, 0xfffffffff6d202f9
cmp rax, 0x1f
jbe 0x14005214d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg rdx, r8
mov r8, qword [rsp + 0x50]
xchg r8, rdx
cmp rdx, 8
jb 0x1400521ce
lea rdx, [rdx*2 + 2]
xchg rcx, rdi
mov rdi, qword [rsp + 0x38]
xchg rcx, rdi
xchg r8, rcx
mov rax, r8
xchg r8, rcx
cmp rdx, 0x1000
jb 0x1400521c9
nop
add rdx, 0x202a1a2f
sub rdx, 0x202a1a08
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400521c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 0x416dbcd0
sub qword [rsp + 0x50], 0x3a4bf54d
add qword [rsp + 0x50], 0x556ad655
xor qword [rsp + 0x50], 0x156958d8
add qword [rsp + 0x50], 0x18b8fa7b
sub qword [rsp + 0x50], 0x470def4e
sub qword [rsp + 0x50], 0x77cc410
add qword [rsp + 0x50], 0x1e8c2d09
xor qword [rsp + 0x50], 0x32a03921
mov word [rsp + 0x38], di
test rsi, rsi
je 0x14005229f
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
xchg rsi, r13
mov rax, r13
xchg rsi, r13
cmp rdx, 0x1000
jb 0x140052284
nop
add rdx, 0x251cf745
sub rdx, 0x251cf71e
mov rsi, qword [rsi - 8]
sub rax, rsi
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x140052284
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1401fcba8
xchg rdi, rbp
mov qword [rsp + 0x70], rbp
xchg rdi, rbp
mov qword [rsp + 0x80], rdi
xor al, al
jmp 0x14005191a
xchg rbp, rcx
mov rbp, qword [rsp + 0x58]
xchg rcx, rbp
test rcx, rcx
je 0x140052318
xchg rdx, rcx
mov rcx, qword [rsp + 0x68]
xchg rcx, rdx
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052305
nop
sub rdx, 0x4e58135c
add rdx, 0x4e581383
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffc7501f76
add rax, 0xffffffffc7501f6e
cmp rax, 0x1f
ja 0x1400523d3
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140051a53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051a4e
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffdca88aa5
add rax, 0xffffffffdca88a9d
cmp rax, 0x1f
jbe 0x140051a4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xchg rcx, rbx
mov rbx, qword [rsp + 0x58]
xchg rcx, rbx
test rcx, rcx
je 0x1400523f4
xchg rdx, r11
mov r11, qword [rsp + 0x68]
xchg rdx, r11
sub rdx, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x1400523da
nop
add rdx, 0x71d97e68
sub rdx, 0x71d97e41
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x1400523da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcba8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xor edi, edi
mov qword [rsp + 0x68], rdi
jmp 0x1400523f6
xor edi, edi
xchg r11, r8
mov r11, qword [rsp + 0x50]
xchg r11, r8
cmp r8, 8
jb 0x140052423
inc r8
xchg rdx, rbx
mov rbx, qword [rsp + 0x38]
xchg rbx, rdx
lea rcx, [rsp + 0x38]
call fcn.1400543b0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 0x6d0307dd
sub qword [rsp + 0x50], 0xfcec8e
xor qword [rsp + 0x50], 0x5b081407
add qword [rsp + 0x50], 0x1a7068bd
sub qword [rsp + 0x50], 0x11e9a7db
xor qword [rsp + 0x50], 0x2d49a78f
add qword [rsp + 0x50], 0x2eb15ef
xor qword [rsp + 0x50], 0x71ca5549
sub qword [rsp + 0x50], 0x6402d8d6
mov word [rsp + 0x38], di
xchg r14, rcx
mov r14, qword [rsp + 0x70]
xchg rcx, r14
test rcx, rcx
je 0x140051918
xchg rdx, rbx
mov rbx, qword [rsp + 0x80]
xchg rbx, rdx
sub rdx, rcx
xchg r9, rax
mov r9, rcx
xchg r9, rax
cmp rdx, 0x1000
jb 0x140051913
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052517
jmp 0x140051913
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14002f8e0
int3