Function at 0x14000a390
Capabilities:
Check for time delay via queryperformancecounter
Encrypt data using aes mixcolumns step
Encrypt data using salsa20 or chacha

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb78
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xae0], xmm12
movaps xmmword [rbp + 0xad0], xmm11
movaps xmmword [rbp + 0xac0], xmm10
movaps xmmword [rbp + 0xab0], xmm9
movaps xmmword [rbp + 0xaa0], xmm8
movaps xmmword [rbp + 0xa90], xmm7
movaps xmmword [rbp + 0xa80], xmm6
and rsp, 0xffffffffffffffe0
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14000d43d
mov rsi, qword [rsp + 0x340]
mov rcx, qword [0x1400e89d0]
test rcx, rcx
jne 0x14000a455
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d43d
mov rcx, qword [rsp + 0x340]
mov qword [0x1400e89d0], rcx
test rcx, rcx
je 0x14000d443
mov rax, rsi
or rax, rcx
shr rax, 0x20
je 0x14000a46b
mov rax, rsi
xor edx, edx
div rcx
jmp 0x14000a471
mov eax, esi
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x14000a495
xor edx, edx
div rcx
mov rsi, rax
jmp 0x14000a49b
xor edx, edx
div ecx
mov esi, eax
add rsi, r8
mov rax, rsi
shr rax, 9
movabs r15, 0x44b82fa09b5a53
mul r15
mov rdi, rdx
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
test rax, rax
je 0x14000a536
mov rbx, rax
mov qword [rsp + 0x340], 0xffffffffeb236c80
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x340]
mov rcx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x14000a52d
mov rcx, rbx
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r14d, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r14d, 0xffffffff
jne 0x14000a541
jmp 0x14000a536
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x88b8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14000d43d
mov rbx, qword [rsp + 0x340]
mov rcx, qword [0x1400e89d0]
test rcx, rcx
jne 0x14000a5b1
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d43d
mov rcx, qword [rsp + 0x340]
mov qword [0x1400e89d0], rcx
test rcx, rcx
je 0x14000d443
mov rax, rbx
or rax, rcx
shr rax, 0x20
je 0x14000a5c7
mov rax, rbx
xor edx, edx
div rcx
jmp 0x14000a5cd
mov eax, ebx
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x14000a5f1
xor edx, edx
div rcx
mov r14, rax
jmp 0x14000a5f8
xor edx, edx
div ecx
mov r14d, eax
add r14, r8
mov rax, r14
shr rax, 9
mul r15
mov rbx, rdx
mov r8, qword [0x1400e89d0]
test r8, r8
jne 0x14000a64e
mov qword [rsp + 0x340], 0
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14000d43d
mov r8, qword [rsp + 0x340]
mov qword [0x1400e89d0], r8
test r8, r8
je 0x14000d443
shr rdi, 0xb
imul rax, rdi, 0x3b9aca00
sub rsi, rax
shr rbx, 0xb
imul rax, rbx, 0x3b9aca00
sub r14, rax
cmp r8, 0x3b9aca00
ja 0x14000a67f
mov eax, 0x3b9aca00
xor edx, edx
div r8d
jmp 0x14000a681
xor eax, eax
lea ecx, [rax - 0x3b9aca00]
xor edx, edx
cmp r8, 2
setb r8b
cmovae ecx, eax
xor r9d, r9d
cmp rbx, rdi
setne r9b
mov eax, 0xff
cmovbe eax, r9d
test al, al
jne 0x14000a6b7
cmp r14, rsi
setne al
ja 0x14000a755
cmp al, 1
jne 0x14000a755
cmp rbx, rdi
ja 0x14000d443
mov rax, rdi
sub rax, rbx
cmp r14, rsi
jbe 0x14000a6f4
test rax, rax
je 0x14000d443
dec rax
lea r9d, [rsi + 0x3b9aca00]
sub r9d, r14d
cmp r9d, 0x3b9aca00
jae 0x14000a703
jmp 0x14000a728
mov r9d, esi
sub r9d, r14d
cmp r9d, 0x3b9aca00
jb 0x14000a728
mov r10d, r9d
shr r10d, 9
imul r10, r10, 0x44b83
shr r10, 0x27
add rax, r10
jb 0x14000d443
imul r10d, r10d, 0x3b9aca00
sub r9d, r10d
mov dl, r8b
xor r8d, r8d
cmp rax, rdx
setne r8b
mov eax, 0xff
cmovb r8d, eax
xor edx, edx
cmp r9d, ecx
setne dl
cmovb edx, eax
test r8b, r8b
cmovne edx, r8d
cmp dl, 1
jne 0x14000a7b8
mov eax, 0x3b9aca00
sub rbx, rdi
jae 0x14000a76b
cmp eax, 0x3b9aca00
jne 0x14000a7c7
jmp 0x14000d445
cmp r14, rsi
jae 0x14000a77f
test rbx, rbx
je 0x14000a75f
dec rbx
add r14d, 0x3b9aca00
mov eax, r14d
sub eax, esi
cmp eax, 0x3b9aca00
jb 0x14000a7bc
mov ecx, eax
shr ecx, 9
imul rcx, rcx, 0x44b83
shr rcx, 0x27
add rbx, rcx
jb 0x14000d443
imul ecx, ecx, 0x3b9aca00
sub eax, ecx
cmp eax, 0x3b9aca00
jne 0x14000a7c7
jmp 0x14000d445
xor ebx, ebx
xor eax, eax
cmp eax, 0x3b9aca00
je 0x14000d445
cmp rbx, 0x19
jb 0x14000d445
lea rcx, [rsp + 0x340]
call fcn.14003b440
cmp byte [rsp + 0x340], 0x12
jne 0x14000d443
call fcn.140006f80
lea rcx, [rsp + 0x640]
call fcn.140026690
mov rdi, qword [rsp + 0x650]
test rdi, rdi
js 0x14000d443
mov r12, qword [rsp + 0x648]
je 0x14000a837
movzx eax, byte [0x1400e89f0]
xor ecx, ecx
mov rdx, rdi
call fcn.140033dc0
mov rbx, rax
test rax, rax
jne 0x14000a83c
jmp 0x14000d443
mov ebx, 1
movabs r15, 0x8000000000000001
mov rcx, rbx
mov rdx, r12
mov r8, rdi
call fcn.14003fb90
movzx eax, byte [rsp + 0x658]
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf0], rdi
mov byte [rsp + 0xf8], al
lea rax, [0x1400c8aa3]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0x10eadaff
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006560
movabs rcx, 0x9b1c9b8d946d8cd6
xor rcx, qword [rax]
movabs rdx, 0xc6e150d305cac8db
xor rdx, qword [rax + 8]
movzx eax, byte [rax + 0x10]
xor al, 0x6e
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
mov byte [rsp + 0x350], al
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x340]
mov r8d, 0x11
call fcn.140027510
mov r14, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
lea rcx, [rsp + 0x8a0]
mov rdx, r14
mov r8, rdi
xor r9d, r9d
call fcn.140028c90
cmp dword [rsp + 0x8a0], 2
jne 0x14000c9da
mov rbx, qword [rsp + 0x8a8]
movabs rax, 0xffffffff00000003
and rax, rbx
movabs rcx, 0x78000000002
cmp rax, rcx
jne 0x14000aa18
lea rcx, [rsp + 0x340]
mov rdx, r14
mov r8, rdi
mov r9d, 0x200000
call fcn.140028c90
cmp dword [rsp + 0x340], 2
jne 0x14000a9ed
mov rdi, qword [rsp + 0x348]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000aa18
mov r14, qword [rdi - 1]
mov rsi, qword [rdi + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000a9b2
mov rcx, r14
call rax
dec rdi
cmp qword [rsi + 8], 0
je 0x14000a9d9
cmp qword [rsi + 0x10], 0x11
jb 0x14000a9c7
mov r14, qword [r14 - 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000aa18
movq xmm0, qword [rsp + 0x38c]
pshufd xmm0, xmm0, 0x50
movdqa xmm1, xmmword [0x14004f080]
pand xmm0, xmm1
pcmpeqd xmm0, xmm1
movmskpd eax, xmm0
cmp eax, 3
jne 0x14000c9da
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x14000aa70
mov rdi, qword [rbx - 1]
mov rsi, qword [rbx + 7]
mov rax, qword [rsi]
test rax, rax
je 0x14000aa37
mov rcx, rdi
call rax
dec rbx
cmp qword [rsi + 8], 0
je 0x14000aa5e
cmp qword [rsi + 0x10], 0x11
jb 0x14000aa4c
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400d6af8]
mov rcx, rax
shr rcx, 8
mov byte [rsp + 0x340], al
mov rdx, rax
shr rdx, 0x38
mov byte [rsp + 0x347], dl
shr rax, 0x28
mov word [rsp + 0x345], ax
mov dword [rsp + 0x341], ecx
mov qword [rsp + 0x348], 0x20
lea rax, [0x1400d6b18]
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], 0x20
mov qword [rsp + 0x360], 1
mov qword [rsp + 0x368], 0
mov qword [rsp + 0x370], 1
mov qword [rsp + 0x378], 0
movapd xmm0, xmmword [0x14004f090]
movupd xmmword [rsp + 0x380], xmm0
mov word [rsp + 0x390], 0x213
movabs rax, 0x4c0000004c00
mov qword [rsp + 0x398], rax
mov dword [rsp + 0x3a0], 0x1300
lea rsi, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
mov rcx, rsi
call fcn.14000ddc0
mov r9, qword [rsp + 0x8a0]
lea rax, [r15 - 1]
cmp r9, rax
je 0x14000b239
movzx eax, byte [rsp + 0x8a8]
movzx ecx, byte [rsp + 0x8af]
shl ecx, 0x10
movzx edx, word [rsp + 0x8ad]
or edx, ecx
mov r8d, dword [rsp + 0x8a9]
shl rdx, 0x28
shl r8, 8
or r8, rdx
or r8, rax
cmp qword [rsp + 0x8b0], 0x20
jne 0x14000b225
mov qword [rsp + 0x108], r9
mov qword [rsp + 0x2d8], r12
movzx eax, byte [r8]
mov byte [rsp + 0x65], al
movzx ecx, byte [r8 + 1]
movzx edx, byte [r8 + 2]
movzx r9d, byte [r8 + 3]
mov byte [rsp + 0xa8], r9b
movzx r9d, byte [r8 + 4]
movzx r10d, byte [r8 + 5]
movzx r11d, byte [r8 + 6]
movzx ebx, byte [r8 + 7]
movzx esi, byte [r8 + 8]
movzx edi, byte [r8 + 9]
movzx r15d, byte [r8 + 0xa]
movzx r12d, byte [r8 + 0xb]
movzx r13d, byte [r8 + 0xc]
movzx r14d, byte [r8 + 0xd]
movzx eax, byte [r8 + 0xe]
mov byte [rsp + 0xd0], al
movzx eax, byte [r8 + 0xf]
mov byte [rsp + 0xd8], al
movzx eax, byte [r8 + 0x10]
mov byte [rsp + 0xa4], al
movzx eax, byte [r8 + 0x11]
mov byte [rsp + 0xa0], al
movzx eax, byte [r8 + 0x12]
mov byte [rsp + 0x9c], al
movzx eax, byte [r8 + 0x13]
mov byte [rsp + 0x98], al
movzx eax, byte [r8 + 0x14]
mov byte [rsp + 0x70], al
movzx eax, byte [r8 + 0x15]
mov byte [rsp + 0x6f], al
movzx eax, byte [r8 + 0x16]
mov byte [rsp + 0x6e], al
movzx eax, byte [r8 + 0x17]
mov byte [rsp + 0x6d], al
movzx eax, byte [r8 + 0x18]
mov byte [rsp + 0x6c], al
movzx eax, byte [r8 + 0x19]
mov byte [rsp + 0x6b], al
movzx eax, byte [r8 + 0x1a]
mov byte [rsp + 0x6a], al
movzx eax, byte [r8 + 0x1b]
mov byte [rsp + 0x69], al
movzx eax, byte [r8 + 0x1c]
mov byte [rsp + 0x68], al
movzx eax, byte [r8 + 0x1d]
mov byte [rsp + 0x67], al
movzx eax, byte [r8 + 0x1e]
mov byte [rsp + 0x66], al
mov qword [rsp + 0x100], r8
movzx r8d, byte [r8 + 0x1f]
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x90], al
mov byte [rsp + 0x8f], cl
mov byte [rsp + 0x8e], dl
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x8d], al
mov byte [rsp + 0x8c], r9b
mov byte [rsp + 0x8b], r10b
mov byte [rsp + 0x8a], r11b
mov byte [rsp + 0x89], bl
mov byte [rsp + 0x88], sil
mov byte [rsp + 0x87], dil
mov byte [rsp + 0x86], r15b
mov byte [rsp + 0x85], r12b
mov byte [rsp + 0x84], r13b
mov byte [rsp + 0x83], r14b
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x82], al
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x81], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x80], al
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x7f], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x7e], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x6b]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x6a]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x69]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x72], al
mov byte [rsp + 0x71], r8b
movzx eax, byte [0x1400e89f0]
mov edx, 0x87410
xor ecx, ecx
call fcn.140033dc0
test rax, rax
je 0x14000d443
mov r14, rax
lea rdx, [0x14004f6e8]
mov r8d, 0x87410
mov rcx, rax
call fcn.14003fb90
movzx ebx, byte [rsp + 0x90]
movzx esi, byte [rsp + 0x8f]
movzx edi, byte [rsp + 0x8e]
movzx r15d, byte [rsp + 0x8d]
movzx r12d, byte [rsp + 0x8c]
movzx r13d, byte [rsp + 0x8b]
movzx ecx, byte [rsp + 0x8a]
movzx edx, byte [rsp + 0x89]
movzx r8d, byte [rsp + 0x88]
movzx r9d, byte [rsp + 0x87]
movzx r10d, byte [rsp + 0x86]
movzx r11d, byte [rsp + 0x85]
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0xa8], al
movzx eax, byte [rsp + 0x83]
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0x82]
mov byte [rsp + 0xd8], al
movzx eax, byte [rsp + 0x81]
mov byte [rsp + 0xa4], al
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0x7f]
mov byte [rsp + 0x9c], al
movzx eax, byte [rsp + 0x7e]
mov byte [rsp + 0x98], al
movzx eax, byte [rsp + 0x7d]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x7c]
mov byte [rsp + 0x6f], al
movzx eax, byte [rsp + 0x7b]
mov byte [rsp + 0x6e], al
movzx eax, byte [rsp + 0x7a]
mov byte [rsp + 0x6d], al
movzx eax, byte [rsp + 0x79]
mov byte [rsp + 0x6c], al
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x6b], al
movzx eax, byte [rsp + 0x77]
mov byte [rsp + 0x6a], al
movzx eax, byte [rsp + 0x76]
mov byte [rsp + 0x69], al
movzx eax, byte [rsp + 0x75]
mov byte [rsp + 0x68], al
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x67], al
movzx eax, byte [rsp + 0x73]
mov byte [rsp + 0x66], al
movzx eax, byte [rsp + 0x72]
mov byte [rsp + 0x65], al
movzx eax, byte [rsp + 0x71]
mov byte [rsp + 0x97], al
movzx eax, byte [section..data]
cmp al, 0xff
je 0x14000b3aa
xorps xmm8, xmm8
movaps xmmword [rsp + 0x180], xmm8
movaps xmmword [rsp + 0x170], xmm8
movaps xmmword [rsp + 0x160], xmm8
movaps xmmword [rsp + 0x150], xmm8
movups xmm0, xmmword [str.expand_32_byte_k]
movaps xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x120], bl
mov byte [rsp + 0x121], sil
mov byte [rsp + 0x122], dil
mov byte [rsp + 0x123], r15b
mov byte [rsp + 0x124], r12b
mov byte [rsp + 0x125], r13b
mov byte [rsp + 0x126], cl
mov byte [rsp + 0x127], dl
mov byte [rsp + 0x128], r8b
mov byte [rsp + 0x129], r9b
mov byte [rsp + 0x12a], r10b
mov byte [rsp + 0x12b], r11b
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x12c], al
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x12d], al
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x12e], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x12f], al
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x130], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x131], al
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x132], al
movzx eax, byte [rsp + 0x70]
mov byte [rsp + 0x133], al
movzx eax, byte [rsp + 0x6f]
mov byte [rsp + 0x134], al
movzx eax, byte [rsp + 0x6e]
mov byte [rsp + 0x135], al
movzx eax, byte [rsp + 0x6d]
mov byte [rsp + 0x136], al
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x137], al
movzx eax, byte [rsp + 0x6b]
mov byte [rsp + 0x138], al
movzx eax, byte [rsp + 0x6a]
mov byte [rsp + 0x139], al
movzx eax, byte [rsp + 0x69]
mov byte [rsp + 0x13a], al
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x13b], al
movzx eax, byte [rsp + 0x67]
mov byte [rsp + 0x13c], al
movzx eax, byte [rsp + 0x66]
mov byte [rsp + 0x13d], al
movzx eax, byte [rsp + 0x65]
mov byte [rsp + 0x13e], al
movzx eax, byte [rsp + 0x97]
mov byte [rsp + 0x13f], al
mov dword [rsp + 0x140], 0
movabs rax, 0x1b93c24851d31615
mov qword [rsp + 0x144], rax
mov dword [rsp + 0x14c], 0xba9fb76e
mov byte [rsp + 0x190], 0
movaps xmmword [rsp + 0xc0], xmm8
movaps xmmword [rsp + 0xb0], xmm8
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0xb0]
mov r8d, 0x20
call fcn.14001cc30
movzx eax, byte [0x1400e8001]
cmp al, 1
je 0x14000b423
movzx eax, al
cmp eax, 0xff
je 0x14000b416
xorps xmm0, xmm0
movaps xmmword [rsp + 0x220], xmm0
mov dword [rsp + 0x230], 0
mov edi, 0x3ffffff
and edi, dword [rsp + 0xb0]
mov ebx, dword [rsp + 0xb3]
mov r15d, dword [rsp + 0xb6]
shr ebx, 2
and ebx, 0x3ffff03
shr r15d, 4
and r15d, 0x3ffc0ff
mov r13d, dword [rsp + 0xb9]
shr r13d, 6
and r13d, 0x3f03fff
mov r12d, dword [rsp + 0xbc]
shr r12d, 8
and r12d, 0xfffff
mov eax, dword [rsp + 0xc0]
movsd xmm8, qword [rsp + 0xc4]
mov ecx, dword [rsp + 0xcc]
mov dword [rsp + 0xd0], ecx
mov qword [rsp + 0xa8], rax
mov esi, eax
shr esi, 8
jmp 0x14000bb87
test r9, r9
je 0x14000b239
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400cbdff]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xa9d5404b
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.1400064a0
movabs rcx, 0xfe2711f14726a264
xor rcx, qword [rax]
movabs rdx, 0xa19d3b279f3ec05d
xor rdx, qword [rax + 8]
mov r8d, 0xd9c2d33b
xor r8d, dword [rax + 0x10]
movzx r9d, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
mov r10d, eax
shr r10d, 8
xor al, 0xc9
xor r10b, 0xaf
xor r9b, 0x1b
mov qword [rsp + 0x8a0], rcx
mov qword [rsp + 0x8a8], rdx
mov dword [rsp + 0x8b0], r8d
mov byte [rsp + 0x8b4], al
mov byte [rsp + 0x8b5], r10b
mov byte [rsp + 0x8b6], r9b
mov qword [rsp + 0x660], rsi
mov qword [rsp + 0x668], 0x17
lea rax, [rsp + 0x660]
mov qword [rsp + 0x110], rax
lea rax, [0x140025350]
mov qword [rsp + 0x118], rax
lea rax, [0x14004f678]
mov qword [rsp + 0x340], rax
mov qword [rsp + 0x348], 2
mov qword [rsp + 0x360], 0
lea rax, [rsp + 0x110]
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], 1
lea rcx, [rsp + 0x340]
call fcn.140029570
cmp qword [rsp + 0xe0], 0
je 0x14000b38a
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x640], 0
je 0x14000d3e4
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, r12
jmp 0x14000d3de
mov byte [rsp + 0x96], cl
mov byte [rsp + 0x95], dl
mov byte [rsp + 0x94], r8b
mov byte [rsp + 0x93], r9b
mov byte [rsp + 0x92], r10b
mov byte [rsp + 0x91], r11b
call fcn.14004ac70
movzx r11d, byte [rsp + 0x91]
movzx r10d, byte [rsp + 0x92]
movzx r9d, byte [rsp + 0x93]
movzx r8d, byte [rsp + 0x94]
movzx edx, byte [rsp + 0x95]
movzx ecx, byte [rsp + 0x96]
jmp 0x14000af73
call fcn.14004b370
test al, al
je 0x14000b189
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0xb0]
call fcn.140020190
movaps xmm6, xmmword [rsp + 0x8a0]
movaps xmm7, xmmword [rsp + 0x8b0]
movaps xmm0, xmmword [rsp + 0x8c0]
movdqa xmm1, xmmword [rsp + 0x8d0]
movaps xmmword [rsp + 0x7e0], xmm0
movdqa xmmword [rsp + 0x7f0], xmm1
movaps xmm0, xmmword [rsp + 0x8e0]
movaps xmmword [rsp + 0x800], xmm0
movaps xmm0, xmmword [rsp + 0x8f0]
movaps xmmword [rsp + 0x810], xmm0
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x7e0]
mov r8, rdx
call fcn.14001e2c0
movaps xmm11, xmmword [rsp + 0x8a0]
movaps xmm12, xmmword [rsp + 0x8b0]
movaps xmm9, xmmword [rsp + 0x8c0]
movaps xmm10, xmmword [rsp + 0x8d0]
mov qword [rsp + 0x20], 0x3ffffff
lea r12, [rsp + 0x840]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r12
mov rdx, 0xffffffffffffffff
call fcn.14001e920
movaps xmmword [rsp + 0x830], xmm12
movaps xmmword [rsp + 0x820], xmm11
lea r15, [rsp + 0x220]
lea rdx, [rsp + 0x820]
mov rcx, r15
mov r8, r12
call fcn.14001ec70
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x880]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r12
call fcn.14001e920
movaps xmmword [rsp + 0x870], xmm12
movaps xmmword [rsp + 0x860], xmm11
lea r13, [rsp + 0x7c0]
lea rdx, [rsp + 0x860]
mov rcx, r13
mov r8, r12
call fcn.140020210
lea r12, [rsp + 0x200]
mov rcx, r12
mov rdx, r13
call fcn.14001ec90
lea rcx, [rsp + 0x660]
mov rdx, r15
mov r8, r12
call fcn.14001e990
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x290], xmm12
movaps xmmword [rsp + 0x280], xmm11
lea r15, [rsp + 0x240]
lea rdx, [rsp + 0x280]
mov rcx, r15
call fcn.140020230
lea r12, [rsp + 0x2e0]
mov rcx, r12
mov rdx, r15
call fcn.14001ec90
movaps xmmword [rsp + 0x790], xmm10
movaps xmmword [rsp + 0x780], xmm9
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x780]
mov r8, r12
call fcn.14001e990
movaps xmm9, xmmword [rsp + 0x660]
movaps xmm10, xmmword [rsp + 0x670]
mov qword [rsp + 0x20], 0xffffffffffffffff
lea r12, [rsp + 0x660]
mov edx, 0x3ffffff
mov rcx, r12
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001e920
movaps xmmword [rsp + 0x1b0], xmm12
movaps xmmword [rsp + 0x1a0], xmm11
lea r15, [rsp + 0x620]
lea rdx, [rsp + 0x1a0]
mov rcx, r15
mov r8, r12
call fcn.14001ec70
mov qword [rsp + 0x20], 0x1a
lea r12, [rsp + 0x200]
mov edx, 0x40
mov r8d, 0x40
mov r9d, 0x40
mov rcx, r12
call fcn.14001e920
movaps xmmword [rsp + 0x230], xmm10
movaps xmmword [rsp + 0x220], xmm9
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x220]
mov r8, r12
call fcn.140020210
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x290], xmm12
movaps xmmword [rsp + 0x280], xmm11
lea r12, [rsp + 0x780]
lea r8, [rsp + 0x280]
mov rcx, r12
mov rdx, r15
call fcn.14001e990
movaps xmmword [rsp + 0x250], xmm12
movaps xmmword [rsp + 0x240], xmm11
lea r15, [rsp + 0x2e0]
lea rdx, [rsp + 0x240]
mov rcx, r15
call fcn.140020250
lea rcx, [rsp + 0x660]
mov rdx, r12
mov r8, r15
call fcn.14001e990
movaps xmm11, xmmword [rsp + 0x660]
movaps xmm12, xmmword [rsp + 0x670]
mov qword [rsp + 0x20], 0x3ffffff
mov qword [rsp + 0xa8], 0
lea r12, [rsp + 0x660]
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.14001e920
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
lea r15, [rsp + 0x7c0]
lea rdx, [rsp + 0x1a0]
mov rcx, r15
mov r8, r12
call fcn.14001ec70
mov qword [rsp + 0x20], 0x3ffffff
lea r13, [rsp + 0x860]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, r13
mov rdx, 0xffffffffffffffff
call fcn.14001e920
movaps xmmword [rsp + 0x850], xmm12
movaps xmmword [rsp + 0x840], xmm11
lea r12, [rsp + 0x620]
lea rdx, [rsp + 0x840]
mov rcx, r12
mov r8, r13
call fcn.14001ec70
mov qword [rsp + 0x20], 0x1a
lea r13, [rsp + 0x220]
mov edx, 0x40
mov r8d, 0x1a
mov r9d, 0x1a
mov rcx, r13
call fcn.14001e920
movaps xmmword [rsp + 0x890], xmm12
movaps xmmword [rsp + 0x880], xmm11
lea rbx, [rsp + 0x200]
lea rdx, [rsp + 0x880]
mov rcx, rbx
mov r8, r13
call fcn.140020210
lea r13, [rsp + 0x280]
mov rcx, r13
mov rdx, rbx
call fcn.14001ec90
lea rcx, [rsp + 0x660]
mov rdx, r12
mov r8, r13
call fcn.14001e990
movaps xmm9, xmmword [rsp + 0x660]
movaps xmm10, xmmword [rsp + 0x670]
movaps xmmword [rsp + 0x250], xmm10
movaps xmmword [rsp + 0x240], xmm9
lea rbx, [rsp + 0x780]
lea rdx, [rsp + 0x240]
mov rcx, rbx
call fcn.140020230
lea r13, [rsp + 0x2e0]
mov rcx, r13
mov rdx, rbx
call fcn.14001ec90
lea r12, [rsp + 0x820]
mov rcx, r12
mov rdx, r15
mov r8, r13
call fcn.14001e990
mov qword [rsp + 0x20], 0xffffffffffffffff
lea rbx, [rsp + 0x660]
mov edx, 0x3ffffff
mov rcx, rbx
mov r8, 0xffffffffffffffff
mov r9, 0xffffffffffffffff
call fcn.14001e920
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
lea r13, [rsp + 0xae0]
lea rdx, [rsp + 0x1a0]
mov rcx, r13
mov r8, rbx
call fcn.14001ec70
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 0
lea rbx, [rsp + 0x240]
mov rcx, rbx
xor edx, edx
mov r8d, 6
mov r9d, 4
call fcn.14001e230
lea r15, [rsp + 0x1a0]
mov rcx, r15
mov rdx, r13
mov r8, rbx
call fcn.14001e270
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 4
mov dword [rsp + 0x28], 6
mov dword [rsp + 0x20], 0
lea rbx, [rsp + 0x780]
mov rcx, rbx
xor edx, edx
mov r8d, 6
mov r9d, 4
call fcn.14001e230
lea r13, [rsp + 0x660]
mov rcx, r13
mov rdx, r12
mov r8, rbx
call fcn.14001e270
lea rcx, [rsp + 0x2e0]
mov rdx, r15
mov r8, r13
call fcn.140020270
movaps xmm9, xmmword [rsp + 0x2e0]
movaps xmm10, xmmword [rsp + 0x2f0]
movaps xmmword [rsp + 0x210], xmm10
movaps xmmword [rsp + 0x200], xmm9
lea rbx, [rsp + 0x280]
lea rdx, [rsp + 0x200]
mov rcx, rbx
call fcn.14001e210
movaps xmmword [rsp + 0x630], xmm10
movaps xmmword [rsp + 0x620], xmm9
lea r15, [rsp + 0x240]
lea rdx, [rsp + 0x620]
mov rcx, r15
mov r8, rbx
call fcn.14001e1f0
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea rbx, [rsp + 0x2e0]
mov rcx, rbx
mov edx, 4
mov r8d, 3
mov r9d, 2
call fcn.14001e230
lea rcx, [rsp + 0x8a0]
mov rdx, r15
mov r8, rbx
call fcn.14001e270
movaps xmm11, xmmword [rsp + 0x8a0]
movaps xmm12, xmmword [rsp + 0x8b0]
movaps xmmword [rsp + 0x1b0], xmm10
movaps xmmword [rsp + 0x1a0], xmm9
movaps xmmword [rsp + 0x670], xmm12
movaps xmmword [rsp + 0x660], xmm11
lea rcx, [rsp + 0x780]
lea rdx, [rsp + 0x1a0]
lea r8, [rsp + 0x660]
call fcn.14001e290
movaps xmmword [rsp + 0x8b0], xmm12
movaps xmmword [rsp + 0x8a0], xmm11
lea rcx, [rsp + 0x7a0]
lea rdx, [rsp + 0x8a0]
call fcn.14001e2b0
movaps xmmword [rsp + 0x1a0], xmm8
movaps xmmword [rsp + 0x1b0], xmm8
movaps xmmword [rsp + 0x1c0], xmm8
movaps xmmword [rsp + 0x1d0], xmm8
movups xmmword [rsp + 0x1d9], xmm8
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x7d0], eax
movaps xmm0, xmmword [rsp + 0x220]
movaps xmmword [rsp + 0x7c0], xmm0
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x8a0]
mov r8d, 0x108
call fcn.14003fb90
movaps xmm0, xmmword [rsp + 0x7e0]
movaps xmm1, xmmword [rsp + 0x7f0]
movaps xmm2, xmmword [rsp + 0x800]
movaps xmm3, xmmword [rsp + 0x810]
movaps xmmword [rsp + 0x240], xmm0
movaps xmmword [rsp + 0x250], xmm1
movaps xmmword [rsp + 0x260], xmm2
movaps xmmword [rsp + 0x270], xmm3
movaps xmm0, xmmword [rsp + 0x780]
movaps xmm1, xmmword [rsp + 0x790]
movaps xmm2, xmmword [rsp + 0x7a0]
movaps xmm3, xmmword [rsp + 0x7b0]
movaps xmmword [rsp + 0x280], xmm0
movaps xmmword [rsp + 0x290], xmm1
movaps xmmword [rsp + 0x2a0], xmm2
movaps xmmword [rsp + 0x2b0], xmm3
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmm1, xmmword [rsp + 0x1b0]
movaps xmm2, xmmword [rsp + 0x1c0]
movaps xmm3, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x2e0], xmm0
movaps xmmword [rsp + 0x2f0], xmm1
movaps xmmword [rsp + 0x300], xmm2
movaps xmmword [rsp + 0x310], xmm3
movups xmm0, xmmword [rsp + 0x1d9]
movups xmmword [rsp + 0x319], xmm0
mov rax, qword [rsp + 0x62f]
mov qword [rsp + 0x20f], rax
movups xmm0, xmmword [rsp + 0x620]
movaps xmmword [rsp + 0x200], xmm0
mov byte [rsp + 0xb0], 0
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 0
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0xb5], 0
mov byte [rsp + 0xb6], 0
mov byte [rsp + 0xb7], 0
mov byte [rsp + 0xb8], 0
mov byte [rsp + 0xb9], 0
mov byte [rsp + 0xba], 0
mov byte [rsp + 0xbb], 0
mov byte [rsp + 0xbc], 0
mov byte [rsp + 0xbd], 0
mov byte [rsp + 0xbe], 0
mov byte [rsp + 0xbf], 0
mov byte [rsp + 0xc0], 0
mov byte [rsp + 0xc1], 0
mov byte [rsp + 0xc2], 0
mov byte [rsp + 0xc3], 0
mov byte [rsp + 0xc4], 0
mov byte [rsp + 0xc5], 0
mov byte [rsp + 0xc6], 0
mov byte [rsp + 0xc7], 0
mov byte [rsp + 0xc8], 0
mov byte [rsp + 0xc9], 0
mov byte [rsp + 0xca], 0
mov byte [rsp + 0xcb], 0
mov byte [rsp + 0xcc], 0
mov byte [rsp + 0xcd], 0
mov byte [rsp + 0xce], 0
mov byte [rsp + 0xcf], 0
mov dword [rsp + 0x140], 1
mov byte [rsp + 0x190], 0
lea rcx, [rsp + 0x580]
lea rdx, [rsp + 0x110]
mov r8d, 0x84
call fcn.14003fb90
mov rax, qword [rsp + 0xa8]
mov byte [rsp + 0x340], al
mov eax, esi
shr eax, 0x10
mov byte [rsp + 0x343], al
mov word [rsp + 0x341], si
movlps qword [rsp + 0x344], xmm8
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x34c], eax
mov dword [rsp + 0x350], edi
mov dword [rsp + 0x354], ebx
mov dword [rsp + 0x358], r15d
mov dword [rsp + 0x35c], r13d
mov dword [rsp + 0x360], r12d
movaps xmm0, xmmword [rsp + 0x7c0]
movups xmmword [rsp + 0x364], xmm0
mov eax, dword [rsp + 0x7d0]
mov dword [rsp + 0x374], eax
lea rcx, [rsp + 0x378]
mov r8d, 0x108
lea rdx, [rsp + 0x660]
call fcn.14003fb90
movaps xmmword [rsp + 0x490], xmm7
movaps xmmword [rsp + 0x480], xmm6
movaps xmm0, xmmword [rsp + 0x240]
movaps xmm1, xmmword [rsp + 0x250]
movaps xmm2, xmmword [rsp + 0x260]
movaps xmm3, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x4a0], xmm0
movaps xmmword [rsp + 0x4b0], xmm1
movaps xmmword [rsp + 0x4c0], xmm2
movaps xmmword [rsp + 0x4d0], xmm3
movaps xmm0, xmmword [rsp + 0x280]
movaps xmm1, xmmword [rsp + 0x290]
movaps xmm2, xmmword [rsp + 0x2a0]
movaps xmm3, xmmword [rsp + 0x2b0]
movaps xmmword [rsp + 0x4e0], xmm0
movaps xmmword [rsp + 0x4f0], xmm1
movaps xmmword [rsp + 0x500], xmm2
movaps xmmword [rsp + 0x510], xmm3
movups xmm0, xmmword [rsp + 0x319]
movups xmmword [rsp + 0x559], xmm0
movaps xmm0, xmmword [rsp + 0x2e0]
movdqa xmm1, xmmword [rsp + 0x2f0]
movaps xmm2, xmmword [rsp + 0x300]
movaps xmm3, xmmword [rsp + 0x310]
movaps xmmword [rsp + 0x550], xmm3
movaps xmmword [rsp + 0x540], xmm2
movdqa xmmword [rsp + 0x530], xmm1
movaps xmmword [rsp + 0x520], xmm0
mov rax, qword [rsp + 0x20f]
mov qword [rsp + 0x578], rax
movapd xmm0, xmmword [rsp + 0x200]
movupd xmmword [rsp + 0x569], xmm0
movzx eax, byte [0x1400e8001]
movzx eax, byte [0x1400e8001]
cmp al, 1
jne 0x14000bffb
mov esi, 0x87400
lea r12, [rsp + 0x340]
mov r13, r14
jmp 0x14000bfb5
mov rcx, r12
mov rdx, r13
call fcn.14001feb0
add r13, 0x40
add rsi, 0xffffffffffffffc0
je 0x14000c029
cmp qword [rsp + 0x560], 0
je 0x14000bfa0
mov rcx, r12
mov rdx, r13
call fcn.14001f880
lea rdx, [r13 + 0x10]
mov rcx, r12
call fcn.14001f880
lea rdx, [r13 + 0x20]
mov rcx, r12
call fcn.14001f880
lea rdx, [r13 + 0x30]
mov rcx, r12
call fcn.14001f880
add r13, 0x40
add rsi, 0xffffffffffffffc0
jne 0x14000bfb5
jmp 0x14000c029
xor esi, esi
lea r15, [rsp + 0x340]
nop word cs:[rax + rax]
lea rdx, [r14 + rsi]
add rsi, 0x10
mov rcx, r15
call fcn.14001ff70
cmp rsi, 0x87400
jne 0x14000c010
mov qword [rsp + 0x8a0], 0
mov qword [rsp + 0x8a8], 0x87400
movzx eax, byte [0x1400e8001]
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x8a0]
cmp al, 1
jne 0x14000c063
call fcn.14001f880
jmp 0x14000c068
call fcn.14001ff70
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
mov r8d, 0x240
call fcn.14003fb90
movzx eax, byte [0x1400e8001]
cmp al, 1
jne 0x14000c149
lea rcx, [rsp + 0x660]
lea rdx, [rsp + 0x8a0]
call fcn.14001eca0
movzx eax, byte [rsp + 0x660]
movzx edi, byte [rsp + 0x661]
movzx r13d, byte [rsp + 0x662]
movzx esi, byte [rsp + 0x663]
movzx r12d, byte [rsp + 0x664]
movzx ecx, byte [rsp + 0x665]
mov dword [rsp + 0x98], ecx
movzx ecx, byte [rsp + 0x666]
mov dword [rsp + 0x9c], ecx
movzx ecx, byte [rsp + 0x667]
mov dword [rsp + 0xa0], ecx
movzx r15d, byte [rsp + 0x668]
movzx ecx, byte [rsp + 0x669]
mov dword [rsp + 0xa4], ecx
movzx ecx, byte [rsp + 0x66a]
mov dword [rsp + 0xd8], ecx
movzx ecx, byte [rsp + 0x66b]
mov dword [rsp + 0xd0], ecx
movzx ecx, byte [rsp + 0x66c]
mov qword [rsp + 0xa8], rcx
jmp 0x14000c320
mov r11d, dword [rsp + 0x8c8]
mov ecx, r11d
shr ecx, 0x1a
and r11d, 0x3ffffff
add ecx, dword [rsp + 0x8cc]
mov edx, ecx
shr edx, 0x1a
and ecx, 0x3ffffff
add edx, dword [rsp + 0x8d0]
mov eax, edx
shr eax, 0x1a
add eax, dword [rsp + 0x8d4]
and edx, 0x3ffffff
mov r9d, eax
shr r9d, 0x1a
mov r8d, eax
and r8d, 0x3ffffff
lea r10d, [r9 + r9*4]
add r10d, dword [rsp + 0x8c4]
mov r9d, r10d
shr r9d, 0x1a
add r9d, r11d
and r10d, 0x3ffffff
lea edi, [r10 + 5]
mov r11d, edi
shr r11d, 0x1a
add r11d, r9d
mov esi, r11d
shr esi, 0x1a
add esi, ecx
mov r13, r14
mov r14d, esi
shr r14d, 0x1a
add r14d, edx
mov r15d, r14d
shr r15d, 0x1a
lea ebx, [r15 + r8]
add ebx, 0xfc000000
add r15d, r8d
mov r8d, ebx
sar r8d, 0x1f
shr ebx, 0x1f
dec ebx
mov r12d, ebx
and r12d, 0x3ffffff
and edi, r12d
and r11d, r12d
and esi, r12d
and r12d, r14d
mov r14, r13
and ebx, r15d
and r10d, r8d
or r10d, edi
and r9d, r8d
or r9d, r11d
and ecx, r8d
or ecx, esi
and edx, r8d
or edx, r12d
and r8d, eax
or r8d, ebx
mov eax, r9d
shl eax, 0x1a
or eax, r10d
shr r9d, 6
mov r10d, ecx
shl r10d, 0x14
or r10d, r9d
shr ecx, 0xc
mov r9d, edx
shl r9d, 0xe
or r9d, ecx
shr edx, 0x12
shl r8d, 8
or r8d, edx
add eax, dword [rsp + 0x8a0]
mov r12d, dword [rsp + 0x8a4]
adc r12, r10
mov ecx, dword [rsp + 0x8a8]
add rcx, r9
mov r15, r12
shr r15, 0x20
add r15, rcx
mov ecx, dword [rsp + 0x8ac]
add rcx, r8
mov rdx, r15
shr rdx, 0x20
add rdx, rcx
mov dword [rsp + 0x660], eax
mov dword [rsp + 0x664], r12d
mov dword [rsp + 0x668], r15d
mov qword [rsp + 0xa8], rdx
mov dword [rsp + 0x66c], edx
mov edi, eax
shr edi, 8
mov r13d, eax
shr r13d, 0x10
mov esi, eax
shr esi, 0x18
mov ecx, r12d
shr ecx, 8
mov dword [rsp + 0x98], ecx
mov ecx, r12d
shr ecx, 0x10
mov dword [rsp + 0x9c], ecx
mov ecx, r12d
shr ecx, 0x18
mov dword [rsp + 0xa0], ecx
mov ecx, r15d
shr ecx, 8
mov dword [rsp + 0xa4], ecx
mov ecx, r15d
shr ecx, 0x10
mov dword [rsp + 0xd8], ecx
mov ecx, r15d
shr ecx, 0x18
mov dword [rsp + 0xd0], ecx
cmp al, byte [r14 + 0x87400]
sete cl
call fcn.14001e1e0
mov ebx, eax
cmp dil, byte [r14 + 0x87401]
sete cl
call fcn.14001e1e0
and bl, al
cmp r13b, byte [r14 + 0x87402]
sete cl
call fcn.14001e1e0
mov r13d, eax
cmp sil, byte [r14 + 0x87403]
sete cl
call fcn.14001e1e0
and r13b, al
and r13b, bl
cmp r12b, byte [r14 + 0x87404]
sete cl
call fcn.14001e1e0
mov r12d, eax
mov eax, dword [rsp + 0x98]
cmp al, byte [r14 + 0x87405]
sete cl
call fcn.14001e1e0
and r12b, al
and r12b, r13b
mov eax, dword [rsp + 0x9c]
cmp al, byte [r14 + 0x87406]
sete cl
call fcn.14001e1e0
mov r13d, eax
mov eax, dword [rsp + 0xa0]
cmp al, byte [r14 + 0x87407]
sete cl
call fcn.14001e1e0
and r13b, al
cmp r15b, byte [r14 + 0x87408]
sete cl
call fcn.14001e1e0
and r13b, al
and r13b, r12b
mov eax, dword [rsp + 0xa4]
cmp al, byte [r14 + 0x87409]
sete cl
call fcn.14001e1e0
mov r15d, eax
mov eax, dword [rsp + 0xd8]
cmp al, byte [r14 + 0x8740a]
sete cl
call fcn.14001e1e0
and r15b, al
and r15b, r13b
mov eax, dword [rsp + 0xd0]
cmp al, byte [r14 + 0x8740b]
sete cl
call fcn.14001e1e0
mov r12d, eax
mov rax, qword [rsp + 0xa8]
cmp al, byte [r14 + 0x8740c]
sete cl
call fcn.14001e1e0
and r12b, al
and r12b, r15b
movzx eax, byte [rsp + 0x66d]
cmp al, byte [r14 + 0x8740d]
sete cl
call fcn.14001e1e0
mov ebx, eax
movzx eax, byte [rsp + 0x66e]
cmp al, byte [r14 + 0x8740e]
sete cl
call fcn.14001e1e0
and bl, al
movzx eax, byte [rsp + 0x66f]
cmp al, byte [r14 + 0x8740f]
sete cl
call fcn.14001e1e0
and bl, al
and bl, r12b
and bl, 1
mov ecx, ebx
call fcn.14001e1e0
test al, al
je 0x14000c6a4
mov r8d, 0x87400
lea rcx, [rsp + 0x580]
mov rdx, r14
call fcn.14001cc30
lea rcx, [rsp + 0x340]
call fcn.14001d380
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x8f], 0
mov byte [rsp + 0x8e], 0
mov byte [rsp + 0x8d], 0
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x8b], 0
mov byte [rsp + 0x8a], 0
mov byte [rsp + 0x89], 0
mov byte [rsp + 0x88], 0
mov byte [rsp + 0x87], 0
mov byte [rsp + 0x86], 0
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x83], 0
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x81], 0
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x7e], 0
mov byte [rsp + 0x7d], 0
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], 0
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x73], 0
mov byte [rsp + 0x72], 0
mov byte [rsp + 0x71], 0
cmp qword [rsp + 0x108], 0
je 0x14000c5c1
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x8a0]
call fcn.140026690
mov rbx, qword [rsp + 0x8a8]
mov rsi, qword [rsp + 0x8b0]
lea rax, str.mWF0
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xc515cbc2
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006170
movabs rcx, 0x39f9b108f18e4c0f
xor rcx, qword [rax]
movabs rdx, 0x9dc2205f4ce6a64
xor rdx, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0xab
shr eax, 8
xor al, 0x5d
mov qword [rsp + 0x660], rcx
mov qword [rsp + 0x668], rdx
mov byte [rsp + 0x670], r8b
mov byte [rsp + 0x671], al
test rsi, rsi
movabs r15, 0x8000000000000001
js 0x14000d443
mov r12, r14
je 0x14000c7c2
movzx eax, byte [0x1400e89f0]
xor ecx, ecx
mov rdx, rsi
call fcn.140033dc0
mov r14, rax
test rax, rax
jne 0x14000c7c8
jmp 0x14000d443
lea rcx, [rsp + 0x340]
call fcn.14001d380
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rsp + 0x90], 0
mov byte [rsp + 0x8f], 0
mov byte [rsp + 0x8e], 0
mov byte [rsp + 0x8d], 0
mov byte [rsp + 0x8c], 0
mov byte [rsp + 0x8b], 0
mov byte [rsp + 0x8a], 0
mov byte [rsp + 0x89], 0
mov byte [rsp + 0x88], 0
mov byte [rsp + 0x87], 0
mov byte [rsp + 0x86], 0
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x83], 0
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x81], 0
mov byte [rsp + 0x80], 0
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x7e], 0
mov byte [rsp + 0x7d], 0
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x7a], 0
mov byte [rsp + 0x79], 0
mov byte [rsp + 0x78], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x74], 0
mov byte [rsp + 0x73], 0
mov byte [rsp + 0x72], 0
mov byte [rsp + 0x71], 0
cmp qword [rsp + 0x108], 0
mov r12, qword [rsp + 0x2d8]
lea rsi, [rsp + 0x8a0]
mov r8, qword [rsp + 0x100]
jne 0x14000b22a
jmp 0x14000b239
mov r14d, 1
mov rcx, r14
mov rdx, rbx
mov r8, rsi
call fcn.14003fb90
mov qword [rsp + 0x340], rsi
mov qword [rsp + 0x348], r14
mov qword [rsp + 0x350], rsi
mov byte [rsp + 0x358], 0
lea rcx, [rsp + 0x340]
lea rdx, [rsp + 0x660]
mov r8d, 0x12
call fcn.140027510
mov rbx, qword [rsp + 0x348]
mov rsi, qword [rsp + 0x350]
mov rdi, qword [rsp + 0x340]
lea rax, [0x1400d2345]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0xd51c7cfe
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.1400060e0
movabs rcx, 0x81cb781fab2feca2
xor rcx, qword [rax]
movabs rdx, 0x6d1355f037d5001b
xor rdx, qword [rax + 8]
mov qword [rsp + 0x340], rcx
mov qword [rsp + 0x348], rdx
lea r8, [rsp + 0x340]
mov r9d, 0x10
mov rcx, rbx
mov rdx, rsi
call fcn.140027390
mov rsi, rax
test rdi, rdi
je 0x14000c8c5
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, esi
and eax, 3
cmp eax, 1
mov r14, r12
jne 0x14000c920
mov rbx, qword [rsi - 1]
mov rdi, qword [rsi + 7]
mov rax, qword [rdi]
test rax, rax
je 0x14000c8e7
mov rcx, rbx
call rax
dec rsi
cmp qword [rdi + 8], 0
je 0x14000c90e
cmp qword [rdi + 0x10], 0x11
jb 0x14000c8fc
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x8a0], 0
je 0x14000c942
mov r8, qword [rsp + 0x8a8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0xf0]
mov r9d, 0x87400
mov r8, r14
call fcn.140027390
mov rsi, rax
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rax, [0x1400d5669]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x340]
mov rcx, qword [rsp + 0x340]
mov dword [rsp + 0x340], 0x274ea979
lea rax, [rsp + 0x340]
mov edx, dword [rsp + 0x340]
call fcn.140006510
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, byte [rax + 0x14]
test rsi, rsi
jne 0x14000d443
mov r14, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0xf0]
test rdi, rdi
js 0x14000d443
je 0x14000ca03
movzx eax, byte [0x1400e89f0]
xor ecx, ecx
mov rdx, rdi
call fcn.140033dc0
mov rsi, rax
test rax, rax
jne 0x14000ca08
jmp 0x14000d443
mov esi, 1
mov rcx, rsi
mov rdx, r14
mov r8, rdi
call fcn.14003fb90
mov qword [rsp + 0x340], rdi
mov qword [rsp + 0x348], rsi
mov qword [rsp + 0x350], rdi
mov byte [rsp + 0x358], 0
mov qword [rsp + 0x360], 0
mov qword [rsp + 0x368], 8
mov qword [rsp + 0x370], 0
mov qword [rsp + 0x3c8], 0
mov qword [rsp + 0x3d8], 0
mov word [rsp + 0x3e0], 0
dec r15
mov qword [rsp + 0x378], r15
mov word [rsp + 0x400], 0
mov word [rsp + 0x408], 0
mov dword [rsp + 0x398], 6
mov dword [rsp + 0x3a8], 6
mov dword [rsp + 0x3b8], 6
mov qword [rsp + 0x3e8], 0
mov qword [rsp + 0x3f8], 0
mov dword [rsp + 0x404], 0x8000000
mov dword [rsp + 0x660], 0
lea rcx, [rsp + 0x8a0]
lea rdx, [rsp + 0x340]
lea r8, [rsp + 0x660]
call fcn.140029bd0
mov rsi, qword [rsp + 0x8a0]
mov r14, qword [rsp + 0x8b0]
cmp r14, 2
jne 0x14000cb86
mov eax, esi
and eax, 3
cmp eax, 1
jne 0x14000cc1b
mov rdi, qword [rsi - 1]
mov rbx, qword [rsi + 7]
mov rax, qword [rbx]
test rax, rax
je 0x14000cb40
mov rcx, rdi
call rax
dec rsi
cmp qword [rbx + 8], 0
je 0x14000cb67
cmp qword [rbx + 0x10], 0x11
jb 0x14000cb55
mov rdi, qword [rdi - 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rsp + 0x340]
jmp 0x14000cc1b
mov r12, qword [rsp + 0x8a8]
mov r15, qword [rsp + 0x8b8]
mov rbx, qword [rsp + 0x8c0]
mov rax, qword [rsp + 0x8c8]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x8d8]
mov qword [rsp + 0xd0], rax
mov r13, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call r13
mov rcx, r12
call r13
test r14, r14
je 0x14000cbef
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x14000cc02
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0xa8], 0
je 0x14000cc1b
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
je 0x14000cc37
mov r8, qword [rsp + 0x348]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsp + 0x368]
mov rdi, qword [rsp + 0x370]
test rdi, rdi
je 0x14000cc81
lea rbx, [rsi + 0x10]
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14000cc69
add rbx, 0x28
dec rdi
je 0x14000cc81
cmp qword [rbx - 8], 0
je 0x14000cc60
mov r8, qword [rbx]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call r14
jmp 0x14000cc60
cmp qword [rsp + 0x360], 0
je 0x14000cc9e
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov r8, qword [rsp + 0x3c8]
test r8, r8
je 0x14000d004
mov rbx, qword [rsp + 0x3d0]
mov rsi, qword [rsp + 0x3d8]
test rsi, rsi
je 0x14000cf3a
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
mov r12, r8
xor r8d, r8d
jmp 0x14000ccef
mov r12d, 0
dec rsi
je 0x14000cfae
test r8, r8
je 0x14000cd10
movzx eax, word [r8 + 0x3d2]
cmp rbx, rax
jae 0x14000cdc0
mov r15, rbx
mov r14, r8
jmp 0x14000cdf3
test rbx, rbx
je 0x14000cd44
mov rcx, rbx
mov rax, rbx
and rcx, 7
je 0x14000cd49
and rax, 0xfffffffffffffff8
mov r8, r12
nop dword [rax + rax]
mov r8, qword [r8 + 0x3d8]
dec rcx
jne 0x14000cd30
cmp rbx, 8
jae 0x14000cd60
jmp 0x14000cd9e
mov r8, r12
jmp 0x14000cd9e
mov r8, r12
cmp rbx, 8
jb 0x14000cd9e
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000cd60
xor ebx, ebx
xor r12d, r12d
movzx eax, word [r8 + 0x3d2]
cmp rbx, rax
jb 0x14000cd05
nop word cs:[rax + rax]
mov r14, qword [r8 + 0x160]
test r14, r14
je 0x14000d42e
inc r12
movzx r15d, word [r8 + 0x3d0]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call rdi
mov r8, r14
cmp r15w, word [r14 + 0x3d2]
jae 0x14000cdc0
test r12, r12
je 0x14000cf10
mov r8, qword [r14 + r15*8 + 0x3e0]
mov rax, r12
dec rax
je 0x14000ce7e
mov rcx, rax
and rcx, 7
je 0x14000ce35
mov rax, rcx
nop dword [rax + rax]
mov r8, qword [r8 + 0x3d8]
dec rax
jne 0x14000ce20
not rcx
add rcx, r12
mov rax, rcx
add r12, 0xfffffffffffffffe
cmp r12, 7
jb 0x14000ce7e
nop
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000ce40
xor ebx, ebx
imul rax, r15, 0x38
lea r12, [r14 + rax]
add r12, 0x168
cmp qword [r14 + rax + 0x168], 0
je 0x14000ceb3
mov rax, qword [r12 + 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r13, r8
mov r8, rax
call rdi
mov r8, r13
cmp qword [r12 + 0x20], 0
je 0x14000ced4
mov rax, qword [r12 + 0x28]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r12, r8
mov r8, rax
call rdi
mov r8, r12
shl r15, 5
mov rax, qword [r14 + r15]
shl rax, 1
test rax, rax
je 0x14000cce0
add r14, r15
mov rax, qword [r14 + 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r14, r8
mov r8, rax
call rdi
mov r8, r14
jmp 0x14000cce0
lea rbx, [r15 + 1]
mov r8, r14
imul rax, r15, 0x38
lea r12, [r14 + rax]
add r12, 0x168
cmp qword [r14 + rax + 0x168], 0
jne 0x14000ce9a
jmp 0x14000ceb3
test rbx, rbx
je 0x14000cfae
mov rcx, rbx
mov rax, rbx
and rcx, 7
je 0x14000cf5c
and rax, 0xfffffffffffffff8
nop
mov r8, qword [r8 + 0x3d8]
dec rcx
jne 0x14000cf50
cmp rbx, 8
jb 0x14000cfae
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov rcx, qword [rcx + 0x3d8]
mov r8, qword [rcx + 0x3d8]
add rax, 0xfffffffffffffff8
jne 0x14000cf70
mov rax, qword [r8 + 0x160]
test rax, rax
je 0x14000cfef
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov rsi, rax
mov rcx, qword [0x1400e89d8]
xor edx, edx
call rdi
mov rax, qword [rsi + 0x160]
mov r8, rsi
test rax, rax
jne 0x14000cfd0
jmp 0x14000cff2
mov rsi, r8
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0x378]
shl rax, 1
test rax, rax
jne 0x14000d022
mov eax, dword [rsp + 0x398]
cmp eax, 4
jb 0x14000d058
jmp 0x14000d045
mov r8, qword [rsp + 0x380]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [rsp + 0x398]
cmp eax, 4
jb 0x14000d058
cmp eax, 6
je 0x14000d058
mov rcx, qword [rsp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x3a8]
cmp eax, 4
jb 0x14000d077
cmp eax, 6
je 0x14000d077
mov rcx, qword [rsp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x3b8]
cmp eax, 4
jb 0x14000d096
cmp eax, 6
je 0x14000d096
mov rcx, qword [rsp + 0x3c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rsp + 0x3e8]
test r8, r8
je 0x14000d3a0
mov r14, qword [rsp + 0x3f0]
mov rdi, qword [rsp + 0x3f8]
test rdi, rdi
je 0x14000d2e7
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, r8
xor r8d, r8d
jmp 0x14000d0f6
mov r15, r8
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call rbx
mov r8, r15
mov esi, 0
dec rdi
je 0x14000d35e
test r8, r8
je 0x14000d120
movzx eax, word [r8 + 0x16a]
cmp r14, rax
jae 0x14000d1d0
mov r12, r14
mov r15, r8
jmp 0x14000d1ff
test r14, r14
je 0x14000d154
mov rcx, r14
mov rax, r14
and rcx, 7
je 0x14000d159
and rax, 0xfffffffffffffff8
mov r8, rsi
nop dword [rax + rax]
mov r8, qword [r8 + 0x170]
dec rcx
jne 0x14000d140
cmp r14, 8
jae 0x14000d170
jmp 0x14000d1ae
mov r8, rsi
jmp 0x14000d1ae
mov r8, rsi
cmp r14, 8
jb 0x14000d1ae
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000d170
xor r14d, r14d
xor esi, esi
movzx eax, word [r8 + 0x16a]
cmp r14, rax
jb 0x14000d10c
nop word cs:[rax + rax]
mov r15, qword [r8]
test r15, r15
je 0x14000d42e
inc rsi
movzx r12d, word [r8 + 0x168]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call rbx
mov r8, r15
cmp r12w, word [r15 + 0x16a]
jae 0x14000d1d0
test rsi, rsi
je 0x14000d2a0
mov r8, qword [r15 + r12*8 + 0x178]
mov rax, rsi
dec rax
je 0x14000d28e
mov rcx, rax
and rcx, 7
je 0x14000d245
mov rax, rcx
nop word cs:[rax + rax]
mov r8, qword [r8 + 0x170]
dec rax
jne 0x14000d230
not rcx
add rcx, rsi
mov rax, rcx
add rsi, 0xfffffffffffffffe
cmp rsi, 7
jb 0x14000d28e
nop
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000d250
xor r14d, r14d
jmp 0x14000d2a8
lea r14, [r12 + 1]
mov r8, r15
lea rax, [r12 + r12*2]
mov rsi, qword [r15 + rax*8 + 0x60]
mov r15, qword [r15 + rax*8 + 0x68]
mov rax, qword [r15]
test rax, rax
je 0x14000d2c9
mov rcx, rsi
mov r12, r8
call rax
mov r8, r12
cmp qword [r15 + 8], 0
je 0x14000d0e8
cmp qword [r15 + 0x10], 0x11
jae 0x14000d0d0
mov r15, r8
jmp 0x14000d0d7
test r14, r14
je 0x14000d35e
mov rcx, r14
mov rax, r14
and rcx, 7
je 0x14000d30c
and rax, 0xfffffffffffffff8
nop dword [rax]
mov r8, qword [r8 + 0x170]
dec rcx
jne 0x14000d300
cmp r14, 8
jb 0x14000d35e
nop word cs:[rax + rax]
mov rcx, qword [r8 + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov rcx, qword [rcx + 0x170]
mov r8, qword [rcx + 0x170]
add rax, 0xfffffffffffffff8
jne 0x14000d320
mov rax, qword [r8]
test rax, rax
je 0x14000d38b
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov rsi, rax
mov rcx, qword [0x1400e89d8]
xor edx, edx
call rdi
mov rax, qword [rsi]
mov r8, rsi
test rax, rax
jne 0x14000d370
jmp 0x14000d38e
mov rsi, r8
mov rcx, qword [0x1400e89d8]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0xe0], 0
je 0x14000d3c2
mov r8, qword [rsp + 0xe8]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x640], 0
je 0x14000d3e4
mov r8, qword [rsp + 0x648]
mov rcx, qword [0x1400e89d8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
movaps xmm6, xmmword [rbp + 0xa80]
movaps xmm7, xmmword [rbp + 0xa90]
movaps xmm8, xmmword [rbp + 0xaa0]
movaps xmm9, xmmword [rbp + 0xab0]
movaps xmm10, xmmword [rbp + 0xac0]
movaps xmm11, xmmword [rbp + 0xad0]
movaps xmm12, xmmword [rbp + 0xae0]
lea rsp, [rbp + 0xaf8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov edx, 8
mov rcx, r8
call fcn.14001cc10
ud2
call qword [sym.imp.KERNEL32.dll_GetLastError]
ud2
call fcn.140033d50
int3