Function at 0x14002aec0
Capabilities:
Encode data using xor
Execute anti-debugging instructions
Link many functions at runtime
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xef0]
sub rsp, 0xff0
mov rax, qword [0x140113980]
xor rax, rsp
mov qword [rbp + 0xee0], rax
xor r14d, r14d
mov qword [rbp + 0x98], r8
mov qword [rbp + 0xc10], rdx
mov qword [rbp + 0xa0], r14
test rdx, rdx
jne 0x14002af18
mov r14d, 0x80070057
jmp 0x140035afa
test r8, r8
je 0x14002af0d
mov dword [rbp + 0x78], r14d
mov r12d, r14d
mov qword [rbp + 0xa8], r14
mov r15d, 1
xor eax, eax
lock cmpxchg dword [0x140114cf4], r15d
jne 0x14002af31
mov eax, dword [0x140114cf0]
or edi, 0xffffffff
mov dword [rbp + 0x44], edi
mov ebx, 0x338
test eax, eax
jne 0x14002b4d3
mov dword [rbp + 0x30], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, ebx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14002b2f8
mov esi, 0x67
lea r15, [rax + 7]
mov r13d, r14d
lea r12, [0x1400eafb2]
mov ecx, edi
mov r10d, r14d
mov r11d, r14d
lea ebx, [rsi - 0x66]
movzx eax, byte [r12 - 1]
movzx r9d, byte [r12 - 2]
movzx r8d, byte [r12 + 2]
shl r9d, 8
or r9d, eax
shl r8d, 8
movzx eax, byte [r12]
lea r12, [r12 + 8]
shl r9d, 8
or r9d, eax
movzx eax, byte [r12 - 7]
shl r9d, 8
or r9d, eax
movzx eax, byte [r12 - 5]
or r8d, eax
xor r11d, r9d
movzx eax, byte [r12 - 4]
shl r8d, 8
or r8d, eax
movzx eax, byte [r12 - 3]
shl r8d, 8
or r8d, eax
xor r10d, r8d
xor r10d, r11d
xor r10d, 0xac987321
lea eax, [r10 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r10d
rol eax, 0xa
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 2
sub edx, eax
xor r10d, edx
imul edx, r10d, 0x605e
mov eax, r10d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r10d, edx
mov edx, r10d
xor edx, 0xab69605e
sub eax, edx
xor r11d, eax
mov eax, r11d
mov edi, r11d
xor eax, 0x137f
ror edi, 6
imul edx, eax, 0xab69
xor edi, edx
xor r10d, edi
mov edi, 0xab69605e
lea eax, [r10 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r10d
rol eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 8
sub edx, eax
xor r10d, edx
mov eax, r10d
xor eax, edi
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r10d
ror eax, 0xa
xor edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor edx, eax
xor edx, r10d
mov eax, edx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea r10d, [r11 - 0x7f1]
xor r10d, edx
xor r10d, edi
mov eax, r10d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r10d
shr eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 7
add edx, eax
xor r10d, edx
mov eax, r10d
mov edi, r10d
xor eax, 0x137f
ror edi, 9
imul edx, eax, 0x605e
add edi, edx
xor r11d, edi
mov eax, r11d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 7
add edx, eax
xor r10d, edx
xor r11d, r10d
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r10d, edx
lea eax, [r10 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r10d
ror eax, 6
sub edx, eax
xor r11d, edx
lea eax, [r11 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 0xe
add edx, eax
xor r10d, edx
lea eax, [r10 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r10d
ror eax, 0xe
sub edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor edx, eax
xor r10d, edx
mov eax, r10d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r10d
xor r10d, ecx
rol eax, 2
mov ecx, r8d
xor edx, eax
xor edx, r13d
mov r13d, r9d
xor r11d, edx
mov byte [r15 - 4], r11b
mov byte [r15], r10b
lea r15, [r15 + 8]
ror r11d, 8
mov byte [r15 - 0xd], r11b
ror r10d, 8
mov byte [r15 - 9], r10b
ror r11d, 8
mov byte [r15 - 0xe], r11b
ror r10d, 8
mov byte [r15 - 0xa], r10b
ror r11d, 8
ror r10d, 8
mov byte [r15 - 0xf], r11b
mov byte [r15 - 0xb], r10b
ror r10d, 8
ror r11d, 8
sub rsi, rbx
jne 0x14002afa7
mov rbx, qword [rsp + 0x78]
mov rax, r14
mov cl, r14b
mov esi, r14d
mov r13d, r14d
mov edx, 0x338
mov r15d, 1
xor cl, byte [rax + rbx]
add rax, r15
cmp rax, rdx
jb 0x14002b2be
movzx eax, cl
cmp rax, qword [0x1400eb2e8]
je 0x14002b350
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r12d, r14d
lea rsi, [0x140114960]
mov ebx, 4
mov rdi, rsi
cmp qword [rdi], r14
je 0x14002b31b
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, r15
jne 0x14002b307
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, rsi
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
jmp 0x14002b4dc
mov byte [rbx + rdx - 1], r14b
lea rdi, [0x140114960]
xor edx, edx
mov rcx, rdi
lea r8d, [rdx + 0x60]
call sub.msvcrt.dll_memset
mov r15, rbx
cmp byte [rbx], r14b
je 0x14002b49c
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r14w
jne 0x14002b37d
lea rbx, [rbx + rax*2]
mov eax, r13d
lea rcx, [rax + rax*2]
lea rdi, [rdi + rcx*8]
xor ecx, ecx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14002b492
mov rax, qword [rdi]
mov ecx, 0x5a4d
mov esi, r14d
cmp word [rax], cx
je 0x14002b3c6
mov esi, 0xc000007b
jmp 0x14002b410
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14002b3bf
add rcx, qword [rdi]
cmp rcx, qword [rdi]
jb 0x14002b3bf
cmp dword [rcx], 0x4550
jne 0x14002b3bf
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14002b3ff
mov esi, 0xc000000d
jmp 0x14002b410
mov rax, qword [rcx + 0x88]
mov qword [rdi + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [rdi + 8], eax
mov eax, dword [rbx + 2]
mov r12d, r14d
add rbx, 6
mov dword [rbp - 0x68], eax
mov ecx, 1
test eax, eax
je 0x14002b47d
mov rdx, rbx
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r14b
jne 0x14002b42d
inc rbx
add rbx, rax
test esi, esi
js 0x14002b46c
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
je 0x14002b497
mov eax, dword [rbp + 0x30]
lea r8, section..data
mov ecx, 1
mov qword [r8 + rax*8], rdx
jmp 0x14002b46f
mov eax, dword [rbp + 0x30]
add eax, ecx
add r12d, ecx
mov dword [rbp + 0x30], eax
cmp r12d, dword [rbp - 0x68]
jb 0x14002b426
add r13d, ecx
lea rdi, [0x140114960]
cmp byte [rbx], r14b
jne 0x14002b376
jmp 0x14002b497
mov esi, 0xc000007a
test r15, r15
je 0x14002b4bc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r15d, 1
test esi, esi
js 0x14002b2f5
mov eax, dword [0x140114cf0]
mov r12d, r14d
add eax, r15d
mov dword [0x140114cf0], eax
mov eax, r14d
mov esi, r14d
xchg dword [0x140114cf4], eax
mov qword [rbp + 0xc0], r14
mov ebx, r14d
mov qword [rbp + 0xc8], r14
mov edi, 0x80004005
mov rax, qword gs:[0x60]
mov r13d, 0x80070000
cmp dword [rax + 0x2c0], r14d
je 0x14002b831
movabs r10, 0xf6ddaf373053f870
mov rax, qword [str._R_t_]
call qword [0x1400d71e8]
mov r15, rax
test rax, rax
jne 0x14002b55f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r13d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14002b834
mov ebx, edi
jmp 0x14002b834
mov qword [rbp + 0xd0], r14
mov r9d, r14d
mov rdi, r14
mov rax, r14
test rdi, rdi
mov r8, r14
cmovne r8, rax
movabs r10, 0xe8a8076f5454d170
lea rax, [rbp + 0x74]
mov edx, 2
mov qword [rsp + 0x20], rax
mov rcx, r15
mov rax, qword [str._S_t_]
call qword [0x1400d71e8]
test eax, eax
jne 0x14002b62c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14002b61b
cmp qword [rbp + 0xd0], r14
jne 0x14002b614
mov edi, dword [rbp + 0x74]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, edi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0xd0]
mov rdi, rax
call fcn.140095444
mov qword [rbp + 0xd0], rdi
test rdi, rdi
je 0x14002b60d
mov r9d, dword [rbp + 0x74]
mov rax, rdi
jmp 0x14002b56f
mov ebx, 0x8007000e
jmp 0x14002b641
mov ebx, 0x80004005
jmp 0x14002b641
test eax, eax
je 0x14002b614
movzx ebx, ax
or ebx, r13d
test eax, eax
cmovle ebx, eax
jmp 0x14002b641
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], r14
lea rcx, [rbp + 0xd0]
call fcn.140095444
test ebx, ebx
js 0x14002b834
mov rdi, qword [0x14010d128]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax + rax]
mov ecx, eax
movabs r10, 0xcb9036c510d00b70
mov rax, rdi
call qword [0x1400d71e8]
mov r15, rax
test rax, rax
jne 0x14002b6ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, r13d
test eax, eax
cmovle ebx, eax
test ebx, ebx
js 0x14002b834
mov ebx, 0x80004005
jmp 0x14002b834
mov qword [rbp + 0xd8], r14
mov ebx, r14d
mov r9d, r14d
mov rdi, r14
mov rax, r14
test rdi, rdi
mov r8, r14
cmovne r8, rax
movabs r10, 0xe8a8076f5454d170
lea rax, [rbp + 0x70]
mov edx, 2
mov qword [rsp + 0x20], rax
mov rcx, r15
mov rax, qword [str._S_t_]
call qword [0x1400d71e8]
test eax, eax
jne 0x14002b785
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
jne 0x14002b76f
cmp qword [rbp + 0xd8], r14
jne 0x14002b766
mov edi, dword [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, edi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0xd8]
mov rdi, rax
call fcn.140095444
mov qword [rbp + 0xd8], rdi
test rdi, rdi
je 0x14002b75f
mov r9d, dword [rbp + 0x70]
mov rax, rdi
jmp 0x14002b6c1
mov ebx, 0x8007000e
jmp 0x14002b79a
mov edi, 0x80004005
mov ebx, edi
jmp 0x14002b79f
mov edi, 0x80004005
test eax, eax
je 0x14002b76b
movzx ebx, ax
or ebx, r13d
test eax, eax
cmovle ebx, eax
jmp 0x14002b79f
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd8], r14
mov edi, 0x80004005
lea rcx, [rbp + 0xd8]
call fcn.140095444
test ebx, ebx
js 0x14002b834
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14002b831
lea rdx, str.WinSta0
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14002b831
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x14002b831
lea rdx, str.Default
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x14002b831
xor eax, eax
mov dword [rbp + 0x40], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop dword [rax + rax]
mov r9d, 4
lea r8, [rbp + 0x40]
mov rcx, rax
lea edx, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_GetProcessMitigationPolicy]
nop dword [rax + rax]
test eax, eax
je 0x14002b539
mov eax, 0xf
test byte [rbp + 0x40], al
mov eax, 1
cmove esi, eax
mov r12d, esi
lea rcx, [rbp + 0xc8]
call fcn.140095444
lea rcx, [rbp + 0xc0]
call fcn.140095444
test ebx, ebx
mov edi, r14d
cmovns edi, r12d
mov dword [rbp - 0x68], edi
mov edx, 4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x78], rax
mov rbx, rax
call fcn.140095414
test rbx, rbx
jne 0x14002b94a
mov qword [rbp + 0xa8], r14
mov r13d, 0x8007000e
mov esi, dword [rbp + 0x40]
mov r15d, 1
xor eax, eax
lock cmpxchg dword [0x140114cf4], r15d
jne 0x14002b89f
mov eax, dword [0x140114cf0]
test eax, eax
jle 0x14002b914
sub eax, r15d
mov dword [0x140114cf0], eax
jne 0x14002b914
lea r12, [0x140114960]
mov ebx, 4
mov rdi, r12
cmp qword [rdi], r14
je 0x14002b8e4
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
add rdi, 0x18
sub rbx, r15
jne 0x14002b8d0
xor edx, edx
lea r8d, [rbx + 0x60]
mov rcx, r12
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
mov eax, r14d
lea rcx, [rbp + 0xa8]
xchg dword [0x140114cf4], eax
call fcn.140095414
test r13d, r13d
jns 0x140035ae3
cmp r13d, 0xd0000034
jne 0x140035aa4
mov r13d, 0xc004f012
jmp 0x140035ade
xorps xmm0, xmm0
mov qword [rbp + 0xa8], rbx
movups xmmword [rbp + 0x1f8], xmm0
mov r15, r14
mov qword [rbp + 0x210], r14
mov r12, r14
mov dword [rbp + 0x6c], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r13d, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
movabs rbx, 0xc81ecb17b1b54a58
mov dword [rbp + 0x48], 0x38
lea r8, [0x140000000]
lea edx, [r13 + 0x78]
test rax, rax
jne 0x14002b9c6
mov r13d, 0xc0000017
mov dword [rbp + 0x30], r13d
jmp 0x14002e8ef
mov r15, rax
lea rax, [r8 + 0x113a60]
movups xmm0, xmmword [rax]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r15 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r15 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r15 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r15 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r15 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r15 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r15 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r15 + rdx + 0x10], xmm1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r13
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002b9b7
mov r12, rax
mov rax, qword [0x1401139a8]
mov qword [r12], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp], rax
mov dword [rbp + 0x5c], 0xc
mov rcx, qword [rbp + 0xc10]
lea r8, [rbp + 0xe8]
mov edx, 0x7fffffff
call fcn.1400954c0
test eax, eax
jns 0x14002baa5
mov qword [rbp + 0xe8], r14
mov r13d, 0xc000003e
jmp 0x14002b9bd
mov rax, qword [rbp + 0xe8]
inc rax
mov dword [rbp - 8], 8
mov qword [rbp + 0xe8], rax
mov dword [rbp - 0x28], 0xa0
lea ecx, [rax*2 + 4]
cmp ecx, 4
jb 0x14002bad5
mov r13d, r14d
jmp 0x14002bae8
mov rax, qword [rsp + 0x78]
mov r13d, 0xc0000095
mov ecx, dword [rbp + 0x5c]
mov qword [rsp + 0x78], rax
mov dword [rbp + 0x30], r13d
test r13d, r13d
js 0x14002e8ef
mov edx, 0xc4
mov dword [rbp + 0x10], edi
or r9d, 0xffffffff
mov r10d, 0x10000000
mov r8d, r9d
lea eax, [rcx + rdx]
cmp eax, edx
cmovae r8d, eax
sbb r13d, r13d
and r13d, 0xc0000095
add r13d, r10d
mov dword [rbp + 0x30], r13d
cmp eax, edx
jb 0x14002ea87
lea eax, [r8 + 8]
mov dword [rbp + 0x10], edi
cmp eax, r8d
mov edx, r9d
cmovae edx, eax
sbb r13d, r13d
and r13d, 0xc0000095
add r13d, r10d
mov dword [rbp + 0x30], r13d
cmp eax, r8d
jb 0x14002ea87
lea eax, [rdx + 8]
mov dword [rbp + 0x10], edi
cmp eax, edx
mov r8d, r9d
cmovae r8d, eax
sbb r13d, r13d
and r13d, 0xc0000095
add r13d, r10d
mov dword [rbp + 0x30], r13d
cmp eax, edx
jb 0x14002ea87
mov dword [rbp + 0x20c], r8d
mov edi, r8d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, edi
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x14002bbbb
mov r13d, 0xc0000017
jmp 0x14002c3d7
mov qword [rbp + 0x210], rax
mov ecx, r14d
mov dword [rbp + 0x208], ecx
test rax, rax
jne 0x14002bc15
mov eax, dword [rbp + 0x20c]
lea r11d, [rax + 8]
cmp r11d, eax
jb 0x14002ea7c
mov rdx, qword [rsp + 0x78]
inc ecx
mov r9d, dword [rbp - 8]
mov rdi, rdx
mov r8d, dword [rbp - 0x28]
mov rax, r15
mov dword [rbp + 0x208], ecx
mov r13d, r9d
mov qword [rsp + 0x78], rdx
mov r10, r12
mov dword [rbp + 0x20c], r11d
jmp 0x14002bc99
mov rdi, qword [rbp + 0x210]
mov rdx, qword [rsp + 0x78]
mov r8d, dword [rbp - 0x28]
mov r9d, dword [rbp - 8]
lea r10, [rdi + 4]
cmp r10, rdi
jb 0x14002ea7c
mov ecx, dword [rbp + 0x20c]
lea rax, [rdi + 8]
add rcx, rdi
cmp rax, rcx
jbe 0x14002bc53
mov r13d, 0xc0000023
jmp 0x14002c3d7
mov dword [rdi], 4
mov dword [r10], r14d
mov ecx, dword [rbp + 0x208]
inc ecx
mov dword [rbp + 0x208], ecx
mov qword [rsp + 0x78], rdx
mov rdi, rdx
mov rax, r15
mov r13d, r9d
mov r10, r12
test r15, r15
jne 0x14002bc92
test r8d, r8d
jne 0x14002bd6b
mov r11d, dword [rbp + 0x20c]
jmp 0x14002bca2
mov r11d, dword [rbp + 0x20c]
test r8d, r8d
je 0x14002bd6b
cmp qword [rbp + 0x210], r14
jne 0x14002bccf
mov r15, rax
mov r12, r10
mov r9d, 0xa4
add r9d, r11d
cmp r9d, r11d
jb 0x14002ea7c
mov dword [rbp + 0x20c], r9d
jmp 0x14002bd59
mov r10, qword [rbp + 0x210]
mov edi, r14d
test ecx, ecx
je 0x14002bd01
mov eax, dword [r10]
add eax, 4
cmp eax, 4
jb 0x14002ea7c
add rax, r10
cmp rax, r10
jb 0x14002ea7c
inc edi
mov r10, rax
cmp edi, ecx
jb 0x14002bcdd
mov r13d, r9d
mov qword [rsp + 0x78], rdx
lea r9, [r10 + 4]
mov rdi, rdx
cmp r9, r10
jb 0x14002ea7c
mov edx, r8d
lea rax, [r10 + 4]
mov ecx, r11d
add rax, rdx
add rcx, qword [rbp + 0x210]
cmp rax, rcx
ja 0x14002bc48
mov dword [r10], r8d
test r15, r15
je 0x14002bd4c
mov r8d, edx
mov rcx, r9
mov rdx, r15
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbp + 0x208]
mov r9d, dword [rbp + 0x20c]
inc ecx
mov dword [rbp + 0x208], ecx
test r12, r12
jne 0x14002bd76
test r13d, r13d
je 0x14002bd7b
mov r13d, 0xc000000d
jmp 0x14002c3d7
test r13d, r13d
je 0x14002bd6b
cmp qword [rbp + 0x210], r14
jne 0x14002bda2
mov r8d, 0xc
add r8d, r9d
cmp r8d, r9d
jb 0x14002ea7c
mov dword [rbp + 0x20c], r8d
jmp 0x14002be27
mov rdx, qword [rbp + 0x210]
mov r8d, r14d
test ecx, ecx
je 0x14002bdd8
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14002ea7c
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x14002ea7c
inc r8d
mov rdx, r10
cmp r8d, ecx
jb 0x14002bdb0
lea r10, [rdx + 4]
mov qword [rsp + 0x78], rdi
cmp r10, rdx
jb 0x14002ea7c
mov r8d, r13d
lea rax, [rdx + 4]
mov ecx, r9d
add rax, r8
add rcx, qword [rbp + 0x210]
cmp rax, rcx
ja 0x14002bc48
mov dword [rdx], r13d
test r12, r12
je 0x14002be1a
mov rdx, r12
mov rcx, r10
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbp + 0x208]
mov r8d, dword [rbp + 0x20c]
mov r13d, 1
add ecx, r13d
mov dword [rbp + 0x208], ecx
cmp qword [rbp + 0x210], r14
jne 0x14002be5d
lea eax, [r8 + 0xc]
cmp eax, r8d
jb 0x14002ea7c
add ecx, r13d
mov dword [rbp + 0x20c], eax
mov dword [rbp + 0x208], ecx
jmp 0x14002bed0
mov rdx, qword [rbp + 0x210]
mov r9d, r14d
test ecx, ecx
je 0x14002be93
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14002ea7c
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x14002ea7c
add r9d, r13d
mov rdx, r10
cmp r9d, ecx
jb 0x14002be6b
lea r9, [rdx + 4]
mov qword [rsp + 0x78], rdi
cmp r9, rdx
jb 0x14002ea7c
mov ecx, r8d
lea rax, [rdx + 0xc]
add rcx, qword [rbp + 0x210]
cmp rax, rcx
ja 0x14002bc48
mov rax, qword [rbp]
mov dword [rdx], 8
mov qword [r9], rax
add dword [rbp + 0x208], r13d
mov rcx, qword [rbp + 0xc10]
lea r8, [rbp + 0xf0]
mov edx, 0x7fffffff
call fcn.1400954c0
test eax, eax
jns 0x14002befe
mov qword [rbp + 0xf0], r14
mov r13d, 0xc000003e
jmp 0x14002c3d7
mov rax, qword [rbp + 0xf0]
lea rcx, [rax + 1]
cmp rcx, rax
jb 0x14002ea74
lea r9d, [rcx + rcx]
mov qword [rbp + 0xf0], rcx
test r9d, r9d
je 0x14002c043
cmp qword [rbp + 0x210], r14
jne 0x14002bf8a
add r9d, 4
cmp r9d, 4
jb 0x14002bf7f
mov eax, dword [rbp + 0x20c]
mov edx, dword [rbp + 0x208]
mov qword [rsp + 0x78], rdi
lea ecx, [rax + r9]
cmp ecx, eax
jb 0x14002bf6d
add edx, r13d
mov dword [rbp + 0x20c], ecx
mov dword [rbp + 0x208], edx
mov r13d, r14d
mov dword [rbp + 0x30], r14d
jmp 0x14002c058
or dword [rbp + 0x20c], 0xffffffff
mov r13d, 0xc0000095
jmp 0x14002c054
mov r13d, 0xc0000095
jmp 0x14002c049
mov edx, dword [rbp + 0x208]
mov r13d, r14d
mov r8, qword [rbp + 0x210]
test edx, edx
je 0x14002bfd8
mov rcx, r12
mov r10, r15
mov r11, rdi
mov eax, dword [r8]
mov rdi, r11
add eax, 4
mov qword [rsp + 0x78], r11
mov r15, r10
mov r12, rcx
cmp eax, 4
jb 0x14002c00c
mov ecx, eax
add rcx, r8
cmp rcx, r8
jb 0x14002c00c
inc r13d
mov r8, rcx
mov rcx, r12
cmp r13d, edx
jb 0x14002bfa7
lea r11, [r8 + 4]
cmp r11, r8
jb 0x14002bf74
mov ecx, dword [rbp + 0x20c]
lea rax, [r9 + 4]
add rcx, qword [rbp + 0x210]
add rax, r8
mov dword [rbp + 0x30], r14d
mov r13d, r14d
mov r10d, r9d
cmp rax, rcx
jbe 0x14002c019
mov r13d, 0xc0000023
jmp 0x14002c04f
mov r13d, 0xc0000095
mov qword [rsp + 0x78], r11
jmp 0x14002c054
mov rdx, qword [rbp + 0xc10]
mov rcx, r11
mov dword [r8], r9d
mov r8, r10
call sub.msvcrt.dll_memcpy
mov edx, dword [rbp + 0x208]
inc edx
mov qword [rsp + 0x78], rdi
mov dword [rbp + 0x208], edx
jmp 0x14002c058
mov r13d, 0xc000000d
mov edx, dword [rbp + 0x208]
mov qword [rsp + 0x78], rdi
mov dword [rbp + 0x30], r13d
mov r10, r15
mov rcx, r12
mov r9d, dword [rbp - 0x68]
test r13d, r13d
js 0x14002ea6c
cmp qword [rbp + 0x210], r14
jne 0x14002c099
mov eax, dword [rbp + 0x20c]
lea r11d, [rax + 8]
cmp r11d, eax
jb 0x14002ea62
mov dword [rbp + 0x20c], r11d
mov r13d, 1
jmp 0x14002c128
mov r8, qword [rbp + 0x210]
mov r11d, r14d
mov r13d, 1
test edx, edx
je 0x14002c0de
mov eax, dword [r8]
mov r15, r10
add eax, 4
mov r12, rcx
cmp eax, 4
jb 0x14002ea62
mov ecx, eax
add rcx, r8
cmp rcx, r8
jb 0x14002ea62
add r11d, r13d
mov r8, rcx
mov rcx, r12
cmp r11d, edx
jb 0x14002c0ad
lea rdx, [r8 + 4]
mov qword [rsp + 0x78], rdi
cmp rdx, r8
jb 0x14002ea62
mov ecx, dword [rbp + 0x20c]
lea rax, [r8 + 8]
add rcx, qword [rbp + 0x210]
cmp rax, rcx
jbe 0x14002c111
mov r13d, 0xc0000023
jmp 0x14002ea68
mov dword [r8], 4
mov dword [rdx], r9d
mov edx, dword [rbp + 0x208]
mov r11d, dword [rbp + 0x20c]
add edx, r13d
mov dword [rbp + 0x208], edx
cmp qword [rbp + 0x210], r14
jne 0x14002c158
lea ecx, [r11 + 8]
cmp ecx, r11d
jb 0x14002ea62
add edx, r13d
mov dword [rbp + 0x20c], ecx
mov dword [rbp + 0x208], edx
jmp 0x14002c1d7
mov r8, qword [rbp + 0x210]
mov ecx, r14d
test edx, edx
je 0x14002c194
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x14002ea62
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x14002ea62
mov r13d, 1
mov r8, r10
add ecx, r13d
cmp ecx, edx
jb 0x14002c166
lea rdx, [r8 + 4]
mov qword [rsp + 0x78], rdi
cmp rdx, r8
jb 0x14002ea62
mov ecx, r11d
lea rax, [r8 + 8]
add rcx, qword [rbp + 0x210]
cmp rax, rcx
ja 0x14002c106
mov dword [r8], 4
mov dword [rdx], 4
add dword [rbp + 0x208], r13d
mov ecx, dword [rbp + 0x20c]
mov qword [rbp - 0x30], r14
mov dword [rbp - 0x28], r14d
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
mov dword [rbp - 8], r14d
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x38], r14
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp - 0x18], rax
add ecx, 8
cmp ecx, 8
jb 0x14002ea5a
lea rdx, [rcx + 7]
and edx, 0xfffffff8
cmp edx, ecx
jb 0x14002ea5a
mov r13d, edx
mov qword [rbp - 0x40], r13
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r13d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 0x10], rax
mov rcx, rax
test rax, rax
jne 0x14002c260
mov r13d, 0xd0000017
jmp 0x14002c3d7
mov eax, dword [rbp + 0x208]
lea rdx, [rcx + 4]
mov qword [rbp - 0x58], r15
mov r8, r15
mov qword [rbp - 0x60], r12
mov r9, r12
mov dword [rcx], eax
cmp rdx, rcx
jb 0x14002c395
mov eax, dword [rbp + 0x20c]
mov dword [rdx], eax
lea rax, [rdx + 4]
cmp rax, rdx
jb 0x14002c399
mov rdx, qword [rbp - 0x18]
mov qword [rcx + r13 - 8], rdx
mov rcx, rax
mov r8d, dword [rbp + 0x20c]
mov rdx, qword [rbp + 0x210]
call sub.msvcrt.dll_memcpy
mov eax, dword [rbp - 0x40]
mov r13, qword [rbp + 0x10]
mov qword [rbp - 0x30], r13
mov dword [rbp - 0x28], eax
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14002e5b2
add rax, 8
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x78]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x80], rax
mov r9, rax
test rax, rax
je 0x14002e5b2
mov r8d, dword [rbp - 0x28]
mov al, r14b
mov byte [rsp + 0x60], al
mov rcx, r14
mov edx, r8d
test r8d, r8d
je 0x14002c33b
mov r8d, 1
xor al, byte [rcx + r13]
add rcx, r8
cmp rcx, rdx
jb 0x14002c32b
mov byte [rsp + 0x60], al
mov rcx, r9
mov qword [rbp + 0x6f0], rbx
or r10d, 0xffffffff
mov qword [rsp + 0x68], rcx
mov dword [rbp + 0x30], r14d
mov r8, r13
mov dword [rbp + 0x10], r14d
mov r9d, r14d
and edx, 7
je 0x14002c4cc
mov ecx, r14d
mov r10d, r14d
mov dword [rbp - 0x48], ecx
test edx, edx
je 0x14002c4a9
mov esi, 0x38
lea eax, [rsi - 0x37]
movzx r11d, byte [r8]
inc r8
cmp ecx, 4
jae 0x14002c3e3
lea ecx, [rsi - 0x20]
shl r11d, cl
or r9d, r11d
jmp 0x14002c3eb
mov qword [rbp + 0x10], rcx
mov r13d, 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x10]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or r13d, 0x10000000
mov dword [rbp + 0x30], r13d
jl 0x14002e5c1
mov r13d, 0xd000000d
mov edi, dword [rbp - 0x68]
mov dword [rbp + 0x30], r13d
jmp 0x14002e8ef
mov ecx, esi
shl r11d, cl
or r10d, r11d
mov ecx, dword [rbp - 0x48]
sub esi, 8
add ecx, eax
mov dword [rbp + 0x30], r10d
mov dword [rbp + 0x10], r9d
mov dword [rbp - 0x48], ecx
cmp ecx, edx
jl 0x14002c37e
mov al, byte [rsp + 0x60]
xor r9d, 0xb17a307a
mov rbx, qword [rsp + 0x68]
xor r10d, 0x42f6b18d
mov dword [rbp - 0x48], r14d
mov r11d, r10d
mov ecx, r9d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov r14d, 1
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x30], r13
cmp dword [rbp - 0x48], 4
lea r13, [rbx + 1]
mov qword [rsp + 0x68], r13
jge 0x14002c455
rol ecx, 8
mov r13d, ecx
jmp 0x14002c45c
rol r11d, 8
mov r13d, r11d
add dword [rbp - 0x48], r14d
mov byte [rbx], r13b
mov r13, qword [rsp + 0x68]
mov rbx, r13
cmp dword [rbp - 0x48], edx
jl 0x14002c43e
mov rcx, r13
mov r13, qword [rbp - 0x30]
mov qword [rsp + 0x68], rcx
movabs rbx, 0xc81ecb17b1b54a58
mov r14d, 0
cmp edx, 4
jbe 0x14002c4a2
lea ecx, [r14 + 8]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
jmp 0x14002c4c7
mov r10d, r14d
jae 0x14002c4cc
jmp 0x14002c4b7
mov r9d, 0xb17a307a
mov dword [rbp + 0x10], r14d
mov dword [rbp + 0x30], r14d
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r9d, cl
shl r9d, cl
mov rcx, qword [rsp + 0x68]
mov edx, dword [rbp - 0x28]
mov r11d, edx
shr rdx, 3
test rdx, rdx
je 0x14002c815
movzx eax, word [rbp + 0x6f2]
lea r12, [rcx + 7]
mov r13d, dword [rbp + 0x30]
lea r15, [r8 + 2]
mov r14d, dword [rbp + 0x10]
mov rsi, rdx
mov dword [rbp - 0x48], eax
movzx eax, word [rbp + 0x6f4]
movzx r11d, bx
movzx ecx, byte [r15 - 1]
movzx r8d, byte [r15 - 2]
movzx edi, byte [r15 + 2]
shl r8d, 8
or r8d, ecx
shl edi, 8
movzx ecx, byte [r15]
lea r15, [r15 + 8]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r15 - 7]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r15 - 5]
or edi, ecx
movzx ecx, byte [r15 - 4]
shl edi, 8
or edi, ecx
movzx ecx, byte [r15 - 3]
shl edi, 8
or edi, ecx
movzx ecx, word [rbp + 0x6f2]
xor r10d, edi
mov edx, r10d
sub edx, r11d
xor edx, r8d
xor edx, r9d
mov r9d, edx
ror edx, 0xf
imul edx, ecx
xor r9d, dword [rbp + 0x6f4]
mov ecx, r9d
ror ecx, 7
add edx, ecx
xor r10d, edx
mov ecx, r10d
ror ecx, 0xa
lea edx, [r10 + rbx]
ror edx, 9
imul edx, eax
sub edx, ecx
movzx ecx, word [rbp + 0x6f6]
xor r9d, edx
mov edx, eax
xor edx, r9d
rol edx, 4
imul edx, ecx
mov ecx, r9d
rol ecx, 5
add edx, ecx
mov ecx, dword [rbp + 0x6f4]
xor r10d, edx
mov edx, r10d
xor edx, ebx
sub ecx, edx
xor r9d, ecx
movzx ecx, word [rbp + 0x6f2]
mov edx, r9d
sub edx, r11d
imul edx, ecx
mov ecx, r9d
shr ecx, 6
sub edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x6f6]
mov ecx, r10d
ror ecx, 0xf
xor ecx, eax
imul ecx, r11d
xor r9d, ecx
mov ecx, r9d
not ecx
ror ecx, 3
add ecx, edx
imul ecx, eax
xor r10d, ecx
mov ecx, r10d
sub ecx, r11d
sub ecx, dword [rbp + 0x6f4]
xor r9d, ecx
mov edx, r9d
ror edx, 0xa
movzx ecx, word [rbp + 0x6f6]
xor ecx, r9d
imul ecx, dword [rbp - 0x48]
xor edx, ecx
xor r10d, edx
mov edx, r11d
xor edx, r10d
mov ecx, r10d
rol edx, 6
imul edx, eax
ror ecx, 3
xor edx, ecx
xor r9d, edx
movzx edx, word [rbp + 0x6f6]
mov ecx, r9d
ror ecx, 0xf
sub ecx, edx
imul ecx, r11d
xor r10d, ecx
xor edx, r10d
mov ecx, r10d
imul edx, r11d
shr ecx, 1
xor edx, ecx
mov ecx, r10d
xor r9d, edx
shr ecx, 0xf
mov edx, r10d
sub edx, eax
rol edx, 3
imul edx, r11d
xor edx, ecx
movzx ecx, word [rbp + 0x6f2]
xor r9d, edx
mov edx, r9d
sub edx, eax
imul edx, ecx
mov ecx, r9d
shr ecx, 0xd
sub edx, ecx
xor r10d, edx
mov edx, ebx
sub edx, r10d
mov ecx, r10d
ror edx, 9
imul edx, eax
ror ecx, 0xb
xor edx, ecx
xor r9d, edx
movzx edx, word [rbp + 0x6f6]
mov ecx, r9d
sub ecx, edx
sub ecx, ebx
xor r10d, ecx
movzx ecx, word [rbp + 0x6f2]
xor ecx, r10d
mov edx, r10d
ror edx, 7
imul ecx, r11d
sub ecx, edx
movzx edx, word [rbp + 0x6f6]
xor r9d, ecx
movzx ecx, word [rbp + 0x6f2]
xor edx, r9d
rol edx, 4
imul edx, ecx
mov ecx, r9d
ror ecx, 0x10
sub edx, ecx
xor r10d, edx
mov edx, ebx
sub edx, r10d
mov ecx, r10d
ror edx, 0xa
imul edx, eax
ror ecx, 4
add edx, ecx
xor r9d, edx
mov edx, r9d
sub edx, ebx
movzx ecx, word [rbp + 0x6f6]
ror edx, 4
imul edx, ecx
mov ecx, r9d
ror ecx, 9
xor edx, ecx
xor r10d, edx
mov edx, r10d
mov ecx, r10d
xor edx, dword [rbp + 0x6f4]
rol edx, 8
imul edx, r11d
rol ecx, 2
sub edx, ecx
movzx ecx, word [rbp + 0x6f2]
xor r9d, edx
mov edx, dword [rbp + 0x6f4]
sub edx, r9d
ror edx, 0xb
imul edx, ecx
mov ecx, r9d
ror ecx, 0xc
sub edx, ecx
xor r10d, edx
movzx edx, word [rbp + 0x6f2]
xor edx, r10d
mov ecx, r10d
xor r10d, dword [rbp + 0x6f4]
imul edx, eax
shr ecx, 8
xor edx, ecx
xor r9d, edx
xor r10d, r9d
xor r9d, r14d
mov byte [r12 - 4], r9b
xor r10d, ebx
xor r10d, r13d
ror r9d, 8
mov byte [r12], r10b
mov r14d, r8d
mov byte [r12 - 5], r9b
lea r12, [r12 + 8]
ror r10d, 8
mov r13d, edi
mov byte [r12 - 9], r10b
ror r9d, 8
mov byte [r12 - 0xe], r9b
ror r10d, 8
mov byte [r12 - 0xa], r10b
ror r9d, 8
ror r10d, 8
mov byte [r12 - 0xf], r9b
mov byte [r12 - 0xb], r10b
ror r10d, 8
ror r9d, 8
sub rsi, 1
jne 0x14002c507
mov al, byte [rsp + 0x60]
xor r14d, r14d
mov r15, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
mov rdi, qword [rsp + 0x78]
mov r13, qword [rbp - 0x30]
mov r11, qword [rbp - 0x40]
movzx ecx, al
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x68], r13
mov qword [rax + r11], rcx
mov qword [rbp + 0x110], 8
mov qword [rbp + 0x118], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x14002c873
mov r13d, 0xc0000017
jmp 0x14002cadf
mov rcx, qword [rbp - 0x78]
mov ecx, ecx
mov dword [rax], ecx
mov qword [rbp - 0x30], r13
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x78]
mov edx, 8
mov r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
jne 0x14002c8b8
mov rax, qword [rsp + 0x68]
jmp 0x14002c9d6
mov rax, qword [rbp - 0x40]
mov qword [rax + 8], rdx
mov r8, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rax + 8]
mov r8d, r8d
mov qword [rbp - 0x40], rax
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x68], r13
mov r13, qword [rbp - 0x40]
mov qword [rbp - 0x78], rdi
mov dword [r13 + 0x10], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002c9da
mov qword [r13 + 0x18], rax
mov r8, qword [rsp + 0x68]
mov rcx, rax
mov edx, 0x80
mov qword [rbp - 0x30], r8
lea rax, [0x140000000]
lea rax, [rax + 0x1139b0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [r13 + 0x20], 8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov eax, 8
mov r8d, eax
mov edx, eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x14002cabb
mov rax, qword [rsp + 0x68]
mov rdi, r13
mov rdi, qword [rbp - 0x78]
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x30], rax
mov r13d, 0xc0000017
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x18], r14
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14002ca20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x40]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14002ca58
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14002ca90
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x40]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x40]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, r14
test r13d, r13d
js 0x14002cadf
jmp 0x14002cad7
mov qword [r13 + 0x28], rax
mov rdx, qword [rbp - 0x40]
mov r13d, r14d
mov rax, qword [0x140113a50]
mov rcx, qword [rdx + 0x28]
mov qword [rcx], rax
mov rax, rdx
mov qword [rbp + 0x18], rax
mov qword [rbp - 0x18], r14
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x14002cbf8
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14002cb55
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x18]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14002cb8d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x18]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x14002cbc5
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x18]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp - 0x30]
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x30], rcx
jmp 0x14002cc00
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x18]
or r13d, 0x10000000
mov dword [rbp + 0x30], r13d
jl 0x14002cccd
lea rax, [rdx + 0x20]
mov r13, rdx
mov qword [rbp - 0x78], rax
mov eax, dword [rax]
mov dword [rbp - 0x48], eax
lea rax, [rdx + 0x10]
mov qword [rbp - 0x60], rax
mov eax, dword [rax]
mov dword [rbp - 0x28], eax
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x14002e529
lea r9d, [rax + 4]
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
cmp r9d, eax
jb 0x14002e59b
mov r8d, dword [rbp - 0x28]
add r8d, r9d
cmp r8d, r9d
jb 0x14002e59b
lea eax, [r8 + 4]
cmp eax, r8d
jb 0x14002e59b
mov r8d, dword [rbp - 0x48]
add r8d, eax
cmp r8d, eax
jb 0x14002e59b
mov eax, r8d
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x80], rcx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x48], rax
mov rcx, rax
test rax, rax
jne 0x14002cf49
mov r13d, 0xd0000017
mov dword [rbp + 0x30], r13d
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14002ccf3
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x30]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x14002cdc9
mov rcx, qword [rax + 8]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002cd38
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x18]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002cd70
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x18]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002cda8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x18]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
cmp qword [rbp + 0x20], r14
je 0x14002cdf0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x20]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
cmp qword [rbp + 0x28], r14
je 0x14002ce17
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x28]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x50]
test rax, rax
je 0x14002ceed
mov rcx, qword [rax + 8]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002ce5c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x50]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002ce94
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x50]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002cecc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0x50]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
cmp qword [rbp + 0x38], r14
je 0x14002cf14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x38]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov edx, dword [rbp - 0x68]
test r13d, r13d
js 0x14002e8ed
mov eax, 1
cmp dword [rbp + 0x1f8], eax
jb 0x14002e8a1
cmp qword [rbp + 0x200], r14
jne 0x14002e5c9
mov r13d, 0xc000000d
jmp 0x14002e8e9
mov eax, dword [r13]
mov r8, rdi
mov rdx, qword [rbp - 0x80]
mov r9, r15
mov dword [rcx], eax
mov r10, r12
lea rax, [rcx + 4]
mov qword [rbp - 0x30], rdx
mov qword [rbp + 0x18], r13
mov r11, r13
mov qword [rbp - 0x80], rax
cmp rax, rcx
jb 0x14002d02e
mov r8d, dword [r13]
mov rcx, rax
mov rdx, qword [r13 + 8]
call sub.msvcrt.dll_memcpy
mov ecx, dword [r13]
add rcx, qword [rbp - 0x80]
cmp rcx, qword [rbp - 0x80]
jb 0x14002d014
mov rdx, qword [rbp - 0x60]
mov eax, dword [rdx]
mov dword [rcx], eax
lea rax, [rcx + 4]
mov qword [rbp - 0x80], rax
cmp rax, rcx
jb 0x14002d014
mov r8d, dword [rdx]
mov rcx, rax
mov rdx, qword [r13 + 0x18]
call sub.msvcrt.dll_memcpy
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x60]
mov ecx, dword [rcx]
add rcx, rdx
mov qword [rbp - 0x80], rcx
cmp rcx, rdx
jb 0x14002d014
mov rdx, qword [rbp - 0x78]
mov eax, dword [rdx]
mov dword [rcx], eax
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x14002d014
mov r8d, dword [rdx]
mov rcx, rax
mov rdx, qword [r13 + 0x28]
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbp - 0x78]
mov eax, dword [rcx]
mov rcx, qword [rbp - 0x80]
add rcx, 4
add rax, rcx
cmp rax, rcx
jb 0x14002d01c
mov r8, qword [rbp - 0x48]
mov eax, dword [rsp + 0x68]
mov qword [rbp + 0x20], r8
jmp 0x14002d078
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x30], rax
jmp 0x14002d03a
mov qword [rbp - 0x48], rcx
mov qword [rbp + 0x18], r11
mov qword [rbp - 0x30], rdx
mov r13d, 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or r13d, 0x10000000
mov dword [rbp + 0x30], r13d
jl 0x14002ccc9
mov eax, dword [rbp - 8]
mov r8, r14
cmp qword [rbp + 0x210], r14
jne 0x14002d08c
mov r13d, 0xc000000d
jmp 0x14002ccc5
mov ecx, 1
cmp dword [rbp + 0x208], ecx
mov rcx, qword [rbp - 0x30]
ja 0x14002d0a8
mov r13d, 0xc000000d
jmp 0x14002dada
mov r9, qword [rbp + 0x210]
mov r11d, r14d
mov rdx, qword [rbp + 0x18]
lea r10, [r9 + 4]
mov dword [rbp - 8], eax
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
cmp r10, r9
jb 0x14002e590
mov r9d, dword [r9]
add r9, r10
cmp r9, r10
jb 0x14002e565
mov eax, 1
add r11d, eax
cmp r11d, eax
mov eax, dword [rbp - 8]
jb 0x14002d0b6
mov eax, dword [r9]
mov dword [rbp - 0x48], eax
lea rax, [r9 + 4]
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
cmp rax, r9
jb 0x14002e585
mov rax, r8
mov qword [rbp + 0x20], rax
cmp qword [rbp + 0x210], r14
je 0x14002d09d
cmp dword [rbp + 0x208], 2
ja 0x14002d130
mov r13d, 0xc000000d
jmp 0x14002e514
mov r9, qword [rbp + 0x210]
mov r10, rdx
mov qword [rbp - 0x60], rax
mov r11, r12
mov rax, rdi
mov dword [rbp - 0x28], r14d
mov r13, r15
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x78], rcx
mov edx, dword [rbp - 8]
mov r15, r13
mov r13d, dword [rbp - 0x48]
mov rdi, rax
mov r8, qword [rbp - 0x60]
mov r12, r11
mov dword [rbp - 0x48], r13d
lea r13, [r9 + 4]
mov dword [rbp - 8], edx
mov rdx, r10
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
cmp r13, r9
jb 0x14002e56d
mov r9d, dword [r9]
add r9, r13
cmp r9, r13
jb 0x14002e565
inc dword [rbp - 0x28]
mov r13, r15
cmp dword [rbp - 0x28], 2
mov qword [rsp + 0x68], r15
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x60], r8
jb 0x14002d154
mov r10d, dword [r9]
lea rax, [r9 + 4]
cmp rax, r9
jb 0x14002e565
mov eax, dword [rbp - 0x48]
add eax, 0x50
cmp eax, 0x50
jb 0x14002e565
lea r9d, [rax + 4]
cmp r9d, eax
jb 0x14002e565
lea eax, [r9 + r10]
cmp eax, r9d
jb 0x14002e565
cmp eax, 0x400000
jbe 0x14002d1fe
mov r13d, 0x8000ffff
jmp 0x14002dada
mov r13d, eax
mov qword [rsp + 0x68], r13
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x78], r11
mov qword [rbp - 0x18], rdx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r13d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14002ccbf
mov r9, rax
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x80]
test rax, rax
jne 0x14002d282
mov rcx, qword [rbp - 0x18]
mov r13d, 0x80070057
mov qword [rbp + 0x18], rcx
mov rcx, qword [rbp - 0x78]
mov qword [rbp + 0x28], r9
jmp 0x14002e518
mov qword [rbp + 0x248], rax
lea r8, [rbp + 0x128]
mov eax, dword [rbp - 8]
lea rdx, [0x1400e3b98]
mov ecx, 1
mov dword [rbp + 0x258], eax
mov qword [rbp + 0x250], r9
mov dword [rbp + 0x25c], r13d
mov dword [rbp + 0x260], r14d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14002d338
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov r10, qword [rsp + 0x68]
movzx r13d, ax
or r13d, 0x80070000
test eax, eax
cmovle r13d, eax
mov eax, 0x80004005
test r13d, r13d
cmovns r13d, eax
mov dword [rbp + 0x30], r13d
cmp r13d, 0xd0000023
jne 0x14002d3b0
mov rcx, qword [rbp - 0x18]
mov r13d, 0x8007007a
mov rax, qword [rbp + 0x28]
mov r8, qword [rbp - 0x80]
mov qword [rbp + 0x18], rcx
mov rcx, qword [rbp - 0x78]
mov qword [rbp + 0x28], rax
mov qword [rbp - 0x30], rcx
mov dword [rbp + 0x30], r13d
mov qword [rbp + 0x20], r8
jmp 0x14002cccd
mov rcx, qword [rbp + 0x128]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14002d2ca
movabs r10, 0x86712ea7345e2b70
xor r9d, r9d
lea rdx, [rbp + 0x248]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x1400d71e8]
mov r10, qword [rsp + 0x68]
mov r13d, eax
or r13d, 0x10000000
mov dword [rbp + 0x30], r13d
jl 0x14002d2fc
mov r10d, dword [rbp + 0x25c]
mov rax, rdi
mov r11, qword [rbp - 0x80]
mov r8, r15
mov rdx, qword [rbp - 0x78]
mov r9, r12
jmp 0x14002d3dd
mov rax, qword [rbp - 0x18]
mov r9, r12
mov rdx, qword [rbp - 0x78]
mov r8, r15
mov r11, qword [rbp - 0x80]
mov rcx, rdx
mov qword [rbp + 0x18], rax
mov rax, rdi
mov qword [rbp - 0x30], rdx
mov qword [rbp + 0x20], r11
test r13d, r13d
js 0x14002cccd
mov qword [rsp + 0x68], r14
cmp r10d, 4
jae 0x14002d41c
mov rax, qword [rbp + 0x28]
mov r13d, 0xd000003e
mov rdi, qword [rbp - 0x60]
mov r12, r9
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x18]
mov qword [rbp + 0x18], rax
mov r15, r8
mov qword [rbp - 0x30], rdx
mov rcx, rdx
mov dword [rbp + 0x30], r13d
mov qword [rbp + 0x20], r11
jmp 0x14002cccd
mov r9, qword [rbp + 0x28]
mov rdi, rax
mov r12, qword [rsp + 0x78]
mov qword [rbp + 0x28], r9
mov r13d, dword [r9]
lea rcx, [r9 + 4]
mov dword [rbp - 0x48], r13d
mov qword [rbp - 0x80], rcx
cmp rcx, r9
jb 0x14002e552
mov r15, qword [rbp - 0x58]
lea eax, [r10 - 4]
mov qword [rbp - 0x30], rdx
mov rcx, rdx
mov rdx, qword [rbp - 0x18]
mov r8, r11
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r11
cmp eax, r13d
jae 0x14002d483
mov r13d, 0xd000003e
mov rcx, qword [rbp - 0x78]
mov rdi, qword [rbp - 0x60]
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x18], rdx
jmp 0x14002d40f
mov rax, qword [rbp - 0x80]
movabs rbx, 0xc81ecb17b1b54a58
add rax, r13
mov qword [rbp + 0x10], r13
cmp rax, qword [rbp - 0x80]
jb 0x14002e547
lea r11d, [r13 + 4]
cmp r11d, 4
jb 0x14002e534
mov eax, r10d
sub eax, r11d
cmp eax, 4
jae 0x14002d4c6
mov r13d, 0xd000003e
jmp 0x14002dada
mov rax, qword [rbp - 0x80]
add rax, r13
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x28], r9
mov r13d, dword [rax]
lea rsi, [rax + 4]
mov qword [rbp - 0x20], rsi
cmp rsi, rax
movabs rsi, 0x7f1137fab69605e
mov dword [rbp - 0x28], r13d
jb 0x14002e529
lea eax, [r11 + 4]
mov dword [rbp - 8], eax
cmp eax, r11d
jb 0x14002e534
mov r11d, dword [rbp - 8]
mov eax, r10d
sub eax, r11d
mov qword [rbp - 0x78], rcx
cmp eax, r13d
jb 0x14002d4bb
mov rax, qword [rbp - 0x20]
add rax, r13
mov qword [rbp - 0x50], r13
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x28], r9
cmp rax, qword [rbp - 0x20]
jb 0x14002e529
add r13d, r11d
mov rax, r8
mov dword [rbp - 8], r13d
cmp r13d, r11d
jb 0x14002e506
mov eax, r10d
sub eax, r13d
cmp eax, 4
jb 0x14002d4bb
mov rax, qword [rbp - 0x20]
add rax, qword [rbp - 0x50]
mov qword [rbp + 0x20], r8
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x18], rdx
mov r13d, dword [rax]
lea r11, [rax + 4]
mov dword [rbp + 0x30], r13d
mov qword [rbp - 0x38], r11
mov qword [rbp + 0x28], r9
cmp r11, rax
jb 0x14002e529
mov eax, dword [rbp - 8]
lea r11d, [rax + 4]
cmp r11d, eax
jb 0x14002e534
mov eax, r10d
mov qword [rbp - 0x70], r8
sub eax, r11d
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x10], rdx
mov qword [rsp + 0x70], r9
cmp eax, r13d
jb 0x14002d4bb
lea eax, [r11 + r13]
mov dword [rbp - 8], eax
cmp eax, r11d
jb 0x14002e534
mov rdx, r8
mov rax, qword [rbp - 0x10]
mov r8, rcx
mov qword [rbp + 0x18], rax
mov r9, rdi
mov rax, qword [rsp + 0x70]
mov r11, r15
mov qword [rbp - 0x30], rcx
mov rcx, r12
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x20], rdx
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r12
cmp r10d, dword [rbp - 8]
je 0x14002d63a
mov qword [rbp + 0x28], rax
mov r13d, 0xd000003e
mov rax, qword [rbp - 0x10]
mov rcx, r8
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x30], r13d
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x20], rdx
jmp 0x14002cccd
mov ecx, dword [rbp - 0x28]
add ecx, dword [rbp - 0x48]
add ecx, r13d
mov eax, r10d
add rcx, 0xc
cmp rcx, rax
je 0x14002d656
mov rax, qword [rsp + 0x70]
jmp 0x14002d614
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 8], rax
mov r9, rax
test rax, rax
jne 0x14002d6b1
mov rax, qword [rsp + 0x70]
mov r13d, 0xd0000017
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp - 0x78]
mov rcx, rax
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x70]
jmp 0x14002e51c
mov r13d, r14d
cmp qword [rbp - 0x80], r14
je 0x14002d70f
mov eax, dword [rbp - 0x48]
mov dword [r9], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x10]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14002d842
mov rax, qword [rbp - 8]
mov qword [rax + 8], rcx
mov r8, qword [rbp + 0x10]
mov rdx, qword [rbp - 0x80]
call sub.msvcrt.dll_memcpy
mov r9, qword [rbp - 8]
mov r10, qword [rbp - 0x38]
jmp 0x14002d71e
mov r10, qword [rbp - 0x38]
mov dword [rax], r14d
mov qword [rbp - 0x38], r10
mov qword [rax + 8], r14
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x28]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], r12
mov qword [rbp + 0x18], rcx
mov qword [rbp + 0x28], r8
mov qword [rbp - 8], r9
cmp qword [rbp - 0x20], r14
je 0x14002d7e7
mov eax, dword [rbp - 0x28]
mov dword [r9 + 0x10], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x50]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x14002d842
mov rax, qword [rbp - 8]
mov qword [rax + 0x18], rcx
mov r8, qword [rbp - 0x50]
mov r13d, r14d
mov rdx, qword [rbp - 0x20]
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x30]
mov r9, qword [rbp - 8]
mov r10, qword [rbp - 0x38]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x20], rax
mov qword [rbp - 8], r9
mov qword [rbp - 0x38], r10
mov qword [rbp + 0x28], r8
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x78], rdi
jmp 0x14002d7fb
mov rdx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x20]
mov r8, qword [rbp + 0x28]
mov dword [r9 + 0x10], r14d
mov qword [r9 + 0x18], r14
test r10, r10
je 0x14002d972
mov eax, dword [rbp + 0x30]
mov dword [r9 + 0x20], eax
mov r13d, eax
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, r13d
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
jne 0x14002d926
mov r13d, 0xc0000017
mov rax, qword [rbp - 8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002d884
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14002d8bc
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002d8f4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdx, qword [rbp + 0x18]
mov r9, r14
mov rax, qword [rbp + 0x20]
mov r8, qword [rbp + 0x28]
jmp 0x14002d97f
mov rax, qword [rbp - 8]
mov qword [rax + 0x28], rcx
mov r8, qword [rsp + 0x70]
mov r13d, r14d
mov rdx, qword [rbp - 0x38]
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x30]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x18]
mov r9, qword [rbp - 8]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], r8
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x78], rdi
jmp 0x14002d97a
mov dword [r9 + 0x20], r14d
mov qword [r9 + 0x28], r14
mov qword [rsp + 0x68], r9
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x10], rcx
mov qword [rsp + 0x70], rax
mov qword [rbp + 8], rdi
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x20], rdx
mov qword [rbp - 0x70], r8
test r13d, r13d
js 0x14002d9aa
mov qword [rbp + 0x50], r9
jmp 0x14002daba
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x28], r8
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x30], rcx
mov qword [rbp + 0x20], rax
test r9, r9
je 0x14002daba
mov rdi, qword [rsp + 0x68]
mov r15, qword [rdi + 8]
test r15, r15
je 0x14002da06
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 8], r14
mov r15, qword [rdi + 0x18]
test r15, r15
je 0x14002da33
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r14
mov r15, qword [rdi + 0x28]
test r15, r15
je 0x14002da60
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
mov r15, qword [rbp - 0x38]
mov rdi, qword [rbp + 8]
mov rcx, qword [rbp - 0x10]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x18], rax
mov rax, qword [rsp + 0x70]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x50], r14
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x30], rcx
or r13d, 0x10000000
mov dword [rbp + 0x30], r13d
jl 0x14002cccd
mov r13, qword [rbp + 0x50]
test r13, r13
jne 0x14002dae3
mov r13d, 0xd000000d
mov dword [rbp + 0x30], r13d
jmp 0x14002cccd
mov rax, qword [r13 + 8]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002dad4
cmp dword [r13], r14d
je 0x14002dad4
mov eax, dword [r13]
add rax, 0xfffffffffffffff8
mov qword [rbp - 0x10], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x10]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 0x38], rax
mov r11, rax
test rax, rax
je 0x14002e08f
mov rdx, qword [rbp - 0x10]
mov al, r14b
mov r8, qword [rsp + 0x70]
and edx, 7
mov rcx, r11
mov qword [rbp - 0x50], rdx
mov byte [rsp + 0x60], al
mov qword [rbp + 0x6f8], rsi
mov qword [rbp + 8], r8
mov qword [rbp - 0x38], rcx
je 0x14002dffa
mov dword [rbp - 0x48], r14d
test edx, edx
je 0x14002dfcf
mov rdx, qword [rbp - 0x30]
mov r11d, 0x38
mov r8, qword [rbp + 0x18]
mov eax, r14d
mov r9, qword [rbp + 0x20]
mov r10, qword [rbp + 0x28]
mov rsi, qword [rbp + 8]
movzx ecx, byte [rsi]
inc rsi
mov dword [rbp - 0x28], ecx
cmp eax, 4
jae 0x14002dba7
mov rdx, qword [rbp - 0x10]
mov rdi, rdx
shr rdi, 3
test rdi, rdi
je 0x14002e00e
mov r10d, 0x92f65a5
mov dword [rbp - 0x28], r14d
mov dword [rbp - 0x48], r14d
mov dword [rbp + 0x30], r14d
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
mov rcx, qword [rbp - 0x38]
jmp 0x14002dc8a
or dword [rbp - 0x48], 0xffffffff
mov r10d, r14d
mov dword [rbp - 0x28], r14d
mov dword [rbp + 0x30], r14d
jmp 0x14002dc8a
mov qword [rbp + 0x38], r14
mov r13d, 0xd0000001
jmp 0x14002ccc5
mov rcx, qword [rbp - 0x78]
mov r13d, 0xd0000095
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x30], rcx
mov dword [rbp + 0x30], r13d
mov qword [rbp + 0x20], rax
jmp 0x14002cccd
mov r13d, 0xd0000095
jmp 0x14002dada
mov r13d, 0xd0000095
mov qword [rbp + 0x28], r9
mov qword [rbp + 0x18], rdx
jmp 0x14002d327
mov r13d, 0xd0000095
jmp 0x14002d46d
mov rcx, qword [rbp - 0x18]
mov r13d, 0xd0000095
mov qword [rbp + 0x18], rcx
jmp 0x14002d405
mov r13d, 0xc0000095
jmp 0x14002e53e
mov r15, qword [rsp + 0x68]
mov r13d, 0xc0000095
mov rcx, qword [rbp - 0x78]
mov qword [rbp + 0x18], r10
jmp 0x14002d327
mov r13d, 0xc0000095
jmp 0x14002d32b
mov r13d, 0xc0000095
jmp 0x14002dada
mov r13d, 0xd0000095
mov qword [rbp + 0x18], rdx
mov dword [rbp + 0x30], r13d
mov qword [rbp - 0x30], rcx
jmp 0x14002cccd
mov r13d, 0xd0000001
mov dword [rbp + 0x30], r13d
jmp 0x14002ccd2
mov rcx, r14
jmp 0x14002cccd
cmp dword [rbp + 0x1f8], r14d
jbe 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r10d, dword [rax]
lea rcx, [rax + 4]
cmp rcx, rax
jb 0x14002e8e3
test r10d, r10d
mov rax, r14
cmovne rax, rcx
mov r9, r15
mov r8, r12
cmp r10d, 4
je 0x14002e60e
mov r13d, 0xc0000023
jmp 0x14002e8e9
mov r13d, dword [rax]
mov dword [rbp + 0x30], r13d
cmp r13d, 0xd0000023
jne 0x14002e625
mov ecx, 0x8007007a
jmp 0x14002e63a
mov ecx, r13d
cmp r13d, 0x8007007a
je 0x14002e63a
test r13d, r13d
js 0x14002e8ed
cmp dword [rbp + 0x1f8], 6
jne 0x14002e8a1
cmp qword [rbp + 0x200], r14
je 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r11d, r14d
lea r10, [rax + 4]
mov r15, r9
mov r12, r8
cmp r10, rax
jb 0x14002e8e3
mov eax, dword [rax]
add rax, r10
cmp rax, r10
jb 0x14002e8e3
mov r10d, 1
add r11d, r10d
cmp r11d, r10d
jb 0x14002e65e
lea r9, [rax + 4]
cmp r9, rax
jb 0x14002e8e3
cmp dword [rax], r14d
mov r8, r14
cmovne r8, r9
cmp dword [rax], 8
jne 0x14002e603
mov r8, qword [r8]
cmp qword [rbp + 0x200], r14
je 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r13d, r14d
mov r9, r12
mov r10, r15
lea r11, [rax + 4]
mov r15, r10
mov r12, r9
cmp r11, rax
jb 0x14002e8e3
mov eax, dword [rax]
add rax, r11
cmp rax, r11
jb 0x14002e8e3
inc r13d
cmp r13d, 2
jb 0x14002e6cd
mov r10d, dword [rax]
lea r9, [rax + 4]
cmp r9, rax
jb 0x14002e8e3
test r10d, r10d
mov rax, r14
cmovne rax, r9
cmp r10d, 4
jne 0x14002e603
mov r11d, dword [rax]
cmp qword [rbp + 0x200], r14
je 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r9, r12
mov dword [rbp - 0x40], r14d
mov r10, r15
lea r13, [rax + 4]
mov r15, r10
mov r12, r9
cmp r13, rax
jb 0x14002e8e3
mov eax, dword [rax]
add rax, r13
cmp rax, r13
jb 0x14002e8e3
mov r13d, dword [rbp - 0x40]
inc r13d
mov dword [rbp - 0x40], r13d
cmp r13d, 3
jb 0x14002e73c
mov r9d, dword [rax]
lea r13, [rax + 4]
cmp r13, rax
jb 0x14002e8e3
test r9d, r9d
mov r10, r14
cmovne r10, r13
cmp qword [rbp + 0x200], r14
je 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r13, r12
mov dword [rbp - 0x40], r14d
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x10], r15
mov r12, r13
lea r13, [rax + 4]
cmp r13, rax
jb 0x14002e8da
mov eax, dword [rax]
add rax, r13
cmp rax, r13
jb 0x14002e8e3
inc dword [rbp - 0x40]
mov r13, r12
cmp dword [rbp - 0x40], 4
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x10], r15
jb 0x14002e7ac
mov r13d, dword [rax]
mov dword [rbp - 0x40], r13d
lea r13, [rax + 4]
cmp r13, rax
jb 0x14002e8e3
cmp dword [rbp - 0x40], r14d
mov rax, r14
cmovne rax, r13
cmp dword [rbp - 0x40], 4
jne 0x14002e603
mov eax, dword [rax]
mov dword [rbp - 0x40], eax
cmp qword [rbp + 0x200], r14
je 0x14002cf3e
mov rax, qword [rbp + 0x200]
mov r13, r12
mov dword [rbp - 0x48], r14d
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x10], r15
mov r12, r13
mov dword [rbp + 0x6c], ecx
mov r13d, dword [rbp - 0x40]
mov dword [rbp - 0x40], r13d
lea r13, [rax + 4]
cmp r13, rax
jb 0x14002e8da
mov eax, dword [rax]
add rax, r13
cmp rax, r13
jb 0x14002e8e3
inc dword [rbp - 0x48]
mov r13, r12
cmp dword [rbp - 0x48], 5
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x10], r15
jb 0x14002e831
mov r13d, dword [rax]
lea rcx, [rax + 4]
mov dword [rbp - 0x48], r13d
cmp rcx, rax
jb 0x14002e8e3
test r13d, r13d
mov rax, r14
mov r13d, r14d
cmovne rax, rcx
cmp dword [rbp - 0x48], 4
jne 0x14002e603
mov ecx, dword [rax]
mov dword [rbp + 0x10], ecx
cmp qword [rbp], r8
je 0x14002e8a9
mov r13d, 0xc004d501
jmp 0x14002e8e9
cmp dword [rbp - 0x40], 4
mov dword [rbp + 0x78], r11d
ja 0x14002e8b9
cmp r9d, 4
jbe 0x14002e8c7
mov r13d, 0x8007007a
mov edi, ecx
mov dword [rbp + 0x30], r13d
jmp 0x14002e8ef
mov r8, r9
mov rdx, r10
mov rcx, rdi
call sub.msvcrt.dll_memcpy
jmp 0x14002ea8c
mov r15, qword [rbp - 0x10]
mov r12, qword [rsp + 0x70]
mov r13d, 0xc0000095
mov dword [rbp + 0x30], r13d
mov edi, edx
mov rax, qword [rbp + 0x210]
and qword [rbp + 0x208], 0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002e931
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x210], r14
mov rax, qword [rbp + 0x200]
and qword [rbp + 0x1f8], 0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002e973
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x200], r14
test r15, r15
je 0x14002e998
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r12, r12
je 0x14002e9bd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r13d, r13d
js 0x14002b896
test edi, edi
je 0x140035862
mov dword [0x140114958], edi
lea rdx, [rbp + 0xcd0]
mov edi, 0x104
mov qword [rbp + 0x138], r14
mov r8d, edi
lea rcx, [0x140000000]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
nop dword [rax + rax]
test eax, eax
je 0x140033474
cmp eax, edi
jne 0x14002ea1e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0x7a
je 0x140033474
movabs r10, 0x9b61a6a01ad19370
mov rax, qword [0x14010d0f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [0x1400d71e8]
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x14002eaa1
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140033474
mov r13d, 0xd0000095
jmp 0x14002ea68
mov r13d, 0xc0000095
mov dword [rbp + 0x30], r13d
mov edi, r9d
jmp 0x14002e8ef
or qword [rbp + 0xf0], 0xffffffffffffffff
mov r13d, 0xc0000095
jmp 0x14002c3d7
test r13d, r13d
js 0x14002ea99
mov eax, dword [rbp + 0x6c]
test eax, eax
cmovne r13d, eax
mov dword [rbp + 0x30], r13d
mov edi, dword [rbp + 0x10]
jmp 0x14002e8ef
movabs r10, 0xcd6cb78050552870
mov rax, qword [str._P_t_]
call qword [0x1400d71e8]
mov edi, dword [0x140114958]
lea rcx, [rbp + 0x680]
xor edx, edx
mov qword [0x140114ce8], rax
mov dword [rbp - 0x40], edi
lea r8d, [rdx + 0x70]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp - 0x10], r14
xorps xmm0, xmm0
mov qword [rbp + 0x8c0], rax
movups xmmword [rbp + 0x750], xmm0
mov dword [rbp + 0x8c8], eax
lea ecx, [rax + 1]
mov qword [rbp + 8], r14
movups xmmword [rbp + 0x8a0], xmm0
movups xmmword [rbp + 0x8b0], xmm0
xor eax, eax
lock cmpxchg dword [0x140114cf4], ecx
jne 0x14002eb0c
mov eax, dword [0x140114cf0]
test eax, eax
jne 0x14002f0e3
mov dword [rbp - 0x48], r14d
mov dword [rbp - 8], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0x338
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x38], rax
test rax, rax
je 0x14002eedb
mov r13d, 0x67
lea rbx, [rax + 7]
mov edi, r14d
lea rsi, [0x1400eafb2]
or ecx, 0xffffffff
mov r12d, r14d
mov r11d, r14d
lea r15d, [r13 - 0x66]
movzx eax, byte [rsi - 1]
movzx r10d, byte [rsi - 2]
movzx r9d, byte [rsi + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [rsi]
lea rsi, [rsi + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 5]
or r9d, eax
xor r11d, r10d
movzx eax, byte [rsi - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [rsi - 3]
shl r9d, 8
or r9d, eax
xor r12d, r9d
xor r12d, r11d
xor r12d, 0xac987321
lea eax, [r12 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r12d
rol eax, 0xa
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 2
sub edx, eax
xor r12d, edx
imul edx, r12d, 0x605e
mov eax, r12d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r12d, edx
mov edx, r12d
xor edx, 0xab69605e
sub eax, edx
xor r11d, eax
mov eax, r11d
mov r8d, r11d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r12d, r8d
mov r8d, 0xab69605e
lea eax, [r12 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r12d
rol eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 8
sub edx, eax
xor r12d, edx
mov eax, r12d
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r12d
ror eax, 0xa
xor edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor edx, eax
xor edx, r12d
mov eax, edx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r11d, eax
lea r12d, [r11 - 0x7f1]
xor r12d, edx
xor r12d, r8d
mov eax, r12d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r12d
shr eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 7
add edx, eax
xor r12d, edx
mov eax, r12d
mov r8d, r12d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r11d, r8d
mov eax, r11d
mov r8d, r11d
xor eax, 0xab69
rol r11d, 7
rol eax, 5
imul edx, eax, 0x7f1
add edx, r11d
xor r12d, edx
mov r11d, r12d
xor r11d, r8d
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r12d, edx
lea eax, [r12 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r12d
ror eax, 6
sub edx, eax
xor r11d, edx
lea eax, [r11 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 0xe
add edx, eax
xor r12d, edx
lea eax, [r12 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r12d
ror eax, 0xe
sub edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor edx, eax
xor r12d, edx
mov eax, r12d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r12d
xor r12d, ecx
rol eax, 2
mov ecx, r9d
xor edx, eax
xor edx, edi
mov edi, r10d
xor r11d, edx
mov byte [rbx - 4], r11b
mov byte [rbx], r12b
lea rbx, [rbx + 8]
ror r11d, 8
mov byte [rbx - 0xd], r11b
ror r12d, 8
mov byte [rbx - 9], r12b
ror r11d, 8
mov byte [rbx - 0xe], r11b
ror r12d, 8
mov byte [rbx - 0xa], r12b
ror r11d, 8
ror r12d, 8
mov byte [rbx - 0xf], r11b
mov byte [rbx - 0xb], r12b
ror r12d, 8
ror r11d, 8
sub r13, r15
jne 0x14002eb7f
mov edi, dword [rbp - 0x40]
mov rax, r14
mov r13d, dword [rbp + 0x30]
mov cl, r14b
mov r15, qword [rbp - 0x38]
movabs rbx, 0xc81ecb17b1b54a58
mov edx, 1
mov r8d, 0x338
xor cl, byte [rax + r15]
add rax, rdx
cmp rax, r8
jb 0x14002ee9f
movzx eax, cl
cmp rax, qword [0x1400eb2e8]
je 0x14002ef43
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, 1
lea r15, [0x140114960]
lea r12d, [rax + 3]
cmp qword [r15], r14
je 0x14002ef04
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add r15, 0x18
sub r12, rax
jne 0x14002eeeb
xor edx, edx
lea r8d, [r12 + 0x60]
lea rcx, [0x140114960]
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
lea ecx, [r12 + 1]
jmp 0x14002f0eb
xor edx, edx
mov byte [r8 + r15 - 1], r14b
lea r12, [0x140114960]
mov rcx, r12
lea r8d, [rdx + 0x60]
call sub.msvcrt.dll_memset
cmp byte [r15], r14b
je 0x14002f0ac
mov qword [rbp + 0x148], r15
jmp 0x14002ef76
lea r12, [0x140114960]
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp word [r15 + rax*2], r14w
jne 0x14002ef7d
lea r15, [r15 + rax*2]
mov eax, dword [rbp - 8]
lea rcx, [rax + rax*2]
lea r8, [r12 + rcx*8]
xor ecx, ecx
mov qword [rbp - 0x38], r8
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14002f098
mov r8, qword [rbp - 0x38]
mov ecx, 0x5a4d
mov r12d, r14d
mov rax, qword [r8]
cmp word [rax], cx
je 0x14002efcc
mov r12d, 0xc000007b
jmp 0x14002f018
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14002efc4
add rcx, qword [r8]
cmp rcx, qword [r8]
jb 0x14002efc4
cmp dword [rcx], 0x4550
jne 0x14002efc4
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14002f006
mov r12d, 0xc000000d
jmp 0x14002f018
mov rax, qword [rcx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r15 + 2]
mov ecx, r14d
add r15, 6
mov dword [rbp - 0x28], eax
mov dword [rbp - 0x68], ecx
test eax, eax
je 0x14002f085
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], r14b
jne 0x14002f034
inc r15
add r15, rax
test r12d, r12d
js 0x14002f071
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14002f09e
mov ecx, dword [rbp - 0x48]
lea rdx, section..data
mov r8, qword [rbp - 0x38]
mov qword [rdx + rcx*8], rax
mov ecx, dword [rbp - 0x68]
mov eax, 1
add dword [rbp - 0x48], eax
add ecx, eax
mov dword [rbp - 0x68], ecx
cmp ecx, dword [rbp - 0x28]
jb 0x14002f02d
jmp 0x14002f08a
mov eax, 1
add dword [rbp - 8], eax
cmp byte [r15], r14b
jne 0x14002ef6f
jmp 0x14002f09e
mov r12d, 0xc000007a
mov r15, qword [rbp + 0x148]
test r15, r15
je 0x14002f0cf
jmp 0x14002f0af
mov r12d, r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r12d, r12d
js 0x14002eedb
mov eax, dword [0x140114cf0]
mov ecx, 1
add eax, ecx
mov dword [0x140114cf0], eax
mov eax, r14d
mov dword [rbp - 0x48], r14d
xchg dword [0x140114cf4], eax
xorps xmm0, xmm0
mov qword [rbp + 0x150], r14
movups xmmword [rbp + 0x760], xmm0
mov dword [rbp - 0x28], r14d
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x20], r14
xor eax, eax
lock cmpxchg dword [0x140114cf4], ecx
jne 0x14002f119
mov eax, dword [0x140114cf0]
test eax, eax
jne 0x14002f6e7
mov dword [rbp - 8], r14d
mov dword [rbp + 0x10], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0x338
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14002f4e4
mov r13d, 0x67
lea rbx, [rax + 7]
mov edi, r14d
lea rsi, [0x1400eafb2]
or ecx, 0xffffffff
mov r11d, r14d
mov r12d, r14d
lea r15d, [r13 - 0x66]
movzx eax, byte [rsi - 1]
movzx r10d, byte [rsi - 2]
movzx r9d, byte [rsi + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [rsi]
lea rsi, [rsi + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [rsi - 5]
or r9d, eax
xor r12d, r10d
movzx eax, byte [rsi - 4]
shl r9d, 8
or r9d, eax
movzx eax, byte [rsi - 3]
shl r9d, 8
or r9d, eax
xor r11d, r9d
xor r11d, r12d
xor r11d, 0xac987321
lea eax, [r11 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r11d
rol eax, 0xa
add edx, eax
xor r12d, edx
lea eax, [r12 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r12d
rol eax, 2
sub edx, eax
xor r11d, edx
imul edx, r11d, 0x605e
mov eax, r11d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r12d, edx
mov eax, r12d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r12d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r11d, edx
mov edx, r11d
xor edx, 0xab69605e
sub eax, edx
xor r12d, eax
mov eax, r12d
mov r8d, r12d
xor eax, 0x137f
ror r8d, 6
imul edx, eax, 0xab69
xor r8d, edx
xor r11d, r8d
mov r8d, 0xab69605e
lea eax, [r11 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r11d
rol eax, 2
add edx, eax
xor r12d, edx
lea eax, [r12 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r12d
rol eax, 8
sub edx, eax
xor r11d, edx
mov eax, r11d
xor eax, r8d
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r11d
ror eax, 0xa
xor edx, eax
xor r12d, edx
mov eax, r12d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r12d
shr eax, 0xa
xor edx, eax
xor edx, r11d
mov eax, edx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r12d, eax
lea r11d, [r12 - 0x7f1]
xor r11d, edx
xor r11d, r8d
mov eax, r11d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r11d
shr eax, 2
add edx, eax
xor r12d, edx
lea eax, [r12 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r12d
rol eax, 7
add edx, eax
xor r11d, edx
mov eax, r11d
mov r8d, r11d
xor eax, 0x137f
ror r8d, 9
imul edx, eax, 0x605e
add r8d, edx
xor r12d, r8d
mov eax, r12d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r12d
rol eax, 7
add edx, eax
xor r11d, edx
xor r12d, r11d
xor r12d, 0xac987321
mov eax, r12d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r11d, edx
lea eax, [r11 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r11d
ror eax, 6
sub edx, eax
xor r12d, edx
lea eax, [r12 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r12d
rol eax, 0xe
add edx, eax
xor r11d, edx
lea eax, [r11 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r11d
ror eax, 0xe
sub edx, eax
xor r12d, edx
mov eax, r12d
xor eax, 0x605e
imul edx, eax, 0xab69
mov eax, r12d
shr eax, 3
xor edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r11d
xor r11d, ecx
rol eax, 2
mov ecx, r9d
xor edx, eax
xor edx, edi
mov edi, r10d
xor r12d, edx
mov byte [rbx - 4], r12b
mov byte [rbx], r11b
lea rbx, [rbx + 8]
ror r12d, 8
mov byte [rbx - 0xd], r12b
ror r11d, 8
mov byte [rbx - 9], r11b
ror r12d, 8
mov byte [rbx - 0xe], r12b
ror r11d, 8
mov byte [rbx - 0xa], r11b
ror r12d, 8
ror r11d, 8
mov byte [rbx - 0xf], r12b
mov byte [rbx - 0xb], r11b
ror r11d, 8
ror r12d, 8
sub r13, r15
jne 0x14002f18c
mov edi, dword [rbp - 0x40]
mov rax, r14
mov r13d, dword [rbp + 0x30]
mov cl, r14b
mov r15, qword [rbp - 0x70]
movabs rbx, 0xc81ecb17b1b54a58
mov edx, 1
mov r8d, 0x338
xor cl, byte [rax + r15]
add rax, rdx
cmp rax, r8
jb 0x14002f4a8
movzx eax, cl
cmp rax, qword [0x1400eb2e8]
je 0x14002f547
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov eax, 1
lea r15, [0x140114960]
lea r12d, [rax + 3]
cmp qword [r15], r14
je 0x14002f50d
mov rcx, qword [r15]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add r15, 0x18
sub r12, rax
jne 0x14002f4f4
xor edx, edx
lea r8d, [r12 + 0x60]
lea rcx, [0x140114960]
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
jmp 0x14002f6ef
xor edx, edx
mov byte [r15 + r8 - 1], r14b
lea r12, [0x140114960]
mov rcx, r12
lea r8d, [rdx + 0x60]
call sub.msvcrt.dll_memset
cmp byte [r15], r14b
je 0x14002f6b0
mov qword [rbp + 0x160], r15
jmp 0x14002f57a
lea r12, [0x140114960]
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp word [r15 + rax*2], r14w
jne 0x14002f581
lea r15, [r15 + rax*2]
mov eax, dword [rbp + 0x10]
lea rcx, [rax + rax*2]
lea r8, [r12 + rcx*8]
xor ecx, ecx
mov qword [rbp - 0x70], r8
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x14002f69c
mov r8, qword [rbp - 0x70]
mov ecx, 0x5a4d
mov r12d, r14d
mov rax, qword [r8]
cmp word [rax], cx
je 0x14002f5d0
mov r12d, 0xc000007b
jmp 0x14002f61c
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14002f5c8
add rcx, qword [r8]
cmp rcx, qword [r8]
jb 0x14002f5c8
cmp dword [rcx], 0x4550
jne 0x14002f5c8
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x14002f60a
mov r12d, 0xc000000d
jmp 0x14002f61c
mov rax, qword [rcx + 0x88]
mov qword [r8 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r8 + 8], eax
mov eax, dword [r15 + 2]
mov ecx, r14d
add r15, 6
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x68], ecx
test eax, eax
je 0x14002f689
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], r14b
jne 0x14002f638
inc r15
add r15, rax
test r12d, r12d
js 0x14002f675
mov rcx, qword [r8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x14002f6a2
mov ecx, dword [rbp - 8]
lea rdx, section..data
mov r8, qword [rbp - 0x70]
mov qword [rdx + rcx*8], rax
mov ecx, dword [rbp - 0x68]
mov eax, 1
add dword [rbp - 8], eax
add ecx, eax
mov dword [rbp - 0x68], ecx
cmp ecx, dword [rbp - 0x40]
jb 0x14002f631
jmp 0x14002f68e
mov eax, 1
add dword [rbp + 0x10], eax
cmp byte [r15], r14b
jne 0x14002f573
jmp 0x14002f6a2
mov r12d, 0xc000007a
mov r15, qword [rbp + 0x160]
test r15, r15
je 0x14002f6d3
jmp 0x14002f6b3
mov r12d, r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r12d, r12d
js 0x14002f4e4
mov eax, dword [0x140114cf0]
mov ecx, 1
add eax, ecx
mov dword [0x140114cf0], eax
xor edx, edx
lea rcx, [rbp + 0x680]
mov eax, r14d
xchg dword [0x140114cf4], eax
lea r8d, [rdx + 0x70]
call sub.msvcrt.dll_memset
mov ecx, 0xf
mov eax, edi
and eax, ecx
xorps xmm0, xmm0
mov dword [rbp - 0x40], eax
mov eax, edi
shr eax, 4
and ax, cx
mov word [rbp + 0xc10], ax
mov eax, edi
shr eax, 8
shr edi, 0xc
and ax, cx
and di, cx
mov word [rbp + 0xc12], ax
movups xmmword [rbp + 0x750], xmm0
mov word [rbp + 0xc14], di
movabs r10, 0x9b61a6a01ad19370
mov rax, qword [0x14010d0f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [0x1400d71e8]
mov qword [rbp - 0x70], rax
mov dword [rbp - 8], 0xffffff
test rax, rax
jne 0x14002f7ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x140030e56
mov r15d, 0x80004005
jmp 0x140030e56
mov qword [rbp + 0x168], r14
mov r15d, r14d
mov qword [rbp + 0x170], r14
mov qword [rbp + 0x178], r14
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x190], r14
mov dword [rbp + 0x80], r14d
movabs r10, 0xbe1926d37a52c070
mov rax, qword [str.PP_t_]
lea r9, [rbp + 0x80]
xor r8d, r8d
lea rdx, [rbp + 0x7c]
lea ecx, [r8 + 8]
call qword [0x1400d71e8]
test eax, eax
jne 0x14002f83f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x14002f9a6
mov r15d, 0x80004005
jmp 0x14002f9a6
mov edi, dword [rbp + 0x80]
add rdi, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x188]
mov rdi, rax
call fcn.140095444
test rdi, rdi
jne 0x14002f88e
mov qword [rbp + 0x188], r14
mov r15d, 0x8007000e
jmp 0x14002f9a6
mov qword [rbp + 0x188], rdi
mov edi, dword [rbp + 0x7c]
inc edi
shl rdi, 2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x190]
mov rdi, rax
call fcn.140095444
test rdi, rdi
jne 0x14002f8dd
mov r15d, 0x8007000e
jmp 0x14002f99f
mov qword [rbp + 0x190], rdi
movabs r10, 0xbe1926d37a52c070
mov r8, qword [rbp + 0x188]
lea r9, [rbp + 0x80]
mov rax, qword [str.PP_t_]
lea rdx, [rbp + 0x7c]
mov ecx, 8
call qword [0x1400d71e8]
test eax, eax
je 0x14002f80e
mov rdi, qword [rbp + 0x188]
mov r12, qword [rbp + 0x190]
cmp dword [rbp + 0x7c], r14d
jbe 0x14002f981
mov esi, r14d
mov ebx, 1
movabs r10, 0xeadd062354d83270
mov rax, qword [0x14010d0b0]
xor edx, edx
mov rcx, rdi
call qword [0x1400d71e8]
mov dword [r12], eax
or rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], r14w
jne 0x14002f95a
lea rdi, [rdi + rax*2]
add r12, 4
add rdi, 2
add esi, ebx
cmp esi, dword [rbp + 0x7c]
jb 0x14002f936
movabs rbx, 0xc81ecb17b1b54a58
mov dword [r12], 0x409
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x168], rax
mov eax, dword [rbp + 0x7c]
inc eax
mov dword [rbp - 0x68], eax
mov qword [rbp + 0x190], r14
lea rcx, [rbp + 0x190]
call fcn.140095444
lea rcx, [rbp + 0x188]
call fcn.140095444
test r15d, r15d
js 0x140030184
lea r11, [0x1400eaf10]
mov r10d, r14d
mov r9d, r14d
mov dword [rbp + 0x10], r14d
cmp dword [rbp - 0x68], r14d
jbe 0x14002fa1b
mov rax, qword [rbp + 0x168]
mov r8, r14
mov edx, r14d
mov rdi, r11
mov ecx, dword [rdi]
cmp dword [r8 + rax], ecx
je 0x14002fa15
mov ecx, 1
add rdi, 4
add edx, ecx
cmp edx, 0x26
jb 0x14002f9ee
add r9d, ecx
add r8, 4
cmp r9d, dword [rbp - 0x68]
jae 0x14002fa1b
jmp 0x14002f9e8
mov r10d, edx
mov dword [rbp + 0x10], edx
mov edi, r10d
mov dword [rbp - 0x68], r14d
movabs r10, 0xf3552e1936d87370
mov ecx, dword [r11 + rdi*4]
lea rdx, [rbp + 0xc20]
mov rax, qword [0x14010d0a8]
xor r9d, r9d
lea r8d, [r9 + 0x55]
call qword [0x1400d71e8]
test eax, eax
je 0x14002fa9c
movabs r10, 0xe375262d7cd44270
mov rax, qword [0x14010d090]
lea r8, [rbp + 0x7a0]
mov r9d, 0x10
lea rcx, [rbp + 0xc20]
lea edx, [r9 + 0x48]
call qword [0x1400d71e8]
mov r9d, 1
test eax, eax
jle 0x14002faa2
mov r15d, dword [rbp + 0x7ac]
shr r15d, 0x1b
and r15d, r9d
mov dword [rbp - 0x68], r15d
jmp 0x14002faa2
mov r9d, 1
lea rcx, str.Segoe_UI_Light
mov r8d, 0x13
lea rdx, [rbp + 0xb70]
mov qword [rdx], rcx
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r14w
jne 0x14002fabd
lea rcx, [rcx + rax*2]
add rdx, 8
add rcx, 2
sub r8, r9
jne 0x14002fab6
lea rcx, [rdi + rdi*2]
lea rdx, [0x140000000]
movzx eax, byte [rcx + rdx + 0xeae90]
mov rax, qword [rbp + rax*8 + 0xb70]
mov qword [rbp - 0x38], rax
movzx eax, byte [rcx + rdx + 0xeae91]
mov rax, qword [rbp + rax*8 + 0xb70]
mov qword [rbp - 0x50], rax
movzx eax, byte [rcx + rdx + 0xeae92]
mov rax, qword [rbp + rax*8 + 0xb70]
mov qword [rbp - 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0x1c90
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x14002fb57
mov r15d, 0x8007000e
jmp 0x140030184
mov esi, r14d
lea r11, [rax + 7]
or r13d, 0xffffffff
lea r15, [0x1400e8f12]
mov r9d, r14d
mov r10d, r14d
mov ebx, 0x392
mov r12d, 1
movzx eax, byte [r15 - 1]
movzx r8d, byte [r15 - 2]
movzx edi, byte [r15 + 2]
shl r8d, 8
or r8d, eax
shl edi, 8
movzx eax, byte [r15]
lea r15, [r15 + 8]
shl r8d, 8
or r8d, eax
movzx eax, byte [r15 - 7]
shl r8d, 8
or r8d, eax
movzx eax, byte [r15 - 5]
or edi, eax
xor r10d, r8d
movzx eax, byte [r15 - 4]
shl edi, 8
or edi, eax
movzx eax, byte [r15 - 3]
shl edi, 8
or edi, eax
xor r9d, edi
xor r9d, r10d
xor r9d, 0xac987321
lea eax, [r9 + 0x54969fa2]
rol eax, 5
imul ecx, eax, 0x137f
mov eax, r9d
rol eax, 0xa
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x7f1137f]
ror eax, 9
imul ecx, eax, 0xab69
mov eax, r10d
rol eax, 2
sub ecx, eax
xor r9d, ecx
imul ecx, r9d, 0x605e
mov eax, r9d
shr eax, 0xd
sub ecx, eax
sub ecx, 0x756c8a2
xor r10d, ecx
mov eax, r10d
xor eax, 0xab69
rol eax, 6
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 2
sub ecx, eax
mov eax, 0x7f1137f
xor r9d, ecx
mov ecx, r9d
xor ecx, 0xab69605e
sub eax, ecx
xor r10d, eax
mov eax, r10d
mov edx, r10d
xor eax, 0x137f
ror edx, 6
imul ecx, eax, 0xab69
xor edx, ecx
xor r9d, edx
mov edx, 0xab69605e
lea eax, [r9 + 0x7f1137f]
ror eax, 0xf
imul ecx, eax, 0x605e
mov eax, r9d
rol eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 + 0x54969fa2]
ror eax, 0xe
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 8
sub ecx, eax
xor r9d, ecx
mov eax, r9d
xor eax, edx
ror eax, 0xc
imul ecx, eax, 0x137f
mov eax, r9d
ror eax, 0xa
xor ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x7f1
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 0xa
xor ecx, eax
xor ecx, r9d
mov eax, ecx
not eax
ror eax, 5
add eax, 0x605e
imul eax, eax, 0x7f1
xor r10d, eax
lea r9d, [r10 - 0x7f1]
xor r9d, ecx
xor r9d, edx
mov eax, r9d
xor eax, 0x7f1
rol eax, 2
imul ecx, eax, 0x137f
mov eax, r9d
shr eax, 2
add ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x7f1137f]
ror eax, 6
imul ecx, eax, 0xab69
mov eax, r10d
rol eax, 7
add ecx, eax
xor r9d, ecx
mov eax, r9d
mov edx, r9d
xor eax, 0x137f
ror edx, 9
imul ecx, eax, 0x605e
add edx, ecx
xor r10d, edx
mov eax, r10d
xor eax, 0xab69
rol eax, 5
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 7
add ecx, eax
xor r9d, ecx
xor r10d, r9d
xor r10d, 0xac987321
mov eax, r10d
ror eax, 3
imul ecx, eax, 0x137f
sub ecx, 0xd0dd417
xor r9d, ecx
lea eax, [r9 - 0x7f1137f]
ror eax, 1
imul ecx, eax, 0x605e
mov eax, r9d
ror eax, 6
sub ecx, eax
xor r10d, ecx
lea eax, [r10 - 0x54969fa2]
rol eax, 3
imul ecx, eax, 0x7f1
mov eax, r10d
rol eax, 0xe
add ecx, eax
xor r9d, ecx
lea eax, [r9 - 0x54969fa2]
rol eax, 0xf
imul ecx, eax, 0x137f
mov eax, r9d
ror eax, 0xe
sub ecx, eax
xor r10d, ecx
mov eax, r10d
xor eax, 0x605e
imul ecx, eax, 0xab69
mov eax, r10d
shr eax, 3
xor ecx, eax
xor r9d, ecx
mov eax, r9d
xor eax, 0x7f1137f
rol eax, 4
imul ecx, eax, 0x605e
mov eax, r9d
xor r9d, r13d
rol eax, 2
mov r13d, edi
xor ecx, eax
xor ecx, esi
mov esi, r8d
xor r10d, ecx
mov byte [r11 - 4], r10b
mov byte [r11], r9b
lea r11, [r11 + 8]
ror r10d, 8
mov byte [r11 - 0xd], r10b
ror r9d, 8
mov byte [r11 - 9], r9b
ror r10d, 8
mov byte [r11 - 0xe], r10b
ror r9d, 8
mov byte [r11 - 0xa], r9b
ror r10d, 8
ror r9d, 8
mov byte [r11 - 0xf], r10b
mov byte [r11 - 0xb], r9b
ror r9d, 8
ror r10d, 8
sub rbx, r12
jne 0x14002fb7a
mov r13d, dword [rbp + 0x30]
mov rax, r14
mov r12, qword [rsp + 0x68]
xorps xmm1, xmm1
movabs rbx, 0xc81ecb17b1b54a58
mov ecx, 0x1c90
movdqu xmm0, xmmword [rax + r12]
add rax, 0x10
pxor xmm0, xmm1
movdqa xmm1, xmm0
cmp rax, rcx
jb 0x14002fe83
psrldq xmm0, 8
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
pxor xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 1
pxor xmm1, xmm0
movd eax, xmm1
movzx eax, al
cmp rax, qword [0x1400eaba0]
je 0x14002ff0c
mov r15d, 0xc004d501
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x178], r14
jmp 0x140030184
mov r8d, dword [rbp + 0x10]
lea rdx, [rbp + 0xb00]
mov qword [rbp + 0x170], r12
mov r15d, r14d
mov qword [rbp + 0x178], rcx
mov edi, 6
mov ecx, r14d
cmp r8d, ecx
jne 0x14002ff38
mov qword [rdx], r12
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], r14b
jne 0x14002ff3c
inc rax
add r12, rax
mov eax, 1
add ecx, eax
cmp ecx, 0x26
jb 0x14002ff30
add rdx, 8
sub rdi, rax
jne 0x14002ff2d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
xor edx, edx
lea r8d, [rdi + 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
lea rcx, [rbp + 0x180]
mov rdi, rax
call fcn.140095444
mov r8d, 1
test rdi, rdi
jne 0x14002ffad
mov qword [rbp + 0x180], r14
mov r15d, 0x8007000e
jmp 0x14003018a
mov qword [rbp + 0x180], rdi
lea rcx, [rbp + 0xc10]
xor eax, eax
mov qword [rsp + 0x68], rcx
xorps xmm0, xmm0
mov edx, r14d
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov r12, r14
mov rax, qword [rbp + 0x178]
mov qword [rbp + 0x178], rax
mov dword [rbp + 0x10], edx
movzx edi, word [rcx]
lea rcx, [0x1400eb2f0]
mov eax, r14d
cmp di, word [rcx]
je 0x140030006
add eax, r8d
add rcx, 2
cmp eax, 6
jb 0x14002fff0
jmp 0x1400300f0
mov rax, qword [rbp + rax*8 + 0xb00]
or rcx, 0xffffffffffffffff
mov qword [rbp - 0x80], rax
inc rcx
cmp byte [rax + rcx], r14b
jne 0x140030016
lea r9d, [r8 + rcx]
movabs r10, 0x8f85170d18d27270
mov r8, rax
mov dword [rsp + 0x28], r14d
mov rax, qword [0x14010d0c0]
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], r14
call qword [0x1400d71e8]
mov dword [rbp - 0x18], eax
test eax, eax
je 0x14003015b
movsxd rdi, eax
add rdi, rdi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x180]
mov qword [rcx + r12], rax
mov rcx, qword [rbp + 0x180]
cmp qword [rcx + r12], r14
je 0x14002fb4c
mov rdx, qword [rcx + r12]
or rcx, 0xffffffffffffffff
mov r8, qword [rbp - 0x80]
inc rcx
cmp byte [r8 + rcx], r14b
jne 0x1400300a7
mov r9d, 1
add r9d, ecx
movabs r10, 0x8f85170d18d27270
mov eax, dword [rbp - 0x18]
mov ecx, 0xfde9
mov dword [rsp + 0x28], eax
mov rax, qword [0x14010d0c0]
mov qword [rsp + 0x20], rdx
xor edx, edx
call qword [0x1400d71e8]
test eax, eax
je 0x140030131
mov edx, dword [rbp + 0x10]
mov r8d, 1
mov rcx, qword [rsp + 0x68]
add edx, r8d
add rcx, 2
mov dword [rbp + 0x10], edx
add r12, 8
mov qword [rsp + 0x68], rcx
cmp edx, 3
jb 0x14002ffe3
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x150], rax
mov eax, dword [rbp - 0x68]
mov dword [rbp + 0x680], eax
mov qword [rbp + 0x180], r14
jmp 0x14003018a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x140030184
mov r15d, 0x80004005
jmp 0x140030184
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
mov eax, 0x80004005
test r15d, r15d
cmovns r15d, eax
mov r8d, 1
cmp qword [rbp + 0x180], r14
je 0x14003021e
mov eax, 3
mov r12, r14
mov qword [rsp + 0x68], rax
mov rcx, qword [rbp + 0x180]
cmp qword [rcx + r12], r14
je 0x140030210
mov rax, qword [rcx + r12]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x1400301b9
mov rdi, qword [rbp + 0x180]
lea rcx, [rcx*2 + 2]
xor eax, eax
mov rdi, qword [rdi + r12]
rep stosb byte [rdi], al
mov rax, qword [rbp + 0x180]
mov rdi, qword [rax + r12]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
mov r8d, 1
add r12, 8
sub rax, r8
mov qword [rsp + 0x68], rax
jne 0x1400301a4
mov rdi, qword [rbp + 0x170]
test rdi, rdi
je 0x140030235
mov rcx, qword [rbp + 0x178]
xor eax, eax
rep stosb byte [rdi], al
lea rcx, [rbp + 0x180]
call fcn.140095444
lea rcx, [rbp + 0x170]
call fcn.140095444
lea rcx, [rbp + 0x168]
call fcn.140095444
test r15d, r15d
js 0x140030e39
mov rax, qword [rbp + 0x150]
xorps xmm0, xmm0
mov rcx, qword [rax]
mov qword [rbp + 0x688], rcx
mov rcx, qword [rax + 8]
mov qword [rbp + 0x690], rcx
mov rcx, qword [rax + 0x10]
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x698], rcx
mov dword [rbp + 0x228], 0x10
movabs r10, 0xadb51e5154d11b70
mov rax, qword [0x14010d168]
lea r8, [rbp + 0x228]
xor edx, edx
xor r9d, r9d
lea ecx, [rdx + 0x42]
call qword [0x1400d71e8]
test eax, eax
jne 0x1400302fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
mov dword [rbp + 0x684], r14d
test eax, eax
cmovle r15d, eax
mov eax, 0x80004005
test r15d, r15d
cmovns r15d, eax
jmp 0x140030e39
mov eax, dword [rbp + 0x22c]
and eax, 1
mov dword [rbp + 0x684], eax
mov r15d, dword [rbp - 0x40]
mov eax, 0x2a
mov ecx, r15d
mov dword [rbp - 0x18], eax
sub ecx, 1
je 0x140030342
sub ecx, 1
je 0x140030339
cmp ecx, 1
jne 0x14003034c
mov r12d, 0xe1
mov dword [rbp - 0x48], r12d
mov dword [rbp - 0x28], r12d
jmp 0x14003034c
mov dword [rbp - 0x48], 0xf
jmp 0x140030345
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x28], 0xb
mov edi, 0x60
lea rcx, [rbp + 0xa20]
xor edx, edx
mov dword [rbp - 0x68], edi
lea r12d, [rdi + 0x7c]
mov r8d, r12d
call sub.msvcrt.dll_memset
mov word [rbp + 0xa64], r12w
movabs r10, 0xd1659e5312d9a870
mov rax, qword [str._Q_t_]
lea r8, [rbp + 0xa20]
or edx, 0xffffffff
xor ecx, ecx
call qword [0x1400d71e8]
test eax, eax
je 0x1400303cc
mov eax, dword [rbp + 0xacc]
movzx edi, word [rbp + 0xac6]
and qword [rbp + 0x760], 0
mov dword [rbp + 0x768], eax
mov eax, dword [rbp + 0xad0]
mov dword [rbp + 0x76c], eax
lea eax, [r12 - 0x7c]
cmp edi, eax
cmovb edi, eax
mov dword [rbp - 0x68], edi
mov eax, 1
lea rcx, [rbp + 0x900]
cmp r15d, eax
mov rax, qword [rbp - 0x20]
cmove rax, qword [rbp - 0x38]
xor edx, edx
mov qword [rbp - 0x20], rax
lea r8d, [rdx + 0x5c]
call sub.msvcrt.dll_memset
mov r15d, r14d
movabs r10, 0x9b61a6a01ad19370
mov rax, qword [0x14010d0f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [0x1400d71e8]
mov r12, rax
test rax, rax
je 0x14003091d
movabs r10, 0xb354a64f56d8b370
mov ecx, dword [rbp - 0x48]
mov r8d, 0x48
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x91c]
neg eax
mov dword [rbp + 0x910], 0x190
mov edx, 0x20
mov dword [rbp + 0x900], eax
mov byte [rbp + 0x91a], 5
call fcn.14001ca60
movabs r10, 0xfab916f870535070
mov rax, qword [0x14010d020]
lea rcx, [rbp + 0x900]
call qword [0x1400d71e8]
test rax, rax
jne 0x1400304c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x1400304c7
mov r15d, 0x80004005
jmp 0x1400304c7
mov qword [rbp + 0x6a0], rax
movabs r10, 0xb7b1b729165e9270
mov rax, qword [0x14010d160]
mov rdx, r12
xor ecx, ecx
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
xor edx, edx
lea rcx, [rbp + 0x960]
lea r8d, [rdx + 0x5c]
call sub.msvcrt.dll_memset
mov r15d, r14d
movabs r10, 0x9b61a6a01ad19370
mov rax, qword [0x14010d0f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [0x1400d71e8]
mov r12, rax
test rax, rax
je 0x14003091d
movabs r10, 0xb354a64f56d8b370
mov ecx, dword [rbp - 0x28]
mov r8d, 0x48
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x97c]
neg eax
mov dword [rbp + 0x970], 0x190
mov edx, 0x20
mov dword [rbp + 0x960], eax
mov byte [rbp + 0x97a], 5
call fcn.14001ca60
movabs r10, 0xfab916f870535070
mov rax, qword [0x14010d020]
lea rcx, [rbp + 0x960]
call qword [0x1400d71e8]
test rax, rax
jne 0x1400305cb
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x1400305d2
mov r15d, 0x80004005
jmp 0x1400305d2
mov qword [rbp + 0x6a8], rax
movabs r10, 0xb7b1b729165e9270
mov rax, qword [0x14010d160]
mov rdx, r12
xor ecx, ecx
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
mov edi, dword [rbp - 0x40]
mov r12d, r14d
mov ecx, edi
mov edx, r14d
sub ecx, 1
je 0x140030611
sub ecx, 1
je 0x140030647
cmp ecx, 1
jne 0x14003061e
mov r12d, dword [rbp + 0x768]
mov edx, dword [rbp + 0x76c]
mov dword [rbp + 0x758], r12d
mov dword [rbp + 0x75c], edx
mov ecx, edi
sub ecx, 1
je 0x14003066c
sub ecx, 1
je 0x14003065e
cmp ecx, 1
je 0x14003065e
mov eax, dword [rbp - 0x18]
mov dword [rbp - 0x18], eax
mov eax, dword [rbp - 0x48]
jmp 0x140030680
mov eax, dword [rbp + 0x768]
cdq
and edx, 3
lea r12d, [rdx + rax]
mov edx, r14d
sar r12d, 2
jmp 0x14003061e
mov dword [rbp - 0x28], r14d
mov dword [rbp - 0x18], r14d
mov dword [rbp + 0x10], r14d
jmp 0x14003067a
mov dword [rbp - 0x28], reloc.OLEAUT32.dll_DllRegisterServer
mov dword [rbp + 0x10], 0x20
mov eax, r14d
mov dword [rbp - 0x48], eax
sub r12d, dword [rbp - 0x28]
mov r15d, r14d
mov rdi, qword [rbp + 0x688]
sub r12d, eax
mov dword [rbp + 0x6d4], r12d
mov dword [rbp + 0x6c4], r12d
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp + 0x6a0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov qword [rbp - 0x38], rax
movabs r10, 0xfa2817df7ad26370
mov rax, qword [str.PQ_t_]
lea r9, [rbp + 0x6bc]
mov rdx, rdi
mov qword [rsp + 0x28], r14
mov rdi, qword [rbp - 0x70]
or r8d, 0xffffffff
mov rcx, rdi
mov dword [rsp + 0x20], 0xc50
call qword [0x1400d71e8]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x14003072f
movabs r10, 0xe62ca6fe305b8a70
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
mov rdi, qword [rbp + 0x690]
mov r15d, r14d
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp + 0x6a8]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov qword [rbp - 0x38], rax
movabs r10, 0xfa2817df7ad26370
mov rax, qword [str.PQ_t_]
lea r9, [rbp + 0x6cc]
mov rdx, rdi
mov qword [rsp + 0x28], r14
mov rdi, qword [rbp - 0x70]
or r8d, 0xffffffff
mov rcx, rdi
mov dword [rsp + 0x20], 0xc50
call qword [0x1400d71e8]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x1400307d2
movabs r10, 0xe62ca6fe305b8a70
mov rdx, rax
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
mov r15d, dword [rbp - 0x40]
mov edx, 1
mov ecx, dword [rbp + 0x6c4]
lea eax, [r15 - 2]
cmp eax, edx
ja 0x140030800
mov r12d, dword [rbp + 0x6d4]
cmp ecx, r12d
cmovg r12d, ecx
cmp dword [rbp + 0x680], r14d
je 0x14003086a
mov edi, dword [rbp - 0x48]
mov edx, edi
sub edx, ecx
add edx, r12d
movabs r10, 0xef788e6016d10870
mov r8d, dword [rbp - 0x18]
lea rcx, [rbp + 0x6bc]
mov rax, qword [0x14010d150]
call qword [0x1400d71e8]
sub edi, dword [rbp + 0x6d4]
mov r8d, dword [rbp + 0x6c8]
add r8d, dword [rbp + 0x10]
lea edx, [r12 + rdi]
movabs r10, 0xef788e6016d10870
mov rax, qword [0x14010d150]
lea rcx, [rbp + 0x6cc]
call qword [0x1400d71e8]
jmp 0x1400308bb
movabs r10, 0xef788e6016d10870
mov r8d, dword [rbp - 0x18]
lea rcx, [rbp + 0x6bc]
mov edx, dword [rbp - 0x28]
mov rax, qword [0x14010d150]
call qword [0x1400d71e8]
mov r8d, dword [rbp + 0x6c8]
add r8d, dword [rbp + 0x10]
movabs r10, 0xef788e6016d10870
mov edx, dword [rbp - 0x28]
lea rcx, [rbp + 0x6cc]
mov rax, qword [0x14010d150]
call qword [0x1400d71e8]
lea eax, [r15 - 2]
mov edx, 1
cmp eax, edx
jbe 0x140030bf4
cmp r15d, edx
jne 0x140030c11
xor edx, edx
mov dword [rbp + 0x6b8], 0xffffff
lea rcx, [rbp + 0x9c0]
lea r8d, [rdx + 0x5c]
call sub.msvcrt.dll_memset
mov r15d, r14d
movabs r10, 0x9b61a6a01ad19370
mov rax, qword [0x14010d0f8]
xor edx, edx
xor ecx, ecx
mov r8d, 0x403
call qword [0x1400d71e8]
mov rdi, rax
test rax, rax
jne 0x14003094e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x140030e39
mov r15d, 0x80004005
jmp 0x140030e39
movabs r10, 0xb354a64f56d8b370
mov edx, dword [rbp - 0x68]
mov r8d, 0x48
mov rax, qword [0x14010d0b8]
lea ecx, [r8 - 0x3d]
call qword [0x1400d71e8]
mov r8, qword [rbp - 0x50]
lea rcx, [rbp + 0x9dc]
neg eax
mov dword [rbp + 0x9d0], 0x190
mov edx, 0x20
mov dword [rbp + 0x9c0], eax
mov byte [rbp + 0x9da], 5
call fcn.14001ca60
movabs r10, 0xfab916f870535070
mov rax, qword [0x14010d020]
lea rcx, [rbp + 0x9c0]
call qword [0x1400d71e8]
test rax, rax
jne 0x1400309ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
test r15d, r15d
js 0x1400309f4
mov r15d, 0x80004005
jmp 0x1400309f4
mov qword [rbp + 0x6b0], rax
movabs r10, 0xb7b1b729165e9270
mov rax, qword [0x14010d160]
mov rdx, rdi
xor ecx, ecx
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
mov rdi, qword [rbp + 0x698]
mov r15d, r14d
mov dword [rbp + 0x6e4], r12d
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp + 0x6b0]
mov rcx, qword [rbp - 0x70]
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov r12, rax
movabs r10, 0xfa2817df7ad26370
mov rax, qword [str.PQ_t_]
lea r9, [rbp + 0x6dc]
mov rdx, rdi
mov qword [rsp + 0x28], r14
mov rdi, qword [rbp - 0x70]
or r8d, 0xffffffff
mov rcx, rdi
mov dword [rsp + 0x20], 0x460
call qword [0x1400d71e8]
test eax, eax
mov eax, 0x80004005
cmove r15d, eax
test r12, r12
je 0x140030ab5
movabs r10, 0xe62ca6fe305b8a70
mov rax, qword [0x14010d078]
mov rdx, r12
mov rcx, rdi
call qword [0x1400d71e8]
test r15d, r15d
js 0x140030e39
mov eax, dword [rbp + 0x6e4]
mov ecx, 0x5a
add eax, 0x18
cmp eax, ecx
cmovl eax, ecx
mov dword [rbp + 0x6e4], eax
lea eax, [rcx - 0x3a]
mov dword [rbp + 0x6e8], eax
movabs r10, 0xb354a64f56d8b370
mov edi, dword [rbp - 0x68]
lea r15d, [rcx + 6]
mov ecx, dword [rbp + 0x6dc]
mov r8d, r15d
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov dword [rbp + 0x6dc], eax
movabs r10, 0xb354a64f56d8b370
mov ecx, dword [rbp + 0x6e0]
mov r8d, r15d
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov dword [rbp + 0x6e0], eax
movabs r10, 0xb354a64f56d8b370
mov ecx, dword [rbp + 0x6e4]
mov r8d, r15d
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov dword [rbp + 0x6e4], eax
movabs r10, 0xb354a64f56d8b370
mov ecx, dword [rbp + 0x6e8]
mov r8d, r15d
mov rax, qword [0x14010d0b8]
mov edx, edi
call qword [0x1400d71e8]
mov r8d, dword [rbp + 0x6d8]
add r8d, 0x24
mov dword [rbp + 0x6e8], eax
cmp dword [rbp + 0x680], r14d
je 0x140030bd3
mov edx, dword [rbp + 0x6bc]
cmp edx, dword [rbp + 0x6cc]
cmovge edx, dword [rbp + 0x6cc]
movabs r10, 0xef788e6016d10870
mov rax, qword [0x14010d150]
lea rcx, [rbp + 0x6dc]
call qword [0x1400d71e8]
mov edx, 1
jmp 0x140030c11
mov edx, dword [rbp + 0x6c4]
cmp edx, dword [rbp + 0x6d4]
cmovle edx, dword [rbp + 0x6d4]
sub edx, dword [rbp + 0x6e4]
add edx, dword [rbp + 0x6dc]
jmp 0x140030bae
mov eax, dword [rbp + 0x6d8]
mov dword [rbp + 0x75c], eax
mov dword [rbp + 0x758], r12d
mov dword [rbp + 0x6b8], 0xffa8a8a8
mov ecx, dword [rbp - 0x40]
mov r12d, dword [rbp + 0x680]
mov r15d, dword [rbp + 0x75c]
mov edi, dword [rbp + 0x758]
sub ecx, 1
je 0x140030e2e
sub ecx, 1
je 0x140030d1b
cmp ecx, 1
jne 0x140030e36
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x7e8], xmm0
mov qword [rbp + 0x808], rax
movups xmmword [rbp + 0x7f8], xmm0
movabs r10, 0x95359f2d7edc9a70
mov rax, qword [0x14010d148]
xor ecx, ecx
call qword [0x1400d71e8]
mov dword [rbp + 0x7e8], 0x28
movabs r10, 0x93fc1ebd305e9370
mov rcx, rax
lea rdx, [rbp + 0x7e8]
mov rax, qword [str.PR_t_]
call qword [0x1400d71e8]
test eax, eax
je 0x140030e36
movabs r10, 0x8ce4ae9652ddab70
mov rax, qword [0x14010d140]
lea rdx, [rbp + 0x7fc]
xor ecx, ecx
call qword [0x1400d71e8]
movabs r10, 0x8ce4ae9652ddab70
mov rax, qword [0x14010d140]
lea rdx, [rbp + 0x804]
xor ecx, ecx
call qword [0x1400d71e8]
mov eax, dword [rbp + 0x804]
sub eax, edi
imul ecx, eax, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov rcx, qword [rbp + 0x804]
shr rcx, 0x20
sub ecx, r15d
imul ecx, ecx, 0x32
jmp 0x140030e0f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x7c0], xmm0
mov qword [rbp + 0x7e0], rax
movups xmmword [rbp + 0x7d0], xmm0
movabs r10, 0x95359f2d7edc9a70
mov rax, qword [0x14010d148]
xor ecx, ecx
call qword [0x1400d71e8]
mov dword [rbp + 0x7c0], 0x28
movabs r10, 0x93fc1ebd305e9370
mov rcx, rax
lea rdx, [rbp + 0x7c0]
mov rax, qword [str.PR_t_]
call qword [0x1400d71e8]
test eax, eax
je 0x140030e36
movabs r10, 0x8ce4ae9652ddab70
mov rax, qword [0x14010d140]
lea rdx, [rbp + 0x7d4]
xor ecx, ecx
call qword [0x1400d71e8]
movabs r10, 0x8ce4ae9652ddab70
mov rax, qword [0x14010d140]
lea rdx, [rbp + 0x7dc]
xor ecx, ecx
call qword [0x1400d71e8]
mov eax, dword [rbp + 0x7dc]
test r12d, r12d
je 0x140030de8
lea ecx, [rax + rax*4]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
add edx, dword [rbp + 0x7d4]
jmp 0x140030dfe
sub eax, edi
imul ecx, eax, 0x5f
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov rax, qword [rbp + 0x7dc]
shr rax, 0x20
sub eax, r15d
imul ecx, eax, 0x5f
mov dword [rbp + 0x750], edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0x754], edx
jmp 0x140030e36
and qword [rbp + 0x750], 0
mov r15d, r14d
movabs r10, 0xb7b1b729165e9270
mov rdx, qword [rbp - 0x70]
xor ecx, ecx
mov rax, qword [0x14010d160]
call qword [0x1400d71e8]
mov r12d, 1
xor eax, eax
lock cmpxchg dword [0x140114cf4], r12d
jne 0x140030e5c
mov eax, dword [0x140114cf0]
test eax, eax
jle 0x140030ee2
sub eax, r12d
mov dword [0x140114cf0], eax
jne 0x140030ee2
mov rax, r12
lea rdi, [0x140114960]
mov r12d, 4
cmp qword [rdi], r14
je 0x140030ea7
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rdi, 0x18
sub r12, rax
jne 0x140030e8e
xor edx, edx
lea r8d, [r12 + 0x60]
lea rcx, [0x140114960]
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
mov r12d, 1
mov eax, r14d
lea rcx, [rbp + 0x150]
xchg dword [0x140114cf4], eax
call fcn.140095444
test r15d, r15d
js 0x140031fb1
mov rdi, qword [rbp + 0x750]
lea rcx, [rbp + 0x300]
xor edx, edx
mov qword [rbp + 0x198], rdi
lea r8d, [rdx + 0x68]
call sub.msvcrt.dll_memset
mov r15d, r12d
movabs r10, 0xea2596a652d04370
mov rcx, qword [rsp + 0x70]
mov edx, 7
mov rax, qword [0x14010d050]
call qword [0x1400d71e8]
test rax, rax
je 0x14003103b
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x300]
mov rax, qword [str._O_t_]
mov edx, 0x68
call qword [0x1400d71e8]
test eax, eax
je 0x14003103b
mov eax, 0x20
cmp word [rbp + 0x312], ax
jne 0x140030fa4
cmp qword [rbp + 0x318], r14
je 0x140030fa4
cmp dword [rbp + 0x304], r14d
jle 0x140030fa4
cmp dword [rbp + 0x308], r14d
jg 0x140030fa7
mov r15d, r14d
test r15d, r15d
je 0x14003103e
mov r12d, dword [rbp - 0x40]
movabs r10, 0xef788e6016d10870
mov r8d, dword [rbp + 0x19c]
lea rcx, [rbp + 0x6bc]
mov rax, qword [0x14010d150]
mov edx, edi
call qword [0x1400d71e8]
movabs r10, 0xef788e6016d10870
mov r8d, dword [rbp + 0x19c]
lea rcx, [rbp + 0x6cc]
mov rax, qword [0x14010d150]
mov edx, edi
call qword [0x1400d71e8]
mov edi, 1
cmp r12d, edi
jne 0x140031052
mov ecx, dword [rbp + 0x684]
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0xb26720
movabs r10, 0xa66c2f7d5ed6d070
mov rax, qword [0x14010d028]
call qword [0x1400d71e8]
mov qword [rbp + 8], rax
jmp 0x140031052
mov r15d, r14d
mov r12d, dword [rbp - 0x40]
mov eax, 1
cmp r12d, eax
je 0x140030fb4
mov edi, eax
movabs r10, 0xc0b816137adf0070
mov rax, qword [0x14010d080]
mov edx, edi
mov rdi, qword [rsp + 0x70]
mov rcx, rdi
call qword [0x1400d71e8]
cmp dword [rbp + 0x680], r14d
mov ecx, 0x20812
mov dword [rbp - 0x18], eax
mov eax, 0x810
cmovne eax, ecx
mov dword [rbp - 0x48], eax
test r15d, r15d
je 0x140031c0b
mov eax, dword [rbp + 0x684]
lea rcx, [rbp + 0x450]
mov rdi, qword [rbp + 0x688]
mov r12d, 0x68
mov dword [rbp - 0x28], eax
mov r8d, r12d
mov rax, qword [rbp + 0x6a0]
xor edx, edx
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x50], rdi
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rcx, [rbp + 0x3e0]
xor edx, edx
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp - 0x20], r14
mov dword [rbp - 0x68], r14d
xorps xmm0, xmm0
mov qword [rbp + 0x830], rax
mov r15d, r14d
mov dword [rbp + 0x838], eax
movups xmmword [rbp + 0x810], xmm0
movups xmmword [rbp + 0x820], xmm0
movups xmmword [rbp + 0x770], xmm0
test rdi, rdi
je 0x140031f8e
movabs r10, 0xea2596a652d04370
mov rdi, qword [rsp + 0x70]
lea edx, [rax + 7]
mov rax, qword [0x14010d050]
mov rcx, rdi
call qword [0x1400d71e8]
test rax, rax
je 0x140031bfa
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x450]
mov rax, qword [str._O_t_]
mov edx, r12d
call qword [0x1400d71e8]
test eax, eax
je 0x140031186
mov rax, qword [rbp + 0x468]
mov r15d, dword [rbp + 0x458]
mov qword [rbp - 0x20], rax
mov eax, dword [rbp + 0x454]
mov dword [rbp - 0x68], eax
movabs r10, 0xb2ed17fc1cdcd370
mov rax, qword [str.PM_t_]
mov rcx, rdi
call qword [0x1400d71e8]
mov r12, rax
test rax, rax
je 0x140031bfa
mov ecx, dword [rbp + 0x6c4]
xorps xmm0, xmm0
mov eax, dword [rbp + 0x6c0]
sub ecx, dword [rbp + 0x6bc]
sub eax, dword [rbp + 0x6c8]
mov dword [rbp + 0x814], ecx
mov dword [rbp + 0x818], eax
mov qword [rbp + 0x1a0], r14
movdqu xmmword [rbp + 0x820], xmm0
mov qword [rbp + 0x830], r14
mov dword [rbp + 0x838], r14d
mov dword [rbp + 0x810], 0x28
mov dword [rbp + 0x81c], 0x200001
movabs r10, 0xcf05a77938531370
mov rax, qword [0x14010d018]
lea r9, [rbp + 0x1a0]
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x810]
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov rcx, r12
call qword [0x1400d71e8]
mov qword [rbp - 0x70], rax
mov rdi, rax
test rax, rax
jne 0x14003126e
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov eax, 0x80004005
test edi, edi
cmovns edi, eax
jmp 0x140031620
movabs r10, 0xeec037b63c533370
mov rax, qword [str._O_t_]
lea r8, [rbp + 0x3e0]
mov edx, 0x68
mov rcx, rdi
call qword [0x1400d71e8]
test eax, eax
mov rcx, r14
mov eax, dword [rbp + 0x6c4]
cmovne rcx, qword [rbp + 0x3f8]
sub eax, dword [rbp + 0x6bc]
mov dword [rbp + 0x778], eax
mov eax, dword [rbp + 0x6c8]
sub eax, dword [rbp + 0x6c0]
mov dword [rbp + 0x77c], eax
mov qword [rsp + 0x68], rcx
movabs r10, 0xe62ca6fe305b8a70
mov rax, qword [0x14010d078]
mov rdx, rdi
mov rcx, r12
call qword [0x1400d71e8]
movabs r10, 0xc0b816137adf0070
mov rax, qword [0x14010d080]
mov edx, 1
mov rcx, r12
call qword [0x1400d71e8]
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp - 0x38]
mov rcx, r12
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov rdi, qword [0x14010d0e8]
mov qword [rbp - 0x38], rax
movabs r10, 0xfd20bef77ed52170
mov rax, qword [str.PO_t_]
xor ecx, ecx
call qword [0x1400d71e8]
mov r8, rax
movabs r10, 0x94f1065e3ade9370
lea rdx, [rbp + 0x770]
mov rcx, r12
mov rax, rdi
call qword [0x1400d71e8]
movabs r10, 0xfa2817df7ad26370
mov eax, dword [rbp - 0x48]
lea r9, [rbp + 0x770]
mov rdx, qword [rbp - 0x50]
or r8d, 0xffffffff
mov qword [rsp + 0x28], r14
mov rcx, r12
mov dword [rsp + 0x20], eax
mov rax, qword [str.PQ_t_]
call qword [0x1400d71e8]
mov eax, 1
cmp dword [rbp - 0x40], eax
jne 0x1400313d5
cmp dword [rbp - 0x28], r14d
je 0x1400313cc
movabs r10, 0x8b0406ad5454f070
lea ecx, [rax + 7]
mov rax, qword [0x14010d118]
call qword [0x1400d71e8]
mov dword [rbp - 0x28], eax
jmp 0x1400313dc
mov dword [rbp - 0x28], 0xffffff
jmp 0x1400313dc
mov dword [rbp - 0x28], 0xffa8a8a8
mov eax, dword [rbp + 0x6bc]
mov r10d, r14d
mov ecx, dword [rbp + 0x6c0]
mov r9d, eax
mov r11d, dword [rbp - 0x68]
neg r9d
test eax, eax
mov edx, ecx
mov r8d, r14d
mov edi, r14d
cmovns r10d, eax
cmovns r9d, r14d
mov eax, dword [rbp + 0x778]
neg edx
test ecx, ecx
cmovns edx, r14d
cmovns r8d, ecx
sub eax, r9d
sub r11d, r10d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rbp + 0x77c]
sub eax, edx
sub r15d, r8d
cmp eax, r15d
cmovl r15d, eax
test r11d, r11d
jle 0x1400315df
test r15d, r15d
jle 0x1400315df
imul edx, dword [rbp + 0x778]
mov esi, r14d
movsxd rdi, dword [rbp - 0x68]
movsxd rax, r9d
imul r8d, edi
mov qword [rbp - 0x80], rdi
movsxd rcx, edx
add rcx, rax
mov rax, qword [rsp + 0x68]
lea rdx, [rax + rcx*4]
movsxd rax, r10d
movsxd rcx, r8d
add rcx, rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x20]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x778]
shl rcx, 2
mov qword [rsp + 0x68], rcx
mov rbx, qword [rsp + 0x68]
mov ecx, r15d
mov r15d, dword [rbp - 0x28]
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x20], rax
mov r10, rax
mov r8d, r11d
sub r10, rdx
mov qword [rsp + 0x68], r8
lea r9, [rdx + 2]
mov r13d, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140031597
movzx edi, byte [r10 + r9]
mov eax, 0x80808081
movzx r8d, dl
movzx ecx, r15b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x27]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x80808081
add dl, dil
mov byte [r10 + r9], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x26]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x80808081
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x80808081
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8, qword [rsp + 0x68]
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
add r9, 4
mov edi, esi
sub r8, r13
mov qword [rsp + 0x68], r8
jne 0x1400314c3
mov rax, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x50]
mov r13, qword [rbp - 0x80]
add rdx, rbx
sub qword [rbp - 0x78], 1
mov qword [rbp - 0x50], rdx
lea rax, [rax + r13*4]
mov qword [rbp - 0x20], rax
jne 0x1400314ab
mov r13d, dword [rbp + 0x30]
movabs rbx, 0xc81ecb17b1b54a58
movabs r10, 0xb2e10636105e9a70
mov rcx, qword [rbp - 0x70]
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x140031620
movabs r10, 0xe62ca6fe305b8a70
mov rdx, rax
mov rcx, r12
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc5540fa17e509b70
mov rax, qword [0x14010d030]
mov rcx, r12
call qword [0x1400d71e8]
test edi, edi
js 0x140031f8e
mov eax, dword [rbp + 0x684]
lea rcx, [rbp + 0x370]
mov rdi, qword [rbp + 0x690]
mov r12d, 0x68
mov dword [rbp - 0x28], eax
mov r8d, r12d
mov rax, qword [rbp + 0x6a8]
xor edx, edx
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x50], rdi
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rcx, [rbp + 0x4c0]
xor edx, edx
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp - 0x20], r14
mov dword [rbp - 0x68], r14d
xorps xmm0, xmm0
mov qword [rbp + 0x860], rax
mov r15d, r14d
mov dword [rbp + 0x868], eax
movups xmmword [rbp + 0x840], xmm0
movups xmmword [rbp + 0x850], xmm0
movups xmmword [rbp + 0x780], xmm0
test rdi, rdi
je 0x140031f8e
movabs r10, 0xea2596a652d04370
mov rdi, qword [rsp + 0x70]
lea edx, [rax + 7]
mov rax, qword [0x14010d050]
mov rcx, rdi
call qword [0x1400d71e8]
test rax, rax
je 0x140031bfa
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x370]
mov rax, qword [str._O_t_]
mov edx, r12d
call qword [0x1400d71e8]
test eax, eax
je 0x140031732
mov rax, qword [rbp + 0x388]
mov r15d, dword [rbp + 0x378]
mov qword [rbp - 0x20], rax
mov eax, dword [rbp + 0x374]
mov dword [rbp - 0x68], eax
movabs r10, 0xb2ed17fc1cdcd370
mov rax, qword [str.PM_t_]
mov rcx, rdi
call qword [0x1400d71e8]
mov r12, rax
test rax, rax
je 0x140031bfa
mov ecx, dword [rbp + 0x6d4]
xorps xmm0, xmm0
mov eax, dword [rbp + 0x6d0]
sub ecx, dword [rbp + 0x6cc]
sub eax, dword [rbp + 0x6d8]
mov dword [rbp + 0x844], ecx
mov dword [rbp + 0x848], eax
mov qword [rbp + 0x1a8], r14
movdqu xmmword [rbp + 0x850], xmm0
mov qword [rbp + 0x860], r14
mov dword [rbp + 0x868], r14d
mov dword [rbp + 0x840], 0x28
mov dword [rbp + 0x84c], 0x200001
movabs r10, 0xcf05a77938531370
mov rax, qword [0x14010d018]
lea r9, [rbp + 0x1a8]
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x840]
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov rcx, r12
call qword [0x1400d71e8]
mov qword [rbp - 0x70], rax
mov rdi, rax
test rax, rax
jne 0x14003181a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov eax, 0x80004005
test edi, edi
cmovns edi, eax
jmp 0x140031bcb
movabs r10, 0xeec037b63c533370
mov rax, qword [str._O_t_]
lea r8, [rbp + 0x4c0]
mov edx, 0x68
mov rcx, rdi
call qword [0x1400d71e8]
test eax, eax
mov rcx, r14
mov eax, dword [rbp + 0x6d4]
cmovne rcx, qword [rbp + 0x4d8]
sub eax, dword [rbp + 0x6cc]
mov dword [rbp + 0x788], eax
mov eax, dword [rbp + 0x6d8]
sub eax, dword [rbp + 0x6d0]
mov dword [rbp + 0x78c], eax
mov qword [rsp + 0x68], rcx
movabs r10, 0xe62ca6fe305b8a70
mov rax, qword [0x14010d078]
mov rdx, rdi
mov rcx, r12
call qword [0x1400d71e8]
movabs r10, 0xc0b816137adf0070
mov rax, qword [0x14010d080]
mov edx, 1
mov rcx, r12
call qword [0x1400d71e8]
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp - 0x38]
mov rcx, r12
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov rdi, qword [0x14010d0e8]
mov qword [rbp - 0x38], rax
movabs r10, 0xfd20bef77ed52170
mov rax, qword [str.PO_t_]
xor ecx, ecx
call qword [0x1400d71e8]
mov r8, rax
movabs r10, 0x94f1065e3ade9370
lea rdx, [rbp + 0x780]
mov rcx, r12
mov rax, rdi
call qword [0x1400d71e8]
movabs r10, 0xfa2817df7ad26370
mov eax, dword [rbp - 0x48]
lea r9, [rbp + 0x780]
mov rdx, qword [rbp - 0x50]
or r8d, 0xffffffff
mov qword [rsp + 0x28], r14
mov rcx, r12
mov dword [rsp + 0x20], eax
mov rax, qword [str.PQ_t_]
call qword [0x1400d71e8]
mov eax, 1
cmp dword [rbp - 0x40], eax
jne 0x14003197e
cmp dword [rbp - 0x28], r14d
je 0x140031975
movabs r10, 0x8b0406ad5454f070
lea ecx, [rax + 7]
mov rax, qword [0x14010d118]
call qword [0x1400d71e8]
jmp 0x140031983
mov dword [rbp - 0x40], 0xffffff
jmp 0x140031989
mov eax, 0xffa8a8a8
mov dword [rbp - 0x40], eax
mov dword [rbp - 8], eax
mov eax, dword [rbp + 0x6cc]
mov r10d, r14d
mov ecx, dword [rbp + 0x6d0]
mov r9d, eax
mov r11d, dword [rbp - 0x68]
neg r9d
test eax, eax
mov edx, ecx
mov r8d, r14d
mov edi, r14d
cmovns r10d, eax
cmovns r9d, r14d
mov eax, dword [rbp + 0x788]
neg edx
test ecx, ecx
cmovns edx, r14d
cmovns r8d, ecx
sub eax, r9d
sub r11d, r10d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rbp + 0x78c]
sub eax, edx
sub r15d, r8d
cmp eax, r15d
cmovl r15d, eax
test r11d, r11d
jle 0x140031b8a
test r15d, r15d
jle 0x140031b8a
imul edx, dword [rbp + 0x788]
movsxd rdi, dword [rbp - 0x68]
movsxd rax, r9d
imul r8d, edi
mov qword [rbp - 0x80], rdi
movsxd rcx, edx
add rcx, rax
mov dword [rbp - 0x48], r14d
mov rax, qword [rsp + 0x68]
lea rdx, [rax + rcx*4]
movsxd rax, r10d
movsxd rcx, r8d
add rcx, rax
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp - 0x20]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x788]
shl rcx, 2
mov qword [rsp + 0x68], rcx
mov ecx, r15d
mov r15d, r14d
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x20], rax
mov esi, dword [rbp - 8]
lea r9, [rdx + 2]
mov r10, rax
mov r8d, r11d
sub r10, rdx
mov qword [rbp - 0x60], r8
mov ebx, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140031b41
movzx edi, byte [r9 + r10]
mov r15d, 0x80808081
movzx r8d, dl
mov eax, r15d
movzx ecx, sil
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x3f]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r9 + r10], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp - 0x3e]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r15d
mov r15d, dword [rbp - 0x48]
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8, qword [rbp - 0x60]
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
add r9, 4
mov edi, r15d
sub r8, rbx
mov qword [rbp - 0x60], r8
jne 0x140031a6c
mov rax, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x50]
add rdx, qword [rsp + 0x68]
sub qword [rbp - 0x78], rbx
mov rsi, qword [rbp - 0x80]
mov qword [rbp - 0x50], rdx
mov dword [rbp - 0x48], r15d
lea rax, [rax + rsi*4]
mov qword [rbp - 0x20], rax
jne 0x140031a53
movabs rbx, 0xc81ecb17b1b54a58
movabs r10, 0xb2e10636105e9a70
mov rcx, qword [rbp - 0x70]
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x140031bcb
movabs r10, 0xe62ca6fe305b8a70
mov rdx, rax
mov rcx, r12
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc5540fa17e509b70
mov rax, qword [0x14010d030]
mov rcx, r12
call qword [0x1400d71e8]
test edi, edi
js 0x140031f8e
mov r12, qword [rsp + 0x70]
mov rdi, r14
jmp 0x14003318a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140031f8e
mov r15d, 1
cmp dword [rbp + 0x684], r14d
jne 0x140031c21
mov al, 0xc0
cmp r12d, r15d
jne 0x140031c23
mov al, 0xff
and word [rbp - 0x28], 0
mov byte [rbp - 0x26], al
mov byte [rbp - 0x25], r15b
mov dword [rbp - 0x68], r14d
mov dword [rbp + 0x10], r14d
mov dword [rbp + 0x38], r14d
movabs r10, 0xb2ed17fc1cdcd370
mov rax, qword [str.PM_t_]
mov rcx, rdi
call qword [0x1400d71e8]
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x140031c6f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140031f8e
cmp r12d, r15d
jne 0x140031d28
mov edx, dword [rbp + 0x6c4]
mov edi, r14d
mov r9d, dword [rbp + 0x6d4]
mov r15d, edx
mov r8d, dword [rbp + 0x6bc]
mov eax, r9d
mov r10d, dword [rbp + 0x6cc]
sub r15d, r8d
mov ecx, dword [rbp + 0x6d8]
sub eax, r10d
mov r11d, dword [rbp + 0x6c0]
cmp eax, r15d
mov r12d, r14d
cmovg r15d, eax
sub ecx, r11d
mov dword [rbp + 0x50], ecx
cmp dword [rbp + 0x680], r14d
je 0x140031ce7
mov ecx, r8d
mov eax, r10d
sub ecx, edx
sub eax, r9d
add ecx, r15d
add eax, r15d
mov dword [rbp - 0x68], ecx
mov edi, ecx
mov dword [rbp + 0x38], eax
mov ecx, dword [rbp + 0x50]
mov r12d, eax
mov eax, dword [rbp + 0x6c8]
sub r12d, r10d
add r12d, r9d
sub edi, r8d
mov dword [rbp + 0x20], r12d
sub eax, r11d
mov r12d, dword [rbp + 0x6d0]
add edi, edx
sub r12d, r11d
mov dword [rbp + 0x28], eax
mov dword [rbp + 0x18], r12d
sub r12d, dword [rbp + 0x6d0]
add r12d, dword [rbp + 0x6d8]
mov dword [rbp - 0x30], r12d
mov r12d, dword [rbp - 0x40]
jmp 0x140031d9b
movups xmm0, xmmword [rbp + 0x6bc]
mov ecx, dword [rbp + 0x75c]
movups xmm1, xmmword [rbp + 0x6cc]
mov r15d, dword [rbp + 0x758]
movdqu xmmword [rbp + 0x740], xmm0
mov eax, dword [rbp + 0x74c]
mov edi, dword [rbp + 0x748]
mov dword [rbp + 0x28], eax
mov eax, dword [rbp + 0x744]
mov dword [rbp + 0x10], eax
mov eax, dword [rbp + 0x740]
movdqu xmmword [rbp + 0x790], xmm1
mov dword [rbp - 0x68], eax
mov eax, dword [rbp + 0x79c]
mov dword [rbp - 0x30], eax
mov eax, dword [rbp + 0x798]
mov dword [rbp + 0x20], eax
mov eax, dword [rbp + 0x794]
mov dword [rbp + 0x18], eax
mov eax, dword [rbp + 0x790]
mov dword [rbp + 0x38], eax
mov dword [rbp + 0x50], ecx
xorps xmm0, xmm0
mov qword [rbp + 0x1b0], r14
neg ecx
mov qword [rbp + 0x8c0], r14
movdqu xmmword [rbp + 0x8b0], xmm0
mov dword [rbp + 0x8a8], ecx
mov dword [rbp + 0x8c8], r14d
mov dword [rbp + 0x8a0], 0x28
mov dword [rbp + 0x8a4], r15d
mov dword [rbp + 0x8ac], 0x200001
movabs r10, 0xcf05a77938531370
mov rcx, qword [rbp - 0x38]
lea r9, [rbp + 0x1b0]
mov rax, qword [0x14010d018]
lea rdx, [rbp + 0x8a0]
mov dword [rsp + 0x28], r14d
xor r8d, r8d
mov qword [rsp + 0x20], r14
call qword [0x1400d71e8]
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x140031e32
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x38]
jmp 0x140031f74
movabs r10, 0xe62ca6fe305b8a70
mov rcx, qword [rbp - 0x38]
mov rdx, rax
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov eax, 1
cmp r12d, eax
jne 0x140031e9d
mov r8, qword [rbp + 8]
test r8, r8
je 0x140031e9d
mov eax, dword [rbp + 0x50]
and qword [rbp + 0x710], 0
mov dword [rbp + 0x71c], eax
mov dword [rbp + 0x718], r15d
movabs r10, 0x94f1065e3ade9370
mov rcx, qword [rbp - 0x38]
lea rdx, [rbp + 0x710]
mov rax, qword [0x14010d0e8]
call qword [0x1400d71e8]
mov eax, dword [rbp + 0x684]
lea rcx, [rbp + 0x530]
mov dword [rbp], eax
mov r12d, 0x68
mov rax, qword [rbp + 0x6a0]
mov r8d, r12d
mov qword [rbp - 0x50], rax
xor edx, edx
mov rax, qword [rbp + 0x688]
mov qword [rbp - 0x20], rax
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rcx, [rbp + 0x5a0]
xor edx, edx
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp - 0x70], r14
xorps xmm0, xmm0
mov dword [rsp + 0x78], r14d
mov r12d, r14d
mov qword [rbp + 0x890], rax
movups xmmword [rbp + 0x870], xmm0
mov dword [rbp + 0x898], eax
movups xmmword [rbp + 0x880], xmm0
movups xmmword [rbp + 0x720], xmm0
cmp qword [rbp - 0x20], r14
je 0x140031f50
movabs r10, 0xea2596a652d04370
mov rcx, qword [rbp - 0x38]
lea edx, [rax + 7]
mov rax, qword [0x14010d050]
call qword [0x1400d71e8]
test rax, rax
jne 0x140032652
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x10]
movabs r10, 0xb2e10636105e9a70
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
test rdi, rdi
je 0x140031f8e
movabs r10, 0xc5540fa17e509b70
mov rax, qword [0x14010d030]
mov rcx, rdi
call qword [0x1400d71e8]
mov rax, qword [rbp + 8]
test rax, rax
je 0x140031fb1
movabs r10, 0xb2e10636105e9a70
mov rcx, rax
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp + 0x688]
or r15, 0xffffffffffffffff
test rax, rax
je 0x14003200f
mov rcx, r15
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x140031fc4
mov rdi, qword [rbp + 0x688]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0x688]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x688], r14
mov rax, qword [rbp + 0x690]
test rax, rax
je 0x140032069
mov rcx, r15
inc rcx
cmp word [rax + rcx*2], r14w
jne 0x14003201e
mov rdi, qword [rbp + 0x690]
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0x690]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x690], r14
mov rdi, qword [rbp + 0x698]
test rdi, rdi
je 0x1400320bc
mov rcx, r15
inc rcx
cmp word [rdi + rcx*2], r14w
jne 0x140032078
lea rcx, [rcx*2 + 2]
xor eax, eax
rep stosb byte [rdi], al
mov rdi, qword [rbp + 0x698]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x698], r14
mov rcx, qword [rbp + 0x6a0]
test rcx, rcx
je 0x1400320e6
movabs r10, 0xb2e10636105e9a70
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov qword [rbp + 0x6a0], r14
mov rcx, qword [rbp + 0x6a8]
test rcx, rcx
je 0x140032110
movabs r10, 0xb2e10636105e9a70
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov qword [rbp + 0x6a8], r14
mov rcx, qword [rbp + 0x6b0]
test rcx, rcx
je 0x14003213a
movabs r10, 0xb2e10636105e9a70
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov qword [rbp + 0x6b0], r14
mov edi, 1
xor eax, eax
lock cmpxchg dword [0x140114cf4], edi
jne 0x14003213f
mov eax, dword [0x140114cf0]
test eax, eax
jle 0x1400321bf
sub eax, edi
mov dword [0x140114cf0], eax
jne 0x1400321bf
mov eax, 1
lea r12, [0x140114960]
mov rdi, r12
lea r15d, [rax + 3]
cmp qword [rdi], r14
je 0x14003218b
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rdi, 0x18
sub r15, rax
jne 0x140032172
xor edx, edx
lea r8d, [r15 + 0x60]
mov rcx, r12
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
lea edi, [r15 + 1]
mov eax, r14d
xchg dword [0x140114cf4], eax
mov eax, dword [0x140114958]
mov dword [rsp + 0x78], eax
movabs r10, 0xcd6cb78050552870
mov rax, qword [str._P_t_]
call qword [0x1400d71e8]
mov r12, rax
xorps xmm0, xmm0
sub r12d, dword [0x140114ce8]
xor eax, eax
mov qword [rbp - 0x10], r12
mov qword [rbp + 0xb68], rax
movups xmmword [rbp + 0xb38], xmm0
movups xmmword [rbp + 0xb48], xmm0
movups xmmword [rbp + 0xb58], xmm0
xor eax, eax
lock cmpxchg dword [0x140114cf4], edi
jne 0x140032218
mov eax, dword [0x140114cf0]
test eax, eax
jne 0x14003335d
mov dword [rbp], r14d
mov dword [rbp - 0x30], r14d
mov dword [rbp + 0x18], r14d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
xor edx, edx
mov r8d, 0x338
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 8], rax
test rax, rax
je 0x1400325ec
mov r15d, 0x67
mov byte [rsp + 0x60], r14b
mov esi, r14d
lea rbx, [rax + 7]
mov r12d, r14d
lea rcx, [0x1400eafb2]
mov r11d, r14d
or r13d, 0xffffffff
lea r14d, [r15 - 0x66]
movzx eax, byte [rcx - 1]
movzx r10d, byte [rcx - 2]
movzx r9d, byte [rcx + 2]
shl r10d, 8
or r10d, eax
shl r9d, 8
movzx eax, byte [rcx]
lea rcx, [rcx + 8]
shl r10d, 8
or r10d, eax
movzx eax, byte [rcx - 7]
shl r10d, 8
or r10d, eax
movzx eax, byte [rcx - 5]
or r9d, eax
xor r11d, r10d
movzx eax, byte [rcx - 4]
mov r8d, r11d
shl r9d, 8
or r9d, eax
movzx eax, byte [rcx - 3]
shl r9d, 8
or r9d, eax
xor r12d, r9d
xor r8d, r12d
xor r8d, 0xac987321
lea eax, [r8 + 0x54969fa2]
rol eax, 5
imul edx, eax, 0x137f
mov eax, r8d
rol eax, 0xa
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x7f1137f]
ror eax, 9
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 2
sub edx, eax
xor r8d, edx
imul edx, r8d, 0x605e
mov eax, r8d
shr eax, 0xd
sub edx, eax
sub edx, 0x756c8a2
xor r11d, edx
mov eax, r11d
xor eax, 0xab69
rol eax, 6
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 2
sub edx, eax
mov eax, 0x7f1137f
xor r8d, edx
mov edx, r8d
xor edx, 0xab69605e
sub eax, edx
xor r11d, eax
mov eax, r11d
mov edi, r11d
xor eax, 0x137f
ror edi, 6
imul edx, eax, 0xab69
xor edi, edx
xor r8d, edi
lea eax, [r8 + 0x7f1137f]
ror eax, 0xf
imul edx, eax, 0x605e
mov eax, r8d
rol eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 + 0x54969fa2]
ror eax, 0xe
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 8
sub edx, eax
xor r8d, edx
mov eax, r8d
mov edi, 0xab69605e
xor eax, edi
ror eax, 0xc
imul edx, eax, 0x137f
mov eax, r8d
ror eax, 0xa
xor edx, eax
xor r11d, edx
mov eax, r11d
xor eax, 0x7f1
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 0xa
xor edx, eax
xor edx, r8d
mov r8d, 0x605e
mov eax, edx
not eax
ror eax, 5
add eax, r8d
imul eax, eax, 0x7f1
xor r11d, eax
lea r12d, [r11 - 0x7f1]
xor r12d, edx
xor r12d, edi
mov eax, r12d
xor eax, 0x7f1
rol eax, 2
imul edx, eax, 0x137f
mov eax, r12d
shr eax, 2
add edx, eax
xor r11d, edx
lea eax, [r11 - 0x7f1137f]
ror eax, 6
imul edx, eax, 0xab69
mov eax, r11d
rol eax, 7
add edx, eax
xor r12d, edx
mov eax, r12d
mov edi, r12d
xor eax, 0x137f
ror edi, 9
imul edx, eax, 0x605e
add edi, edx
xor r11d, edi
mov eax, r11d
xor eax, 0xab69
rol eax, 5
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 7
add edx, eax
xor r12d, edx
xor r11d, r12d
xor r11d, 0xac987321
mov eax, r11d
ror eax, 3
imul edx, eax, 0x137f
sub edx, 0xd0dd417
xor r12d, edx
lea eax, [r12 - 0x7f1137f]
ror eax, 1
imul edx, eax, 0x605e
mov eax, r12d
ror eax, 6
sub edx, eax
xor r11d, edx
lea eax, [r11 - 0x54969fa2]
rol eax, 3
imul edx, eax, 0x7f1
mov eax, r11d
rol eax, 0xe
add edx, eax
xor r12d, edx
lea eax, [r12 - 0x54969fa2]
rol eax, 0xf
imul edx, eax, 0x137f
mov eax, r12d
ror eax, 0xe
sub edx, eax
xor r11d, edx
mov eax, r11d
xor eax, r8d
imul edx, eax, 0xab69
mov eax, r11d
shr eax, 3
xor edx, eax
xor r12d, edx
mov eax, r12d
xor eax, 0x7f1137f
rol eax, 4
imul edx, eax, 0x605e
mov eax, r12d
xor r12d, r13d
rol eax, 2
mov r13d, r9d
xor edx, eax
xor edx, esi
mov esi, r10d
xor r11d, edx
mov byte [rbx - 4], r11b
mov byte [rbx], r12b
lea rbx, [rbx + 8]
ror r11d, 8
mov byte [rbx - 0xd], r11b
ror r12d, 8
mov byte [rbx - 9], r12b
ror r11d, 8
mov byte [rbx - 0xe], r11b
ror r12d, 8
mov byte [rbx - 0xa], r12b
ror r11d, 8
ror r12d, 8
mov byte [rbx - 0xf], r11b
mov byte [rbx - 0xb], r12b
ror r12d, 8
ror r11d, 8
sub r15, r14
jne 0x140032295
mov cl, byte [rsp + 0x60]
xor r14d, r14d
mov r13d, dword [rbp + 0x30]
mov eax, r14d
mov r15, qword [rbp + 8]
movabs rbx, 0xc81ecb17b1b54a58
mov edi, 0x338
lea edx, [r14 + 1]
xor cl, byte [rax + r15]
add rax, rdx
cmp rax, rdi
jb 0x1400325ac
movzx eax, cl
cmp rax, qword [0x1400eb2e8]
je 0x1400331c1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r12, qword [rbp - 0x10]
mov eax, 1
lea rdi, [0x140114960]
lea r15d, [rax + 3]
cmp qword [rdi], r14
je 0x140032615
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rdi, 0x18
sub r15, rax
jne 0x1400325fc
xor edx, edx
lea r8d, [r15 + 0x60]
lea rcx, [0x140114960]
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
lea edi, [r15 + 1]
jmp 0x140033365
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x530]
mov rax, qword [str._O_t_]
mov edx, 0x68
call qword [0x1400d71e8]
test eax, eax
je 0x140032698
mov rax, qword [rbp + 0x548]
mov r12d, dword [rbp + 0x538]
mov qword [rbp - 0x70], rax
mov eax, dword [rbp + 0x534]
mov dword [rsp + 0x78], eax
movabs r10, 0xb2ed17fc1cdcd370
mov rcx, qword [rbp - 0x38]
mov rax, qword [str.PM_t_]
call qword [0x1400d71e8]
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
je 0x140031f44
mov eax, dword [rbp + 0x10]
xorps xmm0, xmm0
sub eax, dword [rbp + 0x28]
sub edi, dword [rbp - 0x68]
mov dword [rbp + 0x878], eax
mov qword [rbp + 0x1b8], r14
movdqu xmmword [rbp + 0x880], xmm0
mov qword [rbp + 0x890], r14
mov dword [rbp + 0x898], r14d
mov dword [rbp + 0x870], 0x28
mov dword [rbp + 0x874], edi
mov dword [rbp + 0x87c], 0x200001
movabs r10, 0xcf05a77938531370
mov rax, qword [0x14010d018]
lea r9, [rbp + 0x1b8]
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x870]
xor r8d, r8d
mov qword [rsp + 0x20], r14
call qword [0x1400d71e8]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140032771
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov eax, 0x80004005
test edi, edi
cmovns edi, eax
jmp 0x140032b11
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x5a0]
mov rax, qword [str._O_t_]
mov edx, 0x68
call qword [0x1400d71e8]
mov rcx, r14
mov dword [rbp + 0x728], edi
test eax, eax
mov eax, dword [rbp + 0x28]
cmovne rcx, qword [rbp + 0x5b8]
sub eax, dword [rbp + 0x10]
mov dword [rbp + 0x72c], eax
mov qword [rbp - 0x78], rcx
movabs r10, 0xe62ca6fe305b8a70
mov rdi, qword [rsp + 0x68]
mov rdx, qword [rbp - 0x80]
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc0b816137adf0070
mov rax, qword [0x14010d080]
mov edx, 1
mov rcx, rdi
call qword [0x1400d71e8]
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp - 0x50]
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov rdi, qword [0x14010d0e8]
mov qword [rbp - 0x50], rax
movabs r10, 0xfd20bef77ed52170
mov rax, qword [str.PO_t_]
xor ecx, ecx
call qword [0x1400d71e8]
mov r8, rax
movabs r10, 0x94f1065e3ade9370
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x720]
mov rax, rdi
call qword [0x1400d71e8]
movabs r10, 0xfa2817df7ad26370
mov eax, dword [rbp - 0x48]
lea r9, [rbp + 0x720]
mov rdx, qword [rbp - 0x20]
or r8d, 0xffffffff
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
mov rax, qword [str.PQ_t_]
call qword [0x1400d71e8]
mov eax, 1
cmp dword [rbp - 0x40], eax
jne 0x1400328ca
cmp dword [rbp], r14d
je 0x1400328c3
movabs r10, 0x8b0406ad5454f070
lea ecx, [rax + 7]
mov rax, qword [0x14010d118]
call qword [0x1400d71e8]
jmp 0x1400328cf
mov eax, 0xffffff
jmp 0x1400328cf
mov eax, 0xffa8a8a8
movsxd r11, dword [rsp + 0x78]
mov r10d, r14d
mov dword [rbp], eax
mov edx, r14d
mov eax, dword [rbp - 0x68]
mov r8d, r11d
mov r9d, eax
mov edi, r14d
neg r9d
test eax, eax
cmovns r10d, eax
cmovns r9d, r14d
mov eax, dword [rbp + 0x10]
mov ecx, eax
neg ecx
test eax, eax
cmovns edx, eax
cmovns ecx, r14d
mov eax, dword [rbp + 0x728]
sub r8d, r10d
sub eax, r9d
cmp eax, r8d
cmovl r8d, eax
mov eax, dword [rbp + 0x72c]
sub eax, ecx
mov dword [rsp + 0x78], r8d
sub r12d, edx
cmp eax, r12d
cmovl r12d, eax
test r8d, r8d
jle 0x140032ace
test r12d, r12d
jle 0x140032ace
imul ecx, dword [rbp + 0x728]
mov esi, dword [rsp + 0x78]
mov ebx, dword [rbp]
movsxd rax, r9d
imul edx, r11d
movsxd rcx, ecx
add rcx, rax
mov qword [rbp - 0x60], r11
mov rax, qword [rbp - 0x78]
mov dword [rbp + 0x28], r14d
lea r8, [rax + rcx*4]
movsxd rax, r10d
movsxd rcx, edx
add rcx, rax
mov qword [rbp - 0x20], r8
mov rax, qword [rbp - 0x70]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x728]
shl rcx, 2
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rax
mov r13d, dword [rbp + 0x28]
lea r9, [r8 + 2]
mov r10, rax
sub r10, r8
mov r8d, esi
mov qword [rbp - 0x58], r8
mov esi, 1
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140032a7f
movzx edi, byte [r9 + r10]
mov r11d, 0x80808081
movzx r8d, dl
mov eax, r11d
movzx ecx, bl
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp + 1]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r9 + r10], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rbp + 2]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r11d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8, qword [rbp - 0x58]
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
add r9, 4
mov edi, r13d
sub r8, rsi
mov qword [rbp - 0x58], r8
jne 0x1400329af
mov rax, qword [rbp - 0x70]
mov r8, qword [rbp - 0x20]
add r8, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x60]
sub r12, rsi
mov esi, dword [rsp + 0x78]
mov qword [rbp - 0x20], r8
mov dword [rbp + 0x28], r13d
lea rax, [rax + rcx*4]
mov qword [rbp - 0x70], rax
jne 0x140032995
mov r13d, dword [rbp + 0x30]
movabs rbx, 0xc81ecb17b1b54a58
movabs r10, 0xb2e10636105e9a70
mov rcx, qword [rbp - 0x80]
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140032b11
movabs r10, 0xe62ca6fe305b8a70
mov rcx, qword [rsp + 0x68]
mov rdx, rax
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc5540fa17e509b70
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x14010d030]
call qword [0x1400d71e8]
test edi, edi
js 0x140031f50
mov eax, dword [rbp + 0x684]
lea rcx, [rbp + 0x290]
mov rdi, qword [rbp + 0x690]
mov r12d, 0x68
mov dword [rsp + 0x78], eax
mov r8d, r12d
mov rax, qword [rbp + 0x6a8]
xor edx, edx
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x20], rdi
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rcx, [rbp + 0x610]
xor edx, edx
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rbp - 0x70], r14
mov dword [rbp], r14d
xorps xmm0, xmm0
mov qword [rbp + 0x8f0], rax
mov r12d, r14d
mov dword [rbp + 0x8f8], eax
movups xmmword [rbp + 0x8d0], xmm0
movups xmmword [rbp + 0x8e0], xmm0
movups xmmword [rbp + 0x730], xmm0
test rdi, rdi
je 0x140031f50
movabs r10, 0xea2596a652d04370
mov rdi, qword [rbp - 0x38]
lea edx, [rax + 7]
mov rax, qword [0x14010d050]
mov rcx, rdi
call qword [0x1400d71e8]
test rax, rax
jne 0x140032bef
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
jmp 0x140031f54
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x290]
mov rax, qword [str._O_t_]
mov edx, 0x68
call qword [0x1400d71e8]
test eax, eax
je 0x140032c34
mov rax, qword [rbp + 0x2a8]
mov r12d, dword [rbp + 0x298]
mov qword [rbp - 0x70], rax
mov eax, dword [rbp + 0x294]
mov dword [rbp], eax
movabs r10, 0xb2ed17fc1cdcd370
mov rax, qword [str.PM_t_]
mov rcx, rdi
call qword [0x1400d71e8]
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
je 0x140032bde
mov edi, dword [rbp + 0x20]
xorps xmm0, xmm0
mov eax, dword [rbp + 0x18]
sub edi, dword [rbp + 0x38]
sub eax, dword [rbp - 0x30]
mov dword [rbp + 0x8d4], edi
mov dword [rbp + 0x8d8], eax
mov qword [rbp + 0x1c0], r14
movdqu xmmword [rbp + 0x8e0], xmm0
mov qword [rbp + 0x8f0], r14
mov dword [rbp + 0x8f8], r14d
mov dword [rbp + 0x8d0], 0x28
mov dword [rbp + 0x8dc], 0x200001
movabs r10, 0xcf05a77938531370
mov rax, qword [0x14010d018]
lea r9, [rbp + 0x1c0]
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x8d0]
xor r8d, r8d
mov qword [rsp + 0x20], r14
call qword [0x1400d71e8]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140032d0b
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov eax, 0x80004005
test edi, edi
cmovns edi, eax
jmp 0x1400330b0
movabs r10, 0xeec037b63c533370
mov rcx, rax
lea r8, [rbp + 0x610]
mov rax, qword [str._O_t_]
mov edx, 0x68
call qword [0x1400d71e8]
mov rcx, r14
mov dword [rbp + 0x738], edi
test eax, eax
mov eax, dword [rbp - 0x30]
cmovne rcx, qword [rbp + 0x628]
sub eax, dword [rbp + 0x18]
mov dword [rbp + 0x73c], eax
mov qword [rbp - 0x78], rcx
movabs r10, 0xe62ca6fe305b8a70
mov rdi, qword [rsp + 0x68]
mov rdx, qword [rbp - 0x80]
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc0b816137adf0070
mov rax, qword [0x14010d080]
mov edx, 1
mov rcx, rdi
call qword [0x1400d71e8]
movabs r10, 0xe62ca6fe305b8a70
mov rdx, qword [rbp - 0x50]
mov rcx, rdi
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
mov rdi, qword [0x14010d0e8]
mov qword [rbp - 0x50], rax
movabs r10, 0xfd20bef77ed52170
mov rax, qword [str.PO_t_]
xor ecx, ecx
call qword [0x1400d71e8]
mov r8, rax
movabs r10, 0x94f1065e3ade9370
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x730]
mov rax, rdi
call qword [0x1400d71e8]
movabs r10, 0xfa2817df7ad26370
mov eax, dword [rbp - 0x48]
lea r9, [rbp + 0x730]
mov rdx, qword [rbp - 0x20]
or r8d, 0xffffffff
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
mov rax, qword [str.PQ_t_]
call qword [0x1400d71e8]
mov eax, 1
cmp dword [rbp - 0x40], eax
jne 0x140032e68
cmp dword [rsp + 0x78], r14d
je 0x140032e5e
movabs r10, 0x8b0406ad5454f070
lea ecx, [rax + 7]
mov rax, qword [0x14010d118]
call qword [0x1400d71e8]
jmp 0x140032e6d
mov dword [rsp + 0x78], 0xffffff
jmp 0x140032e74
mov eax, 0xffa8a8a8
mov dword [rsp + 0x78], eax
mov dword [rbp - 8], eax
mov eax, dword [rbp + 0x38]
mov r9d, r14d
movsxd r10, dword [rbp]
mov r8d, eax
neg r8d
mov edx, r14d
test eax, eax
mov r11d, r10d
mov edi, r14d
cmovns r9d, eax
cmovns r8d, r14d
mov eax, dword [rbp + 0x18]
mov ecx, eax
neg ecx
test eax, eax
cmovns edx, eax
cmovns ecx, r14d
mov eax, dword [rbp + 0x738]
sub r11d, r9d
sub eax, r8d
cmp eax, r11d
cmovl r11d, eax
mov eax, dword [rbp + 0x73c]
sub eax, ecx
sub r12d, edx
cmp eax, r12d
cmovl r12d, eax
test r11d, r11d
jle 0x14003306d
test r12d, r12d
jle 0x14003306d
mov eax, dword [rbp + 0x738]
imul eax, ecx
imul edx, r10d
mov qword [rbp - 0x60], r10
mov dword [rbp], r14d
movsxd rcx, eax
movsxd rax, r8d
add rcx, rax
mov rax, qword [rbp - 0x78]
lea r8, [rax + rcx*4]
movsxd rax, r9d
movsxd rcx, edx
add rcx, rax
mov qword [rbp - 0x20], r8
mov rax, qword [rbp - 0x70]
lea rax, [rax + rcx*4]
movsxd rcx, dword [rbp + 0x738]
shl rcx, 2
mov qword [rbp - 0x78], rcx
mov ecx, r12d
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x70], rax
mov ebx, dword [rbp]
lea r9, [r8 + 2]
mov r13d, dword [rbp - 8]
mov r10, rax
sub r10, r8
mov esi, 1
mov r8d, r11d
mov qword [rbp - 0x30], r8
movzx eax, byte [r9 - 2]
movzx ecx, byte [r9 - 1]
lea edx, [rax + rcx*2]
movzx eax, byte [r9]
add edx, eax
shr edx, 2
not dl
test dl, dl
je 0x140033023
movzx edi, byte [r9 + r10]
mov r12d, 0x80808081
movzx r8d, dl
mov eax, r12d
movzx ecx, r13b
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x79]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r9 + r10], dl
movzx edi, byte [r10 + r9 - 1]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
movzx ecx, byte [rsp + 0x7a]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 1], dl
movzx edi, byte [r10 + r9 - 2]
sub ecx, edi
imul ecx, r8d
imul ecx
add edx, ecx
mov ecx, 0xff
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r12d
add dl, dil
mov byte [r10 + r9 - 2], dl
movzx edi, byte [r10 + r9 + 1]
sub ecx, edi
imul ecx, r8d
mov r8, qword [rbp - 0x30]
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
add dl, dil
mov byte [r10 + r9 + 1], dl
add r9, 4
mov edi, ebx
sub r8, rsi
mov qword [rbp - 0x30], r8
jne 0x140032f50
mov rax, qword [rbp - 0x70]
mov r8, qword [rbp - 0x20]
add r8, qword [rbp - 0x78]
sub qword [rbp - 0x58], rsi
mov r13, qword [rbp - 0x60]
mov qword [rbp - 0x20], r8
mov dword [rbp], ebx
lea rax, [rax + r13*4]
mov qword [rbp - 0x70], rax
jne 0x140032f33
mov r13d, dword [rbp + 0x30]
movabs rbx, 0xc81ecb17b1b54a58
movabs r10, 0xb2e10636105e9a70
mov rcx, qword [rbp - 0x80]
mov rax, qword [str._N_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x1400330b0
movabs r10, 0xe62ca6fe305b8a70
mov rcx, qword [rsp + 0x68]
mov rdx, rax
mov rax, qword [0x14010d078]
call qword [0x1400d71e8]
movabs r10, 0xc5540fa17e509b70
mov rcx, qword [rsp + 0x68]
mov rax, qword [0x14010d030]
call qword [0x1400d71e8]
test edi, edi
js 0x140031f50
mov eax, 1
cmp dword [rbp - 0x40], eax
jne 0x140033131
movabs r10, 0xa3080f0c3650fa70
mov eax, dword [rbp + 0x50]
mov r9d, r15d
mov rdi, qword [rbp - 0x38]
mov r12, qword [rsp + 0x70]
mov r8d, dword [rbp + 0x6c0]
mov rcx, r12
mov edx, dword [rbp + 0x6bc]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [section..data]
call qword [0x1400d71e8]
jmp 0x14003318a
movabs r10, 0xf658a6f3125f5170
mov eax, dword [rbp + 0x50]
mov r9d, r15d
mov ecx, dword [rbp - 0x28]
mov rdi, qword [rbp - 0x38]
mov r12, qword [rsp + 0x70]
mov r8d, dword [rbp + 0x754]
mov edx, dword [rbp + 0x750]
mov dword [rsp + 0x50], ecx
mov rcx, r12
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
mov rax, qword [str.pN_t_]
call qword [0x1400d71e8]
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x10], rax
movabs r10, 0xc0b816137adf0070
mov edx, dword [rbp - 0x18]
mov rcx, r12
mov rax, qword [0x14010d080]
call qword [0x1400d71e8]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140031f6f
jmp 0x140031f58
xor edx, edx
mov byte [rdi + r15 - 1], r14b
lea rdi, [0x140114960]
mov rcx, rdi
lea r8d, [rdx + 0x60]
call sub.msvcrt.dll_memset
cmp byte [r15], r14b
je 0x140033323
mov qword [rbp + 0x1d0], r15
jmp 0x1400331f4
lea rdi, [0x140114960]
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp word [r15 + rax*2], r14w
jne 0x1400331fb
lea r15, [r15 + rax*2]
mov eax, dword [rbp + 0x18]
lea rcx, [rax + rax*2]
lea r12, [rdi + rcx*8]
xor ecx, ecx
mov r8, r12
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
je 0x140033310
mov rax, qword [r12]
mov ecx, 0x5a4d
mov edi, r14d
cmp word [rax], cx
je 0x140033245
mov edi, 0xc000007b
jmp 0x140033294
movsxd rcx, dword [rax + 0x3c]
cmp ecx, 0x10000000
jae 0x14003323e
add rcx, qword [r12]
cmp rcx, qword [r12]
jb 0x14003323e
cmp dword [rcx], 0x4550
jne 0x14003323e
movzx eax, word [rcx + 0x18]
mov edx, 0x10b
sub ax, dx
mov edx, 0xfeff
test dx, ax
je 0x140033280
mov edi, 0xc000000d
jmp 0x140033294
mov rax, qword [rcx + 0x88]
mov qword [r12 + 0xc], rax
mov eax, dword [rcx + 0x50]
mov dword [r12 + 8], eax
mov eax, dword [r15 + 2]
mov ecx, r14d
add r15, 6
mov dword [rbp - 0x30], eax
mov dword [rbp + 0x20], ecx
test eax, eax
je 0x1400332fd
mov rdx, r15
or rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], r14b
jne 0x1400332b0
inc r15
add r15, rax
test edi, edi
js 0x1400332e9
mov rcx, qword [r12]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x140033315
mov ecx, dword [rbp]
lea rdx, section..data
mov qword [rdx + rcx*8], rax
mov ecx, dword [rbp + 0x20]
mov eax, 1
add dword [rbp], eax
add ecx, eax
mov dword [rbp + 0x20], ecx
cmp ecx, dword [rbp - 0x30]
jb 0x1400332a9
jmp 0x140033302
mov eax, 1
add dword [rbp + 0x18], eax
cmp byte [r15], r14b
jne 0x1400331ed
jmp 0x140033315
mov edi, 0xc000007a
mov r15, qword [rbp + 0x1d0]
test r15, r15
je 0x140033346
jmp 0x140033326
mov edi, dword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test edi, edi
js 0x1400325e8
mov eax, dword [0x140114cf0]
mov edi, 1
mov r12, qword [rbp - 0x10]
add eax, edi
mov dword [0x140114cf0], eax
mov eax, r14d
xchg dword [0x140114cf4], eax
mov eax, dword [rsp + 0x78]
mov dword [rbp + 0xb68], eax
mov dword [rbp + 0xb38], r12d
mov dword [rbp + 0xb30], edi
mov dword [rbp + 0xb48], 0x9966f291
mov dword [rbp + 0xb40], edi
mov dword [rbp + 0xb58], edi
mov dword [rbp + 0xb50], edi
mov dword [rbp + 0xb60], edi
movabs r10, 0xc9cc1e45325ad070
mov rax, qword [0x14010d0d0]
lea r9, [rbp + 0xb30]
mov r15d, 4
mov edx, 0x2021
mov r8d, r15d
xor ecx, ecx
call qword [0x1400d71e8]
xor eax, eax
lock cmpxchg dword [0x140114cf4], edi
jne 0x1400333d5
mov eax, dword [0x140114cf0]
test eax, eax
jle 0x14003344d
sub eax, edi
mov dword [0x140114cf0], eax
jne 0x14003344d
lea r12, [0x140114960]
mov eax, 1
mov rdi, r12
cmp qword [rdi], r14
je 0x14003341d
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop dword [rax + rax]
mov eax, 1
add rdi, 0x18
sub r15, rax
jne 0x140033404
xor edx, edx
lea r8d, [r15 + 0x60]
mov rcx, r12
call sub.msvcrt.dll_memset
mov r8d, 0x170
lea rdx, [0x1400d6160]
lea rcx, section..data
call sub.msvcrt.dll_memcpy
mov eax, r14d
xchg dword [0x140114cf4], eax
movabs r10, 0xb7b1b729165e9270
mov rdx, qword [rsp + 0x70]
xor ecx, ecx
mov rax, qword [0x14010d160]
call qword [0x1400d71e8]
lea rcx, [rbp + 0x138]
call fcn.140095490
xorps xmm0, xmm0
mov qword [rbp + 0x220], r14
movups xmmword [rbp + 0x238], xmm0
mov r15, r14
mov r12, r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edi, 8
mov r8d, 0xa0
mov rcx, rax
mov edx, edi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x1400357a2
mov r15, rax
lea edx, [rdi + 0x78]
lea rax, [0x140000000]
lea rax, [rax + 0x113a60]
movups xmm0, xmmword [rax]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [r15 + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [r15 + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [r15 + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [r15 + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [r15 + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [r15 + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [r15 + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [r15 + rdx + 0x10], xmm1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, edi
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x1400357a2
mov r12, rax
mov rax, qword [0x1401139a8]
mov qword [r12], rax
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x21c], 0xc4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8d, 0xc4
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x1400357a2
mov qword [rbp + 0x220], rax
mov ecx, r14d
mov dword [rbp + 0x218], ecx
lea r11d, [rdi - 7]
mov r8, rax
mov r9d, r14d
mov edx, 0xa0
test ecx, ecx
je 0x140033600
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x1400357a2
mov r10d, eax
add r10, r8
cmp r10, r8
jb 0x1400357a2
add r9d, r11d
mov r8, r10
cmp r9d, ecx
jb 0x1400335d7
lea r9, [r8 + 4]
cmp r9, r8
jb 0x1400357a2
mov ecx, dword [rbp + 0x21c]
lea rax, [r8 + 8]
add rcx, qword [rbp + 0x220]
cmp rax, rcx
ja 0x1400357a2
mov dword [r8], 4
mov dword [r9], 4
mov ecx, dword [rbp + 0x218]
add ecx, r11d
mov dword [rbp + 0x218], ecx
mov dword [rsp + 0x78], edi
mov r8, r15
mov r10, r12
test r15, r15
jne 0x14003365c
test edx, edx
je 0x140033664
jmp 0x1400357a2
test edx, edx
je 0x1400357a2
mov r9d, dword [rbp + 0x21c]
cmp qword [rbp + 0x220], r14
jne 0x14003369c
mov r15, r8
mov r12, r10
mov r8d, 0xa4
add r8d, r9d
cmp r8d, r9d
jb 0x1400357a2
mov edi, dword [rsp + 0x78]
mov dword [rbp + 0x21c], r8d
jmp 0x140033726
mov r8, qword [rbp + 0x220]
mov r10d, r14d
test ecx, ecx
je 0x1400336d3
mov eax, dword [r8]
add eax, 4
cmp eax, 4
jb 0x1400357a2
mov r11d, eax
add r11, r8
cmp r11, r8
jb 0x1400357a2
inc r10d
mov r8, r11
cmp r10d, ecx
jb 0x1400336aa
lea r11, [r8 + 4]
cmp r11, r8
jb 0x1400357a2
mov r10d, edx
mov ecx, r9d
add rcx, qword [rbp + 0x220]
lea rax, [r10 + 4]
add rax, r8
cmp rax, rcx
ja 0x1400357a2
mov dword [r8], edx
test r15, r15
je 0x140033713
mov r8d, r10d
mov rdx, r15
mov rcx, r11
call sub.msvcrt.dll_memcpy
mov ecx, dword [rbp + 0x218]
mov r11d, 1
mov r8d, dword [rbp + 0x21c]
add ecx, r11d
mov dword [rbp + 0x218], ecx
test r12, r12
jne 0x14003373d
test edi, edi
je 0x140033745
jmp 0x1400357a2
test edi, edi
je 0x1400357a2
cmp qword [rbp + 0x220], r14
jne 0x14003376a
mov edi, 0xc
add edi, r8d
cmp edi, r8d
jb 0x1400357a2
mov dword [rbp + 0x21c], edi
jmp 0x1400337f1
mov rdx, qword [rbp + 0x220]
mov r9d, r14d
test ecx, ecx
je 0x1400337a0
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400357a2
mov r10d, eax
add r10, rdx
cmp r10, rdx
jb 0x1400357a2
add r9d, r11d
mov rdx, r10
cmp r9d, ecx
jb 0x140033778
lea r10, [rdx + 4]
cmp r10, rdx
jb 0x1400357a2
mov r9d, edi
mov ecx, r8d
add rcx, qword [rbp + 0x220]
lea rax, [r9 + 4]
add rax, rdx
cmp rax, rcx
ja 0x1400357a2
mov dword [rdx], edi
test r12, r12
je 0x1400337e5
mov r8d, r9d
mov rdx, r12
mov rcx, r10
call sub.msvcrt.dll_memcpy
mov r11d, 1
mov ecx, dword [rbp + 0x218]
mov edi, dword [rbp + 0x21c]
add ecx, r11d
mov dword [rbp + 0x218], ecx
cmp qword [rbp + 0x220], r14
jne 0x140033822
lea r8d, [rdi + 0xc]
cmp r8d, edi
jb 0x1400357a2
add ecx, r11d
mov dword [rbp + 0x21c], r8d
mov dword [rbp + 0x218], ecx
jmp 0x140033899
mov rdx, qword [rbp + 0x220]
mov r8d, r14d
test ecx, ecx
je 0x140033858
mov eax, dword [rdx]
add eax, 4
cmp eax, 4
jb 0x1400357a2
mov r9d, eax
add r9, rdx
cmp r9, rdx
jb 0x1400357a2
add r8d, r11d
mov rdx, r9
cmp r8d, ecx
jb 0x140033830
lea r8, [rdx + 4]
cmp r8, rdx
jb 0x1400357a2
mov ecx, edi
lea rax, [rdx + 0xc]
add rcx, qword [rbp + 0x220]
cmp rax, rcx
ja 0x1400357a2
mov rax, qword [rbp + 0x1d8]
mov dword [rdx], 8
mov qword [r8], rax
add dword [rbp + 0x218], r11d
mov r8d, dword [rbp + 0x21c]
mov rdi, r14
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x78], r14d
mov qword [rbp - 0x10], r14
mov qword [rbp + 8], r14
mov dword [rbp], r14d
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x20], r14
rdtsc
shl rdx, 0x20
or rax, rdx
mov qword [rbp - 0x70], rax
add r8d, 8
cmp r8d, 8
jb 0x1400357a2
lea rdx, [r8 + 7]
and edx, 0xfffffff8
cmp edx, r8d
jb 0x1400357a2
mov eax, edx
mov qword [rsp + 0x68], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x60], rax
mov rcx, rax
test rax, rax
je 0x1400357a2
mov eax, dword [rbp + 0x218]
lea rdx, [rcx + 4]
mov qword [rbp - 0x80], r15
mov r8, r15
mov qword [rbp - 0x78], r12
mov r9, r12
mov dword [rcx], eax
cmp rdx, rcx
jb 0x140033990
mov eax, dword [rbp + 0x21c]
lea r9, [rdx + 4]
mov dword [rdx], eax
cmp r9, rdx
jb 0x140033994
mov rax, qword [rsp + 0x68]
mov rdx, qword [rbp - 0x70]
mov qword [rax + rcx - 8], rdx
mov rcx, r9
mov r8d, dword [rbp + 0x21c]
mov rdx, qword [rbp + 0x220]
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x68]
mov rdi, qword [rbp - 0x60]
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x70], r14
jmp 0x1400339e2
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r12
mov dword [rbp - 0x30], 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or dword [rbp - 0x30], 0x10000000
jl 0x140035a9c
mov qword [rbp - 0x70], r14
test r14, r14
je 0x1400357a2
mov eax, dword [rsp + 0x78]
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140035a92
add rax, 8
mov qword [rbp - 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x60]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x58], rax
mov r9, rax
test rax, rax
je 0x140035a92
mov r8d, dword [rsp + 0x78]
mov al, r14b
mov byte [rsp + 0x60], al
mov rcx, r14
mov edx, r8d
test r8d, r8d
je 0x140033a55
mov r8d, 1
xor al, byte [rcx + rdi]
add rcx, r8
cmp rcx, rdx
jb 0x140033a46
mov byte [rsp + 0x60], al
mov rcx, r9
mov qword [rbp + 0x700], rbx
or r10d, 0xffffffff
mov qword [rbp - 0x10], rcx
mov dword [rbp - 0x30], r14d
mov r8, rdi
mov dword [rbp + 0x18], r14d
mov r9d, r14d
and edx, 7
je 0x140033b8b
mov ecx, r14d
mov r10d, r14d
mov dword [rbp + 0x20], ecx
test edx, edx
je 0x140033b69
mov ebx, 0x38
lea eax, [rbx - 0x37]
movzx r11d, byte [r8]
inc r8
cmp ecx, 4
jae 0x140033aae
lea ecx, [rbx - 0x20]
shl r11d, cl
or r9d, r11d
jmp 0x140033ab6
mov ecx, ebx
shl r11d, cl
or r10d, r11d
mov ecx, dword [rbp + 0x20]
sub ebx, 8
add ecx, eax
mov dword [rbp - 0x30], r10d
mov dword [rbp + 0x18], r9d
mov dword [rbp + 0x20], ecx
cmp ecx, edx
jl 0x140033a97
mov al, byte [rsp + 0x60]
xor r9d, 0xb17a307a
mov rsi, qword [rbp - 0x10]
xor r10d, 0x42f6b18d
mov qword [rsp + 0x70], rdi
mov r11d, r10d
mov edi, r14d
mov qword [rbp - 0x78], r12
mov ecx, r9d
mov qword [rbp - 0x80], r15
movabs rbx, 0xc81ecb17b1b54a58
mov r14d, 1
lea r13, [rsi + 1]
mov qword [rbp - 0x10], r13
cmp edi, 4
jge 0x140033b1e
rol ecx, 8
mov r13d, ecx
jmp 0x140033b25
rol r11d, 8
mov r13d, r11d
mov byte [rsi], r13b
add edi, r14d
mov r13, qword [rbp - 0x10]
mov rsi, r13
cmp edi, edx
jl 0x140033b09
mov rdi, qword [rsp + 0x70]
mov rcx, r13
mov r13d, dword [rbp + 0x30]
mov r14d, 0
mov qword [rbp - 0x10], rcx
cmp edx, 4
jbe 0x140033b62
lea ecx, [r14 + 8]
sub ecx, edx
shl ecx, 3
shr r10d, cl
shl r10d, cl
jmp 0x140033b87
mov r10d, r14d
jae 0x140033b8b
jmp 0x140033b77
mov r9d, 0xb17a307a
mov dword [rbp + 0x18], r14d
mov dword [rbp - 0x30], r14d
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r9d, cl
shl r9d, cl
mov rcx, qword [rbp - 0x10]
mov edx, dword [rsp + 0x78]
mov r11d, edx
shr rdx, 3
test rdx, rdx
je 0x140033e8a
movzx r14d, word [rbp + 0x704]
lea r11, [rcx + 7]
movzx r12d, word [rbp + 0x702]
lea rax, [r8 + 2]
movzx r15d, word [rbp + 0x706]
mov rsi, rdx
movzx r13d, bx
movzx ecx, byte [rax - 1]
movzx r8d, byte [rax - 2]
movzx edi, byte [rax + 2]
shl r8d, 8
or r8d, ecx
shl edi, 8
movzx ecx, byte [rax]
lea rax, [rax + 8]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rax - 7]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [rax - 5]
or edi, ecx
movzx ecx, byte [rax - 4]
shl edi, 8
or edi, ecx
movzx ecx, byte [rax - 3]
shl edi, 8
or edi, ecx
xor r10d, edi
mov edx, r10d
sub edx, r13d
xor edx, r8d
xor edx, r9d
mov r9d, edx
ror edx, 0xf
xor r9d, dword [rbp + 0x704]
imul edx, r12d
mov ecx, r9d
ror ecx, 7
add edx, ecx
xor r10d, edx
mov ecx, r10d
ror ecx, 0xa
lea edx, [rbx + r10]
ror edx, 9
imul edx, r14d
sub edx, ecx
xor r9d, edx
mov edx, r14d
xor edx, r9d
mov ecx, r9d
rol ecx, 5
rol edx, 4
imul edx, r15d
add edx, ecx
mov ecx, dword [rbp + 0x704]
xor r10d, edx
mov edx, ebx
xor edx, r10d
sub ecx, edx
xor r9d, ecx
mov edx, r9d
mov ecx, r9d
shr ecx, 6
sub edx, r13d
imul edx, r12d
sub edx, ecx
xor r10d, edx
mov ecx, r10d
ror ecx, 0xf
xor ecx, r14d
imul ecx, r13d
xor r9d, ecx
mov ecx, r9d
not ecx
ror ecx, 3
add ecx, r15d
imul ecx, r14d
xor r10d, ecx
mov ecx, r10d
sub ecx, r13d
sub ecx, dword [rbp + 0x704]
xor r9d, ecx
mov ecx, r15d
mov edx, r9d
xor ecx, r9d
ror edx, 0xa
imul ecx, r12d
xor edx, ecx
xor r10d, edx
mov edx, r13d
xor edx, r10d
mov ecx, r10d
rol edx, 6
imul edx, r14d
ror ecx, 3
xor edx, ecx
xor r9d, edx
mov edx, r15d
mov ecx, r9d
ror ecx, 0xf
sub ecx, r15d
imul ecx, r13d
xor r10d, ecx
xor edx, r10d
mov ecx, r10d
imul edx, r13d
shr ecx, 1
xor edx, ecx
mov ecx, r10d
xor r9d, edx
shr ecx, 0xf
mov edx, r10d
sub edx, r14d
rol edx, 3
imul edx, r13d
xor edx, ecx
xor r9d, edx
mov edx, r9d
mov ecx, r9d
sub edx, r14d
shr ecx, 0xd
imul edx, r12d
sub edx, ecx
xor r10d, edx
mov edx, ebx
sub edx, r10d
mov ecx, r10d
ror edx, 9
imul edx, r14d
ror ecx, 0xb
xor edx, ecx
xor r9d, edx
mov ecx, r9d
sub ecx, r15d
sub ecx, ebx
xor r10d, ecx
mov ecx, r12d
xor ecx, r10d
mov edx, r10d
ror edx, 7
imul ecx, r13d
sub ecx, edx
mov edx, r15d
xor r9d, ecx
xor edx, r9d
mov ecx, r9d
rol edx, 4
imul edx, r12d
ror ecx, 0x10
sub edx, ecx
xor r10d, edx
mov edx, ebx
sub edx, r10d
mov ecx, r10d
ror edx, 0xa
imul edx, r14d
ror ecx, 4
add edx, ecx
xor r9d, edx
mov edx, r9d
mov ecx, r9d
sub edx, ebx
ror ecx, 9
ror edx, 4
imul edx, r15d
xor edx, ecx
xor r10d, edx
mov edx, r10d
xor edx, dword [rbp + 0x704]
mov ecx, r10d
rol edx, 8
imul edx, r13d
rol ecx, 2
sub edx, ecx
xor r9d, edx
mov edx, dword [rbp + 0x704]
sub edx, r9d
mov ecx, r9d
ror edx, 0xb
ror ecx, 0xc
imul edx, r12d
sub edx, ecx
xor r10d, edx
mov edx, r12d
xor edx, r10d
mov ecx, r10d
shr ecx, 8
imul edx, r14d
xor edx, ecx
mov ecx, dword [rbp + 0x704]
xor r9d, edx
xor ecx, ebx
xor ecx, r9d
xor r9d, dword [rbp + 0x18]
mov byte [r11 - 4], r9b
xor r10d, ecx
xor r10d, dword [rbp - 0x30]
mov byte [r11], r10b
lea r11, [r11 + 8]
ror r9d, 8
mov byte [r11 - 0xd], r9b
ror r10d, 8
mov byte [r11 - 9], r10b
ror r9d, 8
mov byte [r11 - 0xe], r9b
ror r10d, 8
mov byte [r11 - 0xa], r10b
ror r9d, 8
ror r10d, 8
mov byte [r11 - 0xf], r9b
mov byte [r11 - 0xb], r10b
ror r10d, 8
ror r9d, 8
mov dword [rbp + 0x18], r8d
mov dword [rbp - 0x30], edi
sub rsi, 1
jne 0x140033bc6
mov al, byte [rsp + 0x60]
xor r14d, r14d
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp - 0x78]
mov r13d, dword [rbp + 0x30]
mov rdi, qword [rsp + 0x70]
mov r11, qword [rsp + 0x68]
movzx ecx, al
mov rax, qword [rbp - 0x58]
mov qword [rax + r11], rcx
mov ebx, 8
mov qword [rbp + 0x90], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
lea r8d, [rbx + 0x28]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x80], rax
mov rbx, rax
test rax, rax
jne 0x140034155
mov dword [rbp - 0x30], 0xc0000017
mov rbx, r14
mov qword [rbp - 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x58]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x140033fdf
mov rcx, qword [rax + 8]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x140033f4a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x140033f82
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140033fba
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp - 0x10], rbx
mov ecx, dword [rbp - 0x30]
or ecx, 0x10000000
jl 0x140035523
lea rax, [rbx + 0x20]
mov qword [rbp - 0x70], rax
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
lea rax, [rbx + 0x10]
mov ecx, dword [rax]
mov qword [rsp + 0x68], rax
mov eax, dword [rbx]
add eax, 4
cmp eax, 4
jb 0x140035a14
lea edx, [rax + 4]
mov qword [rbp - 0x10], rbx
cmp edx, eax
jb 0x140035a84
add ecx, edx
cmp ecx, edx
jb 0x140035a84
lea eax, [rcx + 4]
cmp eax, ecx
jb 0x140035a84
mov ecx, dword [rsp + 0x78]
add ecx, eax
cmp ecx, eax
jb 0x140035a84
mov eax, ecx
mov qword [rbp - 0x80], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x80]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp + 0x18], rax
mov rcx, rax
test rax, rax
je 0x14003457c
mov eax, dword [rbx]
mov r8, rdi
mov dword [rcx], eax
mov r9, r15
lea rax, [rcx + 4]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], rax
mov r10, r12
cmp rax, rcx
jb 0x1400343a0
mov r8d, dword [rbx]
mov rcx, rax
mov rdx, qword [rbx + 8]
call sub.msvcrt.dll_memcpy
mov edx, dword [rbx]
add rdx, qword [rbp - 0x78]
cmp rdx, qword [rbp - 0x78]
jb 0x140034396
mov r8, qword [rsp + 0x68]
mov eax, dword [r8]
mov dword [rdx], eax
lea rax, [rdx + 4]
mov qword [rbp - 0x78], rax
cmp rax, rdx
jb 0x140034396
mov r8d, dword [r8]
mov rcx, rax
mov rdx, qword [rbx + 0x18]
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x68]
mov ecx, dword [rcx]
add rcx, qword [rbp - 0x78]
mov qword [rsp + 0x68], rcx
cmp rcx, qword [rbp - 0x78]
jb 0x140034396
mov rdx, qword [rbp - 0x70]
mov eax, dword [rdx]
mov dword [rcx], eax
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x140034396
mov r8d, dword [rdx]
mov rcx, rax
mov rdx, qword [rbx + 0x28]
call sub.msvcrt.dll_memcpy
mov rcx, qword [rbp - 0x70]
mov eax, dword [rcx]
mov rcx, qword [rsp + 0x68]
add rcx, 4
add rax, rcx
cmp rax, rcx
jb 0x1400343a4
mov rcx, qword [rbp + 0x18]
mov eax, dword [rbp - 0x80]
mov qword [rbp + 8], rcx
jmp 0x1400343e3
mov eax, dword [rbp - 0x60]
mov dword [rbx], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x60]
mov edx, 8
mov r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14003428c
mov qword [rbx + 8], rax
mov r8, qword [rbp - 0x60]
mov rcx, rax
mov rdx, qword [rbp - 0x58]
mov r8d, r8d
mov qword [rbp - 0x80], rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x70], rdi
mov dword [rbx + 0x10], 0xa0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov r8d, 0xa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
je 0x14003428c
mov qword [rbx + 0x18], rax
mov rcx, rax
mov edx, 0x80
lea rax, [0x140000000]
lea rax, [rax + 0x1139b0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm1
movups xmm0, xmmword [rax + rdx]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rax + rdx + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
mov dword [rbx + 0x20], 8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rcx, rax
mov eax, 8
mov r8d, eax
mov edx, eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x140034372
mov rdi, rbx
mov qword [rbp - 0x80], rbx
mov rdi, qword [rsp + 0x70]
mov ebx, 0xc0000017
mov dword [rbp - 0x30], ebx
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x70], r14
mov rcx, qword [rax + 8]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x1400342d4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x80]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14003430c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x80]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140034344
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x80]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, r14
test ebx, ebx
js 0x140033edd
jmp 0x14003438a
mov qword [rbx + 0x28], rax
mov rcx, rax
mov dword [rbp - 0x30], r14d
mov rax, qword [0x140113a50]
mov qword [rcx], rax
mov rax, rbx
mov rbx, rax
mov qword [rbp - 0x70], r14
jmp 0x140033ee0
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x18], rax
jmp 0x1400343a4
mov qword [rbp + 0x18], rcx
mov qword [rbp - 0x10], rbx
mov dword [rbp - 0x30], 0xc0000095
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x18]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
or dword [rbp - 0x30], 0x10000000
jl 0x140035a9c
mov eax, dword [rbp]
mov rcx, r14
cmp qword [rbp + 0x220], r14
je 0x1400343f9
mov edx, 1
cmp dword [rbp + 0x218], edx
ja 0x140034403
mov esi, 0xc000000d
jmp 0x140035525
mov rdx, qword [rbp + 0x220]
mov r9d, r14d
lea r8, [rdx + 4]
mov dword [rbp], eax
mov qword [rbp + 8], rcx
mov r11, rdi
mov qword [rbp - 0x10], rbx
cmp r8, rdx
jb 0x140035a7a
mov edx, dword [rdx]
add rdx, r8
cmp rdx, r8
jb 0x140035a70
mov eax, 1
add r9d, eax
cmp r9d, eax
mov eax, dword [rbp]
jb 0x14003440d
mov eax, dword [rdx]
mov dword [rsp + 0x78], eax
lea rax, [rdx + 4]
mov qword [rbp - 0x10], rbx
cmp rax, rdx
jb 0x140035a66
mov rax, rcx
mov qword [rbp + 8], rcx
cmp qword [rbp + 0x220], r14
je 0x1400343f9
cmp dword [rbp + 0x218], 2
ja 0x140034480
mov esi, 0xc000000d
jmp 0x140034905
mov rcx, qword [rbp + 0x220]
mov r8, rbx
mov dword [rbp - 0x30], r14d
mov r9, r12
mov r10, r15
mov qword [rsp + 0x70], rax
mov edx, dword [rbp]
mov rbx, r8
mov qword [rbp + 8], rax
mov rdi, r11
mov dword [rbp], edx
mov r15, r10
mov rdx, rax
mov qword [rbp - 0x10], rbx
mov eax, dword [rsp + 0x78]
mov r12, r9
mov dword [rsp + 0x78], eax
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x140035a53
mov ecx, dword [rcx]
add rcx, rax
cmp rcx, rax
jb 0x140035a4c
inc dword [rbp - 0x30]
mov rax, rdx
cmp dword [rbp - 0x30], 2
mov qword [rsp + 0x70], rdx
jb 0x140034499
mov r8d, dword [rcx]
lea rax, [rcx + 4]
cmp rax, rcx
jb 0x140035a4c
mov eax, dword [rsp + 0x78]
add eax, 0x30
cmp eax, 0x30
jb 0x140035a4c
lea ecx, [rax + 4]
cmp ecx, eax
jb 0x140035a4c
lea eax, [rcx + r8]
cmp eax, ecx
jb 0x140035a4c
cmp eax, 0x400000
jbe 0x140034532
mov esi, 0x8000ffff
jmp 0x140035525
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp + 8], rdx
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x80], r10
mov qword [rbp - 0x78], r9
mov qword [rbp - 0x60], rbx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x70]
mov edx, 8
mov rcx, rax
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
test rax, rax
jne 0x140034586
mov esi, 0xd0000017
jmp 0x140035525
mov r8, rax
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x70]
test rax, rax
jne 0x1400345ac
mov rcx, qword [rbp - 0x60]
mov esi, 0x80070057
mov qword [rbp - 0x10], rcx
mov qword [rbp - 0x38], r8
jmp 0x140034909
mov qword [rbp + 0x268], rax
lea rdx, [0x1400e3b98]
mov eax, dword [rbp]
mov ecx, 1
mov qword [rbp + 0x270], r8
lea r8, [rbp + 0x130]
mov dword [rbp + 0x278], eax
mov dword [rbp + 0x27c], ebx
mov dword [rbp + 0x280], r14d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
nop dword [rax + rax]
test eax, eax
jne 0x14003464d
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov r9, qword [rsp + 0x70]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, 0x80004005
test ecx, ecx
cmovns ecx, eax
mov dword [rbp - 0x30], ecx
cmp ecx, 0xd0000023
jne 0x1400346be
mov rdx, qword [rbp - 0x38]
mov esi, 0x8007007a
mov rcx, qword [rbp - 0x60]
mov qword [rbp - 0x38], rdx
mov rdx, qword [rbp - 0x70]
mov qword [rbp - 0x10], rcx
mov qword [rbp + 8], rdx
jmp 0x140035525
mov rcx, qword [rbp + 0x130]
lea rdx, str.NtQuerySystemInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
nop dword [rax + rax]
test rax, rax
je 0x1400345f3
movabs r10, 0x86712ea7345e2b70
xor r9d, r9d
lea rdx, [rbp + 0x268]
lea r8d, [r9 + 0x20]
lea ecx, [r8 + 0x66]
call qword [0x1400d71e8]
mov r9, qword [rsp + 0x70]
mov ecx, eax
or ecx, 0x10000000
mov dword [rbp - 0x30], ecx
jl 0x14003461f
mov r9d, dword [rbp + 0x27c]
mov r11, rdi
mov r10, qword [rbp - 0x70]
mov rbx, r15
mov rdx, qword [rbp - 0x60]
mov rax, r12
jmp 0x1400346df
mov rdx, qword [rbp - 0x60]
mov rax, r12
mov r10, qword [rbp - 0x70]
mov rbx, r15
mov qword [rbp - 0x10], rdx
mov r11, rdi
mov qword [rbp + 8], r10
test ecx, ecx
js 0x140035a9c
mov qword [rbp - 0x70], r14
mov r15, rbx
mov rdi, r11
cmp r9d, 4
jae 0x140034710
mov rdx, qword [rbp - 0x38]
mov esi, 0xd000003e
mov rcx, qword [rbp - 0x60]
mov r12, rax
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x10], rcx
mov qword [rbp + 8], r10
jmp 0x140035525
mov r8, qword [rbp - 0x38]
mov qword [rbp - 0x38], r8
mov ecx, dword [r8]
mov dword [rsp + 0x78], ecx
lea rcx, [r8 + 4]
mov qword [rsp + 0x68], rcx
cmp rcx, r8
jb 0x140035a3a
mov rcx, qword [rbp - 0x60]
mov r12, rax
lea eax, [r9 - 4]
mov qword [rbp - 0x10], rcx
mov rdx, r10
mov rbx, rcx
mov qword [rbp + 8], rdx
cmp eax, dword [rsp + 0x78]
jae 0x140034763
mov esi, 0xd000003e
mov r12, qword [rbp - 0x78]
mov r15, qword [rbp - 0x80]
mov qword [rbp - 0x38], r8
jmp 0x140034703
mov eax, dword [rsp + 0x78]
mov r8d, eax
mov qword [rbp - 0x60], rax
add r8, qword [rsp + 0x68]
cmp r8, qword [rsp + 0x68]
mov qword [rbp + 0x20], r8
mov r8, qword [rbp - 0x38]
jb 0x140035a30
lea r10d, [rax + 4]
cmp r10d, 4
jb 0x140035a1e
mov eax, r9d
sub eax, r10d
cmp eax, 4
jae 0x1400347a9
mov esi, 0xd000003e
jmp 0x140035525
mov rax, qword [rbp + 0x20]
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], r8
mov r11d, dword [rax]
lea rcx, [rax + 4]
mov dword [rbp], r11d
cmp rcx, rax
jb 0x140035a14
lea eax, [r10 + 4]
mov dword [rbp - 0x30], eax
cmp eax, r10d
jb 0x140035a1e
mov eax, r9d
sub eax, dword [rbp - 0x30]
cmp eax, r11d
jb 0x14003479f
lea r10, [r11 + rcx]
mov qword [rbp + 0x50], r11
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], r8
cmp r10, rcx
jb 0x140035a14
mov eax, dword [rbp - 0x30]
lea esi, [r11 + rax]
mov dword [rbp - 0x30], esi
cmp esi, eax
movabs rsi, 0x7f1137fab69605e
jb 0x140035a1e
mov eax, r9d
sub eax, dword [rbp - 0x30]
cmp eax, 4
jb 0x14003479f
mov r10d, dword [r10]
lea rax, [rcx + r11]
lea rcx, [rax + 4]
mov dword [rbp + 0x18], r10d
mov qword [rbp - 0x18], rcx
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], r8
cmp rcx, rax
jb 0x140035a14
mov ecx, dword [rbp - 0x30]
lea eax, [rcx + 4]
mov dword [rbp - 0x30], eax
cmp eax, ecx
jb 0x140035a1e
mov eax, r9d
mov qword [rbp - 0x58], rdx
sub eax, dword [rbp - 0x30]
mov rcx, rdx
mov qword [rbp - 0x28], r8
cmp eax, r10d
jb 0x14003479f
mov eax, dword [rbp - 0x30]
mov qword [rbp - 0x10], rbx
lea esi, [r10 + rax]
mov dword [rbp - 0x30], esi
cmp esi, eax
movabs rsi, 0x7f1137fab69605e
jb 0x140035a06
mov r8, r15
mov rax, qword [rbp - 0x28]
mov qword [rbp + 8], rdx
mov rdx, rdi
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r12
cmp r9d, dword [rbp - 0x30]
je 0x1400348de
mov esi, 0xd000003e
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp + 8], rcx
jmp 0x140035525
mov ecx, dword [rsp + 0x78]
add ecx, r11d
mov eax, r9d
add ecx, r10d
add rcx, 0xc
cmp rcx, rax
je 0x140034912
mov esi, 0xd000003e
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x10], rbx
mov qword [rbp + 8], rax
jmp 0x140035525
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 8], rax
mov r8, rax
test rax, rax
jne 0x140034949
mov esi, 0xd0000017
jmp 0x1400348f9
mov dword [rbp - 0x30], r14d
cmp qword [rsp + 0x68], r14
je 0x1400349af
mov eax, dword [rsp + 0x78]
mov dword [r8], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x60]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140034acc
mov rax, qword [rbp - 8]
mov qword [rax + 8], rcx
mov r8, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x68]
mov dword [rbp - 0x30], r14d
call sub.msvcrt.dll_memcpy
mov r8, qword [rbp - 8]
mov r9, qword [rbp - 0x18]
jmp 0x1400349be
mov r9, qword [rbp - 0x18]
mov dword [rax], r14d
mov qword [rbp - 0x18], r9
mov qword [rax + 8], r14
mov rax, qword [rbp + 8]
mov rcx, qword [rbp - 0x38]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x70], rdi
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 8], r8
add rax, 4
je 0x140034a78
mov eax, dword [rbp]
mov dword [r8 + 0x10], eax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x50]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140034acc
mov rax, qword [rbp - 8]
mov qword [rax + 0x18], rcx
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x50]
add rdx, 4
mov dword [rbp - 0x30], r14d
call sub.msvcrt.dll_memcpy
mov r8, qword [rbp - 8]
mov r9, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x38]
mov rax, qword [rbp + 8]
mov qword [rbp - 8], r8
mov qword [rbp - 0x18], r9
mov qword [rbp - 0x38], rdx
mov qword [rbp + 8], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x70], rdi
jmp 0x140034a88
mov rax, qword [rbp + 8]
mov rdx, qword [rbp - 0x38]
mov dword [r8 + 0x10], r14d
mov qword [r8 + 0x18], r14
test r9, r9
je 0x140034be7
mov eax, dword [rbp + 0x18]
mov dword [r8 + 0x20], eax
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x50]
mov edx, 8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
jne 0x140034ba7
mov dword [rbp - 0x30], 0xc0000017
mov rax, qword [rbp - 8]
mov rcx, qword [rax + 8]
mov qword [rbp - 0x50], rcx
test rcx, rcx
je 0x140034b0d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 8], r14
mov rcx, qword [rax + 0x18]
mov qword [rbp - 0x50], rcx
test rcx, rcx
je 0x140034b43
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 0x18], r14
mov rax, qword [rax + 0x28]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140034b79
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x50]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp - 8]
mov qword [rax + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 8]
mov r8, r14
mov rdx, qword [rbp - 0x38]
jmp 0x140034bf3
mov rax, qword [rbp - 8]
mov qword [rax + 0x28], rcx
mov r8, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x18]
mov dword [rbp - 0x30], r14d
call sub.msvcrt.dll_memcpy
mov rdx, qword [rbp - 0x38]
mov rax, qword [rbp + 8]
mov r8, qword [rbp - 8]
mov qword [rbp - 0x38], rdx
mov qword [rbp + 8], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x70], rdi
jmp 0x140034bef
mov dword [r8 + 0x20], r14d
mov qword [r8 + 0x28], r14
mov qword [rbp - 0x70], r8
mov r9, rax
mov qword [rsp + 0x68], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], rdx
mov ecx, dword [rbp - 0x30]
mov dword [rsp + 0x78], ecx
test ecx, ecx
js 0x140034c1a
mov rax, r8
jmp 0x140034d1f
mov qword [rbp - 0x38], rdx
mov rax, r14
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x70], rdi
mov qword [rbp + 8], r9
test r8, r8
je 0x140034d23
mov rdi, qword [rbp - 0x70]
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x140034c74
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 8], r14
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x140034ca1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r14
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x140034cce
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x20]
mov rax, r14
mov rbx, qword [rbp + 0x18]
mov rdi, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x68]
mov qword [rbp - 0x38], rcx
mov ecx, dword [rsp + 0x78]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x70], rdi
mov qword [rbp + 8], rdx
mov qword [rbp - 0x50], rax
or ecx, 0x10000000
jl 0x140035523
test rax, rax
jne 0x140034d3e
mov esi, 0xd000000d
jmp 0x140035525
mov rcx, qword [rax + 8]
mov qword [rbp - 0x70], rcx
test rcx, rcx
je 0x140034d34
cmp dword [rax], r14d
je 0x140034d34
mov eax, dword [rax]
add rax, 0xfffffffffffffff8
mov qword [rsp + 0x68], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
nop dword [rax + rax]
mov qword [rbp - 0x20], rax
mov r10, rax
test rax, rax
je 0x1400352c1
mov rdx, qword [rsp + 0x68]
mov al, r14b
mov r8, qword [rbp - 0x70]
and edx, 7
mov qword [rbp + 0x20], rdx
mov byte [rsp + 0x60], al
mov qword [rbp + 0x708], rsi
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], r10
je 0x14003523b
test edx, edx
je 0x140035210
mov rdx, qword [rbp + 8]
mov r10d, r14d
mov r8, qword [rbp - 0x38]
mov r13d, r14d
mov r9, qword [rbp - 0x50]
mov r11, qword [rbp + 0x20]
mov rsi, qword [rbp - 0x60]
movzx ecx, byte [rsi]
inc rsi
mov dword [rsp + 0x78], ecx
mov ecx, dword [rbp + 0x48]
cmp r14d, 4
jae 0x140034dff
add ecx, 0xffffffe0
shl dword [rsp + 0x78], cl
or r10d, dword [rsp + 0x78]
mov ecx, dword [rbp + 0x48]
jmp 0x140034e08
shl dword [rsp + 0x78], cl
or r13d, dword [rsp + 0x78]
sub ecx, 8
inc r14d
mov dword [rbp + 0x48], ecx
cmp r14d, r11d
jl 0x140034ddb
mov r11d, r10d
mov dword [rsp + 0x78], r10d
mov r10, qword [rbp - 0x20]
xor r11d, 0x92f65a5
mov ecx, r13d
mov dword [rbp + 0x44], r13d
mov r13d, dword [rbp + 0x30]
xor ecx, 0x699a899c
xor r14d, r14d
mov qword [rbp - 0x60], rsi
mov dword [rbp], r11d
mov eax, r11d
mov qword [rbp - 0x38], r8
movabs rsi, 0x7f1137fab69605e
mov qword [rsp + 0x70], rdi
mov r8d, r14d
mov qword [rbp + 8], rdx
lea r11d, [r14 + 1]
mov rdx, qword [rbp + 0x20]
mov rdi, r10
mov dword [rbp - 0x30], ecx
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r15
lea r9, [rdi + 1]
mov qword [rbp - 0x58], r9
cmp r8d, 4
jge 0x140034e96
rol eax, 8
mov r9d, eax
jmp 0x140034e9c
rol ecx, 8
mov r9d, ecx
mov byte [rdi], r9b
add r8d, r11d
mov r9, qword [rbp - 0x58]
mov rdi, r9
cmp r8d, edx
jl 0x140034e80
mov al, byte [rsp + 0x60]
mov rcx, r9
mov r11d, dword [rbp]
mov qword [rbp - 0x58], rcx
cmp edx, 4
jbe 0x140035201
mov r9d, dword [rbp - 0x30]
mov ecx, 8
sub ecx, edx
shl ecx, 3
shr r9d, cl
shl r9d, cl
mov rcx, rdi
mov r8, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x68]
shr rdx, 3
mov qword [rbp - 0x60], rdx
test rdx, rdx
je 0x14003524e
mov eax, dword [rbp + 0x70c]
lea rbx, [rcx + 7]
mov r10d, dword [rsp + 0x78]
lea r12, [r8 + 2]
mov r14, qword [rbp - 0x60]
movzx r13d, word [rbp + 0x70a]
movzx edx, ax
mov dword [rbp], edx
mov r15d, dword [rbp]
movzx edx, si
mov dword [rbp - 0x30], edx
mov edx, esi
xor edx, eax
mov dword [rbp + 0x18], edx
movzx ecx, byte [r12 - 1]
movzx r8d, byte [r12 - 2]
movzx edi, byte [r12 + 2]
shl r8d, 8
or r8d, ecx
shl edi, 8
movzx ecx, byte [r12]
lea r12, [r12 + 8]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r12 - 7]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r12 - 5]
or edi, ecx
xor r11d, r8d
movzx ecx, byte [r12 - 4]
shl edi, 8
or edi, ecx
movzx ecx, byte [r12 - 3]
shl edi, 8
or edi, ecx
mov ecx, eax
xor ecx, esi
xor r9d, edi
xor r9d, ecx
xor r9d, r11d
mov edx, r9d
mov ecx, r9d
sub edx, esi
rol ecx, 0xa
rol edx, 5
imul edx, r15d
add edx, ecx
xor r11d, edx
mov ecx, r11d
rol ecx, 2
lea edx, [rax + r11]
ror edx, 9
imul edx, r13d
sub edx, ecx
xor r9d, edx
mov edx, r9d
mov ecx, r9d
sub edx, r15d
shr ecx, 0xd
imul edx, dword [rbp - 0x30]
sub edx, ecx
movzx ecx, word [rbp + 0x70e]
xor r11d, edx
mov edx, r13d
xor edx, r11d
rol edx, 6
imul edx, ecx
mov ecx, r11d
rol ecx, 2
sub edx, ecx
mov ecx, eax
xor r9d, edx
mov edx, esi
xor edx, r9d
sub ecx, edx
xor r11d, ecx
mov ecx, r15d
xor ecx, r11d
mov edx, r11d
ror edx, 6
imul ecx, r13d
xor edx, ecx
xor r9d, edx
mov ecx, r9d
rol ecx, 2
lea edx, [rax + r9]
ror edx, 0xf
imul edx, dword [rbp - 0x30]
add edx, ecx
movzx ecx, word [rbp + 0x70e]
xor r11d, edx
mov edx, r11d
sub edx, esi
ror edx, 0xe
imul edx, ecx
mov ecx, r11d
rol ecx, 8
sub edx, ecx
xor r9d, edx
mov edx, r9d
mov ecx, r9d
xor edx, esi
ror ecx, 0xa
ror edx, 0xc
imul edx, r15d
xor edx, ecx
movzx ecx, word [rbp + 0x70e]
xor r11d, edx
mov edx, r11d
xor edx, ecx
mov ecx, r11d
shr ecx, 0xa
imul edx, r13d
xor edx, ecx
xor r9d, edx
movzx edx, word [rbp + 0x70e]
mov ecx, r9d
not ecx
ror ecx, 5
add ecx, dword [rbp - 0x30]
imul ecx, edx
xor r11d, ecx
mov ecx, r11d
sub ecx, edx
xor ecx, esi
xor r9d, ecx
xor edx, r9d
mov ecx, r9d
rol edx, 2
imul edx, r15d
shr ecx, 2
add edx, ecx
xor r11d, edx
mov edx, r11d
mov ecx, r11d
sub edx, eax
rol ecx, 7
ror edx, 6
imul edx, r13d
add edx, ecx
mov ecx, r15d
xor r9d, edx
xor ecx, r9d
mov edx, r9d
imul ecx, dword [rbp - 0x30]
ror edx, 9
add edx, ecx
movzx ecx, word [rbp + 0x70e]
xor r11d, edx
mov edx, r13d
xor edx, r11d
rol edx, 5
imul edx, ecx
mov ecx, r11d
rol ecx, 7
add edx, ecx
mov ecx, dword [rbp + 0x18]
xor r9d, edx
xor ecx, r9d
xor r11d, ecx
mov ecx, r11d
ror ecx, 3
sub ecx, r13d
imul ecx, r15d
xor r9d, ecx
mov edx, r9d
mov ecx, r9d
sub edx, eax
ror ecx, 6
ror edx, 1
imul edx, dword [rbp - 0x30]
sub edx, ecx
xor r11d, edx
lea edx, [rsi + r11]
rol edx, 3
movzx ecx, word [rbp + 0x70e]
imul edx, ecx
mov ecx, r11d
rol ecx, 0xe
add edx, ecx
xor r9d, edx
mov ecx, r9d
ror ecx, 0xe
lea edx, [rsi + r9]
rol edx, 0xf
imul edx, r15d
sub edx, ecx
xor r11d, edx
mov edx, dword [rbp - 0x30]
xor edx, r11d
mov ecx, r11d
imul edx, r13d
shr ecx, 3
xor edx, ecx
xor r9d, edx
mov edx, eax
xor edx, r9d
mov ecx, r9d
xor r9d, dword [rbp + 0x44]
rol edx, 4
imul edx, dword [rbp - 0x30]
rol ecx, 2
mov dword [rbp + 0x44], edi
xor edx, ecx
xor edx, r10d
mov r10d, r8d
xor r11d, edx
mov edx, 1
mov byte [rbx - 4], r11b
mov byte [rbx], r9b
lea rbx, [rbx + 8]
ror r11d, 8
mov byte [rbx - 0xd], r11b
ror r9d, 8
mov byte [rbx - 9], r9b
ror r11d, 8
mov byte [rbx - 0xe], r11b
ror r9d, 8
mov byte [rbx - 0xa], r9b
ror r11d, 8
ror r9d, 8
mov byte [rbx - 0xf], r11b
mov byte [rbx - 0xb], r9b
ror r9d, 8
ror r11d, 8
sub r14, rdx
jne 0x140034f2d
mov al, byte [rsp + 0x60]
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp - 0x78]
mov r13d, dword [rbp + 0x30]
mov rbx, qword [rbp - 0x10]
mov r10, qword [rbp - 0x20]
jmp 0x140035253
mov r9d, r14d
jae 0x140034edd
mov r8, qword [rbp - 0x60]
jmp 0x140035222
mov r11d, 0x92f65a5
mov dword [rsp + 0x78], r14d
mov dword [rbp + 0x44], r14d
mov r9d, r14d
mov ecx, 4
sub ecx, edx
shl ecx, 3
shr r11d, cl
shl r11d, cl
mov rcx, qword [rbp - 0x58]
jmp 0x140034ee1
mov dword [rsp + 0x78], r14d
mov r9d, r14d
mov r11d, r14d
mov rcx, r10
jmp 0x140034ee1
mov edx, 1
mov rsi, qword [rsp + 0x68]
mov rcx, r14
test rsi, rsi
je 0x14003526c
xor al, byte [rcx + r10]
add rcx, rdx
cmp rcx, rsi
jb 0x140035260
mov rcx, qword [rbp + 8]
mov r8, qword [rbp - 0x50]
mov r11, rcx
mov rdx, qword [rbp - 0x38]
mov r9, r8
mov rdi, qword [rsp + 0x70]
mov qword [rbp + 8], rcx
movzx ecx, al
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x50], r8
cmp rcx, qword [rsi + rax]
je 0x1400352cf
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp - 0x20]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov esi, 0xd0000001
mov qword [rbp - 0x20], r14
jmp 0x140035525
mov qword [rbp - 0x38], rdx
mov r8, rdx
mov qword [rbp - 0x50], r9
mov rdx, r11
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
cmp esi, 4
jae 0x1400352f4
mov ecx, 0xc000003e
jmp 0x14003551f
mov ecx, dword [r10]
mov dword [rsp + 0x78], ecx
lea rcx, [r10 + 4]
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x20], r10
cmp rcx, r10
jb 0x14003551a
lea eax, [rsi - 4]
cmp eax, 4
jae 0x140035342
mov ecx, 0xc000003e
mov qword [rbp - 0x20], r10
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x10], rbx
mov qword [rbp + 8], r11
jmp 0x14003551f
mov eax, dword [rcx]
lea r11, [rcx + 4]
mov dword [rbp], eax
cmp r11, rcx
jb 0x1400359e8
mov ecx, dword [rbp]
lea eax, [rsi - 8]
mov qword [rsp + 0x70], rdx
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], r9
cmp eax, ecx
jb 0x1400352ea
lea eax, [rcx + 8]
cmp eax, 8
jb 0x140035506
mov ecx, 0xc0000095
bts ecx, 0x1c
mov esi, ecx
test rdi, rdi
je 0x14003554a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x10]
test rdi, rdi
je 0x1400355fe
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x140035584
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 8], r14
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x1400355b1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r14
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x1400355de
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp + 8]
test rdi, rdi
je 0x140035627
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x38]
test rdi, rdi
je 0x140035650
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x140035704
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x14003568a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 8], r14
mov rbx, qword [rdi + 0x18]
test rbx, rbx
je 0x1400356b7
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x18], r14
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x1400356e4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rdi + 0x28], r14
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rbx, qword [rbp - 0x20]
test rbx, rbx
je 0x14003572d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test esi, esi
js 0x1400357a2
mov eax, dword [rbp + 0x238]
mov r10d, 1
cmp eax, r10d
jb 0x1400357a2
mov rdi, qword [rbp + 0x240]
test rdi, rdi
je 0x1400357a2
test eax, eax
je 0x1400357a2
lea rcx, [rdi + 4]
cmp rcx, rdi
jb 0x1400357a2
cmp dword [rdi], r14d
mov rax, r14
cmovne rax, rcx
cmp dword [rdi], 4
jne 0x1400357a2
cmp dword [rax], r14d
jl 0x1400357a2
cmp rdi, r14
je 0x1400357a2
cmp dword [rbp + 0x238], r10d
jbe 0x1400357a2
mov rcx, rdi
mov edi, r14d
lea rdx, [rcx + 4]
cmp rdx, rcx
jb 0x1400357a2
mov ecx, dword [rcx]
add rcx, rdx
cmp rcx, rdx
jb 0x1400357a2
add edi, r10d
cmp edi, r10d
jb 0x140035783
lea rax, [rcx + 4]
and qword [rbp + 0x218], 0
mov rdi, qword [rbp + 0x220]
test rdi, rdi
je 0x1400357dd
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x220], r14
and qword [rbp + 0x238], 0
mov rdi, qword [rbp + 0x240]
test rdi, rdi
je 0x140035818
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov qword [rbp + 0x240], r14
test r15, r15
je 0x14003583d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test r12, r12
je 0x140035862
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov rax, qword [rbp + 0xa8]
mov esi, dword [rbp + 0x78]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], r14
jmp 0x14002b899
mov ecx, 0xc0000095
mov qword [rbp + 8], rdx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x20], r10
jmp 0x14003551f
mov esi, 0xd0000095
mov qword [rbp - 0x38], r8
jmp 0x140034644
mov esi, 0xd0000095
jmp 0x140035525
mov esi, 0xd0000095
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x10], rbx
jmp 0x140034644
mov esi, 0xd0000095
jmp 0x140034755
mov r12, qword [rbp - 0x78]
mov esi, 0xd0000095
mov qword [rbp - 0x10], rdx
jmp 0x140034707
mov esi, 0xc0000095
jmp 0x140035a27
mov rax, qword [rsp + 0x70]
mov esi, 0xc0000095
mov qword [rbp - 0x10], r8
jmp 0x140034909
mov esi, 0xc0000095
jmp 0x1400348d5
mov esi, 0xc0000095
jmp 0x1400348d1
mov esi, 0xc0000095
jmp 0x140035525
mov esi, 0xd0000095
mov qword [rbp - 0x10], rbx
jmp 0x140035525
mov esi, 0xd0000001
jmp 0x14003552a
mov esi, dword [rbp - 0x30]
jmp 0x140035525
cmp r13d, 0xd00000e5
je 0x140035ad8
cmp r13d, 0xc004d501
je 0x140035ad8
cmp r13d, 0xd000003e
jne 0x140035ac7
mov r13d, 0xc004f028
jmp 0x140035ade
cmp r13d, 0x8007007a
jne 0x140035ade
mov r14d, 0xc004f01e
jmp 0x140035afa
mov r13d, 0xc004f027
mov r14d, r13d
jmp 0x140035afa
cmp esi, 4
jne 0x140035ad0
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rbp + 0x98]
mov edx, dword [rcx]
mov dword [rax], edx
lea rcx, [rbp + 0xa0]
call fcn.140095414
mov eax, r14d
mov rcx, qword [rbp + 0xee0]
xor rcx, rsp
call fcn.1400c4a70
mov rbx, qword [rsp + 0x1030]
add rsp, 0xff0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret