Function at 0x1400850e0
Capabilities:
Check for debugger via api
Check for process debug object
Check for time delay via queryperformancecounter
Check processdebugflags
Check processdebugport
Encode data using base64

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x108b8
call fcn.140102de0
sub rsp, rax
movdqa xmmword [rsp + 0x108a0], xmm11
movdqa xmmword [rsp + 0x10890], xmm10
movdqa xmmword [rsp + 0x10880], xmm9
movdqa xmmword [rsp + 0x10870], xmm8
movdqa xmmword [rsp + 0x10860], xmm7
movdqa xmmword [rsp + 0x10850], xmm6
mov qword [rsp + 0x850], 0
lea rcx, [rsp + 0x850]
call sub.KERNEL32.dll_QueryPerformanceCounter
test eax, eax
je 0x14008522a
mov rsi, qword [rsp + 0x850]
mov rcx, qword [0x14024a110]
test rcx, rcx
jne 0x1400851a1
mov qword [rsp + 0x850], 0
lea rcx, [rsp + 0x850]
call sub.KERNEL32.dll_QueryPerformanceFrequency
test eax, eax
je 0x14008522a
mov rcx, qword [rsp + 0x850]
mov qword [0x14024a110], rcx
test rcx, rcx
je case.0x14008b089.0
mov rax, rsi
or rax, rcx
shr rax, 0x20
jne 0x1400851b5
mov eax, esi
xor edx, edx
div ecx
jmp 0x1400851bd
mov rax, rsi
xor edx, edx
div rcx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
jne 0x1400851df
xor edx, edx
div ecx
mov esi, eax
jmp 0x1400851e7
xor edx, edx
div rcx
mov rsi, rax
add rsi, r8
mov rax, rsi
shr rax, 9
movabs r14, 0x44b82fa09b5a53
mul r14
mov rdi, rdx
mov ecx, 0x23
xor edx, edx
call fcn.1400723f0
mov qword [rsp + 0x850], 0
lea rcx, [rsp + 0x850]
call sub.KERNEL32.dll_QueryPerformanceCounter
test eax, eax
jne 0x140085231
call sub.KERNEL32.dll_GetLastError
ud2
mov rbx, qword [rsp + 0x850]
mov rcx, qword [0x14024a110]
test rcx, rcx
jne 0x14008527a
mov qword [rsp + 0x850], 0
lea rcx, [rsp + 0x850]
call sub.KERNEL32.dll_QueryPerformanceFrequency
test eax, eax
je 0x14008522a
mov rcx, qword [rsp + 0x850]
mov qword [0x14024a110], rcx
test rcx, rcx
je case.0x14008b089.0
shr rdi, 0xb
imul r8d, edi, 0x3b9aca00
mov rax, rbx
or rax, rcx
shr rax, 0x20
jne 0x140085299
mov eax, ebx
xor edx, edx
div ecx
jmp 0x1400852a1
mov rax, rbx
xor edx, edx
div rcx
sub esi, r8d
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
jne 0x1400852c6
xor edx, edx
div ecx
mov ecx, eax
jmp 0x1400852ce
xor edx, edx
div rcx
mov rcx, rax
add rcx, r8
mov rax, rcx
shr rax, 9
mul r14
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov qword [rsp + 0x140], rdx
mov dword [rsp + 0x148], ecx
mov qword [rsp + 0x850], rdi
mov dword [rsp + 0x858], esi
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x850]
call fcn.14007ebc0
cmp edx, 0x3b9aca00
je 0x140088291
cmp rax, 0x19
jb 0x140088291
lea rcx, [rsp + 0x850]
call fcn.1400df0f0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.1400df0f0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
lea rax, [0x1401cbfba]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xfcc1e873e0de7a0d
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e310
movabs rcx, 0x2f113bdba3ebe379
xor rcx, qword [rax]
movabs rdx, 0x1deb291c0521a22e
xor rdx, qword [rax + 8]
mov r8d, 0x61da3a78
xor r8d, dword [rax + 0x10]
mov qword [rsp + 0x850], rcx
mov qword [rsp + 0x858], rdx
mov dword [rsp + 0x860], r8d
lea rcx, [rsp + 0x420]
lea rsi, [rsp + 0x850]
mov r8d, 0x14
mov rdx, rsi
call fcn.1400df1c0
movzx eax, byte [rsp + 0x420]
cmp rax, 0x12
jne 0x14008562a
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x6b0], rax
lea rax, [0x1401c4650]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xa4b41c0f53f0de00
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e360
movabs rcx, 0xfee3f2c04eedb6db
xor rcx, qword [rax]
movabs rdx, 0x56a0cdc897cde13d
xor rdx, qword [rax + 8]
movabs r8, 0x37fbe1baac24a2c4
xor r8, qword [rax + 0x10]
movabs r9, 0xc75d17ef325c0fdc
xor r9, qword [rax + 0x18]
movabs r10, 0x619e69eed1b862df
xor r10, qword [rax + 0x20]
mov qword [rsp + 0x850], rcx
mov qword [rsp + 0x858], rdx
mov qword [rsp + 0x860], r8
mov qword [rsp + 0x868], r9
mov qword [rsp + 0x870], r10
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x6b0]
lea r8, [rsp + 0x850]
mov r9d, 0x28
call fcn.140092fc0
cmp byte [rsp + 0x140], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x68], rax
mov rbx, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x158]
xor ecx, ecx
call fcn.140082180
test rax, rax
je case.0x14008b089.0
movups xmm0, xmmword [rax]
inc qword [rax]
movaps xmmword [rsp + 0x550], xmm0
movups xmm0, xmmword [str.0X__]
movaps xmmword [rsp + 0x530], xmm0
movdqu xmm0, xmmword [0x140205850]
movdqa xmmword [rsp + 0x540], xmm0
lea r14, [rsi + rsi*2]
shl r14, 4
add r14, rbx
mov qword [rsp + 0x78], rbx
test rsi, rsi
jne 0x140085d05
mov rax, r14
sub rax, rbx
movabs rcx, 0xaaaaaaaaaaaaaaab
mul rcx
cmp r14, rbx
je 0x1400855a1
mov rsi, rdx
shr rsi, 5
nop word cs:[rax + rax]
mov rcx, rbx
call fcn.14008ea30
add rbx, 0x30
dec rsi
jne 0x140085590
cmp qword [rsp + 0x68], 0
je 0x1400855bc
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x78]
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsp + 0x538]
mov rbx, qword [rsp + 0x548]
test rbx, rbx
sete bpl
test rdi, rdi
je 0x14008561a
mov rsi, qword [rsp + 0x530]
test rbx, rbx
jne 0x140086268
lea rax, [rdi + 1]
mov ecx, 0x18
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rdi, rax
cmp rdi, 0xffffffffffffffef
je 0x14008561a
sub rsi, rax
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x6b0]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140085667
cmp rax, 0x10
ja case.0x14008563e.6
lea rcx, [0x1401abf80]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp qword [rsp + 0x428], 0
je case.0x14008563e.0
lea rax, [rsp + 0x430]
mov r8, qword [rax]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov bpl, 1
lea rdx, [0x140207908]
lea rsi, [rsp + 0x850]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400df1c0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x688], rax
movzx eax, byte [0x14024a149]
mov edx, 0xd8
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov qword [rsp + 0x68], rax
lea rax, [0x1401cbb93]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x57d3c83a50758f83
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e8e0
mov r14, qword [rax]
mov r15, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r13, qword [rax + 0x18]
movzx edi, byte [rax + 0x20]
movzx eax, byte [0x14024a149]
mov edx, 0x21
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rbx, rax
xor dil, 0x85
movabs rax, 0x1c2087b0bceff0cb
xor r14, rax
movabs rax, 0x6b6eb8739606babb
xor r15, rax
movabs rax, 0xf326dd930704e23
xor r12, rax
movabs rax, 0x4203a9c13a4ff3d
xor r13, rax
mov qword [rbx], r14
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r13
mov byte [rbx + 0x20], dil
lea rax, [0x1401c9687]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x28a8ffbce5f6ec08
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e3a0
mov r15, qword [rax]
mov r12, qword [rax + 8]
mov r14, qword [rax + 0x10]
movzx eax, byte [0x14024a149]
mov edx, 0x18
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov byte [rsp + 0x78], bpl
movabs rcx, 0x8da8fe922f2c3040
xor r14, rcx
movabs rcx, 0xbc3fd966cce1f49f
xor r15, rcx
movabs rcx, 0x1b27eb65a574670f
xor r12, rcx
mov qword [rax], r15
mov qword [rax + 8], r12
mov qword [rsp + 0x40], rax
mov qword [rax + 0x10], r14
lea rax, [0x1401c3221]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x868feab9bfac17d1
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e940
mov rbp, qword [rax]
mov r13, qword [rax + 8]
mov r12, qword [rax + 0x10]
mov r14, qword [rax + 0x18]
movzx r15d, word [rax + 0x20]
movzx edi, byte [rax + 0x22]
movzx eax, byte [0x14024a149]
mov edx, 0x23
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
shl edi, 0x10
or r15d, edi
mov r8d, r15d
shr r8d, 0x10
xor r8b, 0xe0
mov ecx, r15d
xor cl, 0xf0
shr r15d, 8
xor r15b, 0x38
movzx ecx, cl
movzx edx, r15b
shl edx, 8
or edx, ecx
movabs rcx, 0xc08517ce1349e1b1
xor r14, rcx
movabs rcx, 0xdf0a598ceb92859c
xor r12, rcx
movabs rcx, 0x73141e7111f0d1b2
xor r13, rcx
movabs rcx, 0xb91e12584ef18644
xor rbp, rcx
mov qword [rax], rbp
mov qword [rax + 8], r13
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r14
mov word [rax + 0x20], dx
mov qword [rsp + 0x50], rax
mov byte [rax + 0x22], r8b
lea rax, [0x1401cb1e1]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x8f6a5a15e90951f6
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e770
mov r13, qword [rax]
mov r14, qword [rax + 8]
mov ebp, dword [rax + 0x10]
movzx r15d, word [rax + 0x14]
movzx eax, byte [0x14024a149]
mov edx, 0x16
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov r12, rax
mov eax, r15d
xor al, 0x2c
shr r15d, 8
xor r15b, 0x4c
movzx ecx, r15b
shl ecx, 8
movzx eax, al
or eax, ecx
xor ebp, 0xd9e90508
movabs rcx, 0x2a7545642ed51f79
xor r14, rcx
movabs rcx, 0xb60ee14aef969e23
xor r13, rcx
mov qword [r12], r13
mov qword [r12 + 8], r14
mov dword [r12 + 0x10], ebp
mov word [r12 + 0x14], ax
lea rax, [0x1401c8548]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xc20586a8f62da60f
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e5a0
mov r14, qword [rax]
mov r15, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
movzx eax, byte [0x14024a149]
mov edx, 0x20
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
movq xmm0, rdi
movq xmm1, r13
punpcklqdq xmm1, xmm0
movq xmm0, r15
movq xmm2, r14
punpcklqdq xmm2, xmm0
pxor xmm2, xmmword [0x1401abf00]
pxor xmm1, xmmword [0x1401abf10]
movdqu xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x60], rax
movdqu xmmword [rax], xmm2
lea rax, [0x1401c8e83]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xcb7b0d7ae427f497
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008dfb0
mov rcx, qword [rax]
mov qword [rsp + 0x58], rcx
mov r13, qword [rax + 8]
mov rbp, qword [rax + 0x10]
mov r14d, dword [rax + 0x18]
movzx r15d, word [rax + 0x1c]
movzx edi, byte [rax + 0x1e]
movzx eax, byte [0x14024a149]
mov edx, 0x1f
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
shl edi, 0x10
or r15d, edi
mov r8d, r15d
shr r8d, 0x10
xor r8b, 0x96
mov ecx, r15d
xor cl, 0xc7
shr r15d, 8
xor r15b, 0x95
movzx ecx, cl
movzx edx, r15b
shl edx, 8
or edx, ecx
xor r14d, 0x181c1ce7
movabs rcx, 0x9c31cef018016a55
xor rbp, rcx
movabs rcx, 0x3f1ec70a1739be35
xor r13, rcx
movabs rcx, 0xa9254ccb1119ab9e
mov r9, qword [rsp + 0x58]
xor r9, rcx
mov qword [rax], r9
mov qword [rax + 8], r13
mov qword [rax + 0x10], rbp
mov dword [rax + 0x18], r14d
mov word [rax + 0x1c], dx
mov qword [rsp + 0x70], rax
mov byte [rax + 0x1e], r8b
lea rax, [0x1401c5cae]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x5cc1f808f69c35cd
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e090
mov r14, qword [rax]
mov r15, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
movzx eax, byte [0x14024a149]
mov edx, 0x20
xor ecx, ecx
call fcn.140080d30
mov qword [rsp + 0x58], rax
test rax, rax
je case.0x14008b089.0
movq xmm0, rdi
movq xmm1, r13
punpcklqdq xmm1, xmm0
movq xmm0, r15
movq xmm2, r14
punpcklqdq xmm2, xmm0
pxor xmm2, xmmword [0x1401abf20]
pxor xmm1, xmmword [0x1401abf30]
mov rax, qword [rsp + 0x58]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm2
lea rax, [0x1401c129b]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x6497df9d93ac1c64
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e530
mov r14, qword [rax]
mov r13, qword [rax + 8]
mov rbp, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
movzx r15d, word [rax + 0x20]
movzx eax, byte [0x14024a149]
mov edx, 0x22
xor ecx, ecx
call fcn.140080d30
mov qword [rsp + 0xa8], rax
test rax, rax
je case.0x14008b089.0
mov eax, r15d
xor al, 0xa5
shr r15d, 8
xor r15b, 0xc3
movzx ecx, r15b
shl ecx, 8
movzx eax, al
or eax, ecx
movabs rcx, 0xcfac4a63bbadad05
xor r14, rcx
movabs rcx, 0x4e6d82349ae12b73
xor r13, rcx
movabs rcx, 0xacf18f533b44d901
xor rbp, rcx
movabs rcx, 0x68abad883e6f9a1e
xor rdi, rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rcx], r14
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], rbp
mov qword [rcx + 0x18], rdi
mov word [rcx + 0x20], ax
lea rax, [0x1401c18e5]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xb666add89f4a2024
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e200
mov r13, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov ebp, dword [rax + 0x18]
movzx esi, byte [rax + 0x1c]
movzx eax, byte [0x14024a149]
sbb al, 0
sbb al, 0
mov edx, 0x1d
xor ecx, ecx
call fcn.140080d30
test rax, rax
jne 0x140086309
ud2
lea r15, [rsp + 0x148]
lea r12, [rsp + 0x880]
lea r13, [rsp + 0x140]
movdqa xmm6, xmmword [0x1401abee0]
movdqa xmm7, xmmword [0x1401abef0]
pxor xmm8, xmm8
pcmpeqd xmm9, xmm9
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x60], r14
jmp 0x140085db1
and al, 1
movzx eax, al
sub qword [rsp + 0x540], rax
lea rax, [rcx - 0x10]
and r13, rax
mov rax, qword [rsp + 0x50]
mov byte [r15 + rcx], al
mov byte [r13 + r15 + 0x10], al
inc qword [rsp + 0x548]
neg rcx
lea rax, [rcx + rcx*2]
mov qword [r15 + rax*8 - 0x18], rdi
mov qword [r15 + rax*8 - 0x10], rsi
mov qword [r15 + rax*8 - 8], rdi
mov r14, qword [rsp + 0x60]
lea r15, [rsp + 0x148]
lea r12, [rsp + 0x880]
lea r13, [rsp + 0x140]
mov rcx, r13
call fcn.14008ea30
cmp rbx, r14
je 0x1400855a1
mov rax, rbx
add rbx, 0x30
mov rsi, qword [rax]
test rsi, rsi
je 0x140085564
mov qword [rsp + 0x140], rsi
mov rcx, qword [rax + 0x28]
mov qword [r15 + 0x20], rcx
movdqu xmm0, xmmword [rax + 8]
movdqu xmm1, xmmword [rax + 0x18]
movdqu xmmword [r15 + 0x10], xmm1
movdqu xmmword [r15], xmm0
cmp qword [rsp + 0x158], 0
je 0x140085da0
movdqu xmm0, xmmword [rsp + 0x160]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmm6
movdqa xmmword [rsp + 0x850], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmm7
movdqa xmmword [rsp + 0x860], xmm1
movdqa xmmword [rsp + 0x870], xmm0
movdqa xmmword [r12], xmm8
mov qword [r12 + 0x10], 0
mov r8d, 0xb
lea rdi, [rsp + 0x850]
mov rcx, rdi
lea rdx, str.displayName
call fcn.14009a2b0
mov byte [rsp + 0x790], 0xff
mov r8d, 1
mov rcx, rdi
lea rdx, [rsp + 0x790]
call fcn.14009a2b0
mov rax, qword [rsp + 0x860]
mov r9, qword [rsp + 0x880]
shl r9, 0x38
or r9, qword [rsp + 0x888]
mov rcx, qword [rsp + 0x868]
mov r8, qword [rsp + 0x850]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x858]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
rol rcx, 0x15
xor rax, r8
add rdx, rax
rol rax, 0x11
mov r8, rdx
rol r8, 0x20
xor r8, rax
xor r8, rcx
xor r8, rdx
mov rax, qword [rsp + 0x148]
mov rcx, r8
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea rcx, [rsi - 0x38]
xor edx, edx
and r8, rax
movdqu xmm1, xmmword [rsi + r8]
movdqa xmm2, xmm1
pcmpeqb xmm2, xmm0
pmovmskb r9d, xmm2
nop word cs:[rax + rax]
test r9w, r9w
je 0x140086020
tzcnt r10d, r9d
lea r11d, [r9 - 1]
and r11d, r9d
mov r9d, r11d
add r10, r8
and r10, rax
neg r10
imul r10, r10, 0x38
cmp qword [rcx + r10 + 0x10], 0xb
jne 0x140085fc0
lea r11, [rcx + r10]
mov r11, qword [r11 + 8]
mov rdi, qword [r11]
movabs rbp, 0x4e79616c70736964
xor rdi, rbp
mov r11, qword [r11 + 3]
movabs rbp, 0x656d614e79616c70
xor r11, rbp
or r11, rdi
jne 0x140085fc0
jmp 0x140086050
pcmpeqb xmm1, xmm9
pmovmskb r9d, xmm1
test r9d, r9d
jne 0x140085da0
add r8, rdx
add r8, 0x10
add rdx, 0x10
jmp 0x140085f9b
cmp byte [rsi + r10 - 0x20], 2
jne 0x140085da0
add rsi, r10
mov rbp, qword [rsi - 0x10]
mov rdi, qword [rsi - 8]
test rdi, rdi
je 0x140086090
js case.0x14008b089.0
movzx eax, byte [0x14024a149]
xor ecx, ecx
mov rdx, rdi
call fcn.140080d30
mov rsi, rax
test rax, rax
jne 0x140086095
jmp case.0x14008b089.0
mov esi, 1
mov rcx, rsi
mov rdx, rbp
mov r8, rdi
call sub.msvcrt.dll_memcpy
movaps xmm10, xmmword [rsp + 0x550]
movaps xmmword [rsp + 0x840], xmm10
lea rcx, [rsp + 0x840]
mov rdx, rsi
mov r8, rdi
call fcn.140091800
mov rbp, rax
cmp qword [rsp + 0x540], 0
je 0x140086245
mov r15, qword [rsp + 0x530]
mov r13, qword [rsp + 0x538]
mov rax, rbp
shr rax, 0x39
mov qword [rsp + 0x50], rax
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm10, xmm0, 0
xor eax, eax
mov qword [rsp + 0x40], rax
xor r14d, r14d
and rbp, r13
movdqu xmm11, xmmword [r15 + rbp]
movdqa xmm0, xmm11
pcmpeqb xmm0, xmm10
pmovmskb r12d, xmm0
nop dword [rax + rax]
test r12w, r12w
je 0x140086180
tzcnt eax, r12d
lea ecx, [r12 - 1]
and ecx, r12d
mov r12d, ecx
add rax, rbp
and rax, r13
neg rax
lea rax, [rax + rax*2]
cmp rdi, qword [r15 + rax*8 - 8]
jne 0x140086130
lea rax, [r15 + rax*8]
mov rdx, qword [rax - 0x10]
mov rcx, rsi
mov r8, rdi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140086130
jmp 0x1400861e0
cmp r14, 1
mov r14d, 1
je 0x1400861a9
pmovmskb eax, xmm11
xor r14d, r14d
test eax, eax
setne r14b
tzcnt eax, eax
add rax, rbp
and rax, r13
mov qword [rsp + 0x58], rax
pcmpeqb xmm11, xmm9
pmovmskb eax, xmm11
test eax, eax
jne 0x14008621c
mov rax, qword [rsp + 0x40]
add rbp, rax
add rbp, 0x10
add rax, 0x10
mov qword [rsp + 0x40], rax
jmp 0x140086113
test rdi, rdi
mov r14, qword [rsp + 0x60]
lea r15, [rsp + 0x148]
lea r12, [rsp + 0x880]
lea r13, [rsp + 0x140]
je 0x140085da0
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
jmp 0x140085da0
mov rcx, qword [rsp + 0x58]
movzx eax, byte [r15 + rcx]
test al, al
js 0x140085d43
movdqa xmm0, xmmword [r15]
pmovmskb eax, xmm0
tzcnt ecx, eax
movzx eax, byte [r15 + rcx]
jmp 0x140085d43
movaps xmmword [rsp + 0x830], xmm10
lea rcx, [rsp + 0x530]
lea rdx, [rsp + 0x830]
call fcn.14008ec80
jmp 0x1400860da
movdqa xmm0, xmmword [rsi]
pmovmskb r12d, xmm0
not r12d
lea r14, [rsi + 0x10]
mov r15, rsi
jmp 0x140086297
dec rbx
lea eax, [r12 - 1]
and eax, r12d
mov r12d, eax
test rbx, rbx
je 0x1400855e9
test r12w, r12w
jne 0x1400862c1
nop dword [rax]
movdqa xmm0, xmmword [r14]
pmovmskb r12d, xmm0
add r15, 0xfffffffffffffe80
add r14, 0x10
cmp r12d, 0xffff
je 0x1400862a0
not r12d
tzcnt eax, r12d
neg rax
lea rax, [rax + rax*2]
cmp qword [r15 + rax*8 - 0x18], 0
je 0x140086280
lea rax, [r15 + rax*8]
mov r8, qword [rax - 0x10]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140086280
cmp qword [rsp + 0x430], 0
je case.0x14008563e.0
lea rax, [rsp + 0x428]
jmp 0x140085653
movabs rcx, 0xe124b25c73970016
xor r14, rcx
movabs rcx, 0x9c4762d854ab8b3e
xor r15, rcx
movabs rcx, 0x214e263aeacaf32d
xor r13, rcx
mov qword [rax], r13
mov qword [rax + 8], r15
mov qword [rax + 0x10], r14
xor ebp, 0x9a8e348b
mov dword [rax + 0x18], ebp
xor sil, 4
mov byte [rax + 0x1c], sil
mov rdi, qword [rsp + 0x68]
mov qword [rdi], 0x21
mov qword [rdi + 8], rbx
mov qword [rdi + 0x10], 0x21
mov qword [rdi + 0x18], 0x18
mov rcx, qword [rsp + 0x40]
mov qword [rdi + 0x20], rcx
mov qword [rdi + 0x28], 0x18
mov qword [rdi + 0x30], 0x23
mov rcx, qword [rsp + 0x50]
mov qword [rdi + 0x38], rcx
mov qword [rdi + 0x40], 0x23
mov qword [rdi + 0x48], 0x16
mov qword [rdi + 0x50], r12
mov qword [rdi + 0x58], 0x16
mov qword [rdi + 0x60], 0x20
mov rcx, qword [rsp + 0x60]
mov qword [rdi + 0x68], rcx
mov qword [rdi + 0x70], 0x20
mov qword [rdi + 0x78], 0x1f
mov rcx, qword [rsp + 0x70]
mov qword [rdi + 0x80], rcx
mov qword [rdi + 0x88], 0x1f
mov qword [rdi + 0x90], 0x20
mov rcx, qword [rsp + 0x58]
mov qword [rdi + 0x98], rcx
mov qword [rdi + 0xa0], 0x20
mov qword [rdi + 0xa8], 0x22
mov rcx, qword [rsp + 0xa8]
mov qword [rdi + 0xb0], rcx
mov qword [rdi + 0xb8], 0x22
mov qword [rdi + 0xc0], 0x1d
mov qword [rdi + 0xc8], rax
mov qword [rdi + 0xd0], 0x1d
lea rax, [rsp + 0x688]
movq xmm7, rax
lea r13, [rdi + 0x20]
mov ebx, 0xc0
xor ebp, ebp
movdqa xmm6, xmmword [0x1401abf40]
nop word cs:[rax + rax]
lea rax, [rbp*2]
add rax, rbp
inc rbp
mov rdx, qword [rdi + rax*8]
movabs rcx, 0x8000000000000001
dec rcx
mov qword [rsp + 0x60], rcx
cmp rdx, rcx
je 0x1400868bd
lea rax, [rdi + rax*8]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rdx
je 0x1400864e0
js case.0x14008b089.0
mov r12, rbp
movzx eax, byte [0x14024a149]
xor ecx, ecx
mov rdx, rsi
call fcn.140080d30
mov rbx, rax
test rax, rax
jne 0x1400864e8
jmp case.0x14008b089.0
mov r12, rbp
mov ebx, 1
mov rcx, rbx
mov qword [rsp + 0x58], rdi
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov edx, 3
lea rcx, str.WQLUnable_to_read_process_memory_informationReadProcessMemory_returned_unexpected_number_of_bytes_readUnable_to_read_process_dataProcessor__Total___Idle_Timetot_0Processor____Idle_Time
call fcn.1400dbcc0
mov r15, rax
mov rcx, rbx
mov rdx, rsi
call fcn.1400dbcc0
mov r14, rax
mov rdx, qword [rsp + 0x688]
lea rcx, [rsp + 0x850]
mov r8, r15
mov r9, rax
call fcn.140091670
mov rdi, qword [rsp + 0x850]
mov rbp, qword [rsp + 0x858]
test rdi, rdi
je 0x140086890
test rbp, rbp
je 0x140086560
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x10]
test r14, r14
je 0x14008656d
mov rcx, r14
call sub.oleaut32.dll_SysFreeString
test r15, r15
mov rbp, r12
je 0x14008657d
mov rcx, r15
call sub.oleaut32.dll_SysFreeString
test rsi, rsi
lea r12, [rsp + 0x860]
je 0x14008659b
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
jne case.0x14008b089.0
pshufd xmm0, xmm8, 0xee
movq rbx, xmm0
mov byte [rsp + 0x6b0], 0x12
lea rcx, [rsp + 0x850]
mov rdx, rbx
lea r8, [rsp + 0x6b0]
call fcn.140093320
cmp qword [rsp + 0x850], 0
je 0x1400867c0
mov rsi, qword [rsp + 0x858]
movdqu xmm0, xmmword [r12]
movdqu xmm1, xmmword [r12 + 0x10]
movdqa xmmword [rsp + 0x140], xmm0
movdqa xmmword [rsp + 0x150], xmm1
mov rax, qword [r12 + 0x20]
mov qword [rsp + 0x160], rax
test rsi, rsi
je 0x1400867c0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x440], rax
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x430], xmm1
movaps xmmword [rsp + 0x420], xmm0
movzx eax, byte [0x14024a149]
mov edx, 0xc0
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov r15, rax
mov qword [rax], rsi
movaps xmm0, xmmword [rsp + 0x420]
movdqa xmm1, xmmword [rsp + 0x430]
movups xmmword [rax + 8], xmm0
movdqu xmmword [rax + 0x18], xmm1
mov rax, qword [rsp + 0x440]
mov qword [r15 + 0x28], rax
mov qword [rsp + 0x790], 4
mov qword [rsp + 0x798], r15
mov qword [rsp + 0x7a0], 1
mov esi, 1
mov edi, 0x38
jmp 0x140086700
mov qword [r15 + rdi - 8], r14
movdqa xmm0, xmmword [rsp + 0x530]
movdqa xmm1, xmmword [rsp + 0x540]
movdqu xmmword [r15 + rdi], xmm0
movdqu xmmword [r15 + rdi + 0x10], xmm1
mov rax, qword [rsp + 0x550]
mov qword [r15 + rdi + 0x20], rax
inc rsi
mov qword [rsp + 0x7a0], rsi
add rdi, 0x30
lea rcx, [rsp + 0x850]
mov rdx, rbx
lea r8, [rsp + 0x6b0]
call fcn.140093320
cmp qword [rsp + 0x850], 0
je 0x1400867e0
mov r14, qword [rsp + 0x858]
movups xmm0, xmmword [r12]
movdqu xmm1, xmmword [r12 + 0x10]
movaps xmmword [rsp + 0x140], xmm0
movdqa xmmword [rsp + 0x150], xmm1
mov rax, qword [r12 + 0x20]
mov qword [rsp + 0x160], rax
test r14, r14
je 0x1400867e0
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x550], rax
movaps xmm0, xmmword [rsp + 0x140]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x540], xmm1
movaps xmmword [rsp + 0x530], xmm0
cmp rsi, qword [rsp + 0x790]
jne 0x1400866c0
lea rcx, [rsp + 0x790]
mov rdx, rsi
call fcn.140090f30
mov r15, qword [rsp + 0x798]
jmp 0x1400866c0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
cmp byte [rsp + 0x6b0], 0x12
jne 0x140086a81
mov dil, 1
jmp 0x14008684c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
movdqa xmm9, xmmword [rsp + 0x790]
cmp byte [rsp + 0x6b0], 0x12
pshufd xmm0, xmm9, 0xee
jne 0x140086b28
movq rbx, xmm0
mov r14, rbx
test rsi, rsi
sete dil
je 0x140086831
nop dword [rax + rax]
mov rcx, r14
call fcn.14008ea30
add r14, 0x30
dec rsi
jne 0x140086820
movq rax, xmm9
test rax, rax
je 0x14008684c
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x14008686e
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x58]
call sub.KERNEL32.dll_HeapFree
test dil, dil
jne 0x1400868f0
add rbx, 0xffffffffffffffe8
add r13, 0x18
cmp rbp, 9
mov rdi, qword [rsp + 0x68]
jne 0x140086470
jmp 0x1400868c7
test r14, r14
je 0x14008689d
mov rcx, r14
call sub.oleaut32.dll_SysFreeString
movq xmm0, rbp
movdqa xmm8, xmm7
punpcklqdq xmm8, xmm0
test r15, r15
mov rbp, r12
jne 0x140086575
jmp 0x14008657d
cmp rbp, 9
jne 0x140086a8b
mov rcx, qword [0x14024a138]
mov dword [rsp + 0x58], 0
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x688]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x140086921
cmp rbp, 9
jne 0x140086ad8
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x68]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x688]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov al, 1
mov dword [rsp + 0x58], eax
lea rdx, [0x140207908]
lea rsi, [rsp + 0x850]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400df1c0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x530], rax
lea rax, [0x1401c85de]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x410b0b75e88491c6
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e170
movabs rcx, 0x8d8a5d9ff30f7c3b
xor rcx, qword [rax]
movabs rdx, 0x5b179f0c01020ee3
xor rdx, qword [rax + 8]
movabs r8, 0x33076f1b63f2597
xor r8, qword [rax + 0x10]
movabs r9, 0x7dad36d8b02450c6
xor r9, qword [rax + 0x18]
movabs r10, 0x78f68b0db5bd3703
xor r10, qword [rax + 0x20]
mov r11d, 0x9b788706
xor r11d, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
xor al, 0x8a
mov qword [rsp + 0x850], rcx
mov qword [rsp + 0x858], rdx
mov qword [rsp + 0x860], r8
mov qword [rsp + 0x868], r9
mov qword [rsp + 0x870], r10
mov dword [rsp + 0x878], r11d
mov byte [rsp + 0x87c], al
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x530]
lea r8, [rsp + 0x850]
mov r9d, 0x2d
call fcn.140092fc0
cmp byte [rsp + 0x140], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x68], rax
mov r12, qword [rsp + 0x158]
test r12, r12
jne 0x140086b6c
xor ebp, ebp
jmp 0x140086c3c
mov edi, 8
jmp 0x140086b4b
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x140086abd
add r13, 0x18
dec rsi
je 0x1400868c7
cmp qword [r13 - 8], 0
je 0x140086ab0
mov r8, qword [r13]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140086ab0
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mul rcx
mov rsi, rdx
shr rsi, 4
jmp 0x140086b0d
add r13, 0x18
dec rsi
je 0x1400868fa
cmp qword [r13 - 8], 0
je 0x140086b00
mov r8, qword [r13]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140086b00
movq rdi, xmm0
test rsi, rsi
je 0x140086b46
mov rbx, rdi
mov rcx, rbx
call fcn.14008ea30
add rbx, 0x30
dec rsi
jne 0x140086b35
movdqa xmm6, xmm9
movq rax, xmm6
test rax, rax
je case.0x14008b089.0
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
ud2
lea rcx, [r12 + r12*2]
shl rcx, 4
mov rax, qword [rsp + 0x68]
add rcx, rax
mov qword [rsp + 0x50], rcx
jmp 0x140086b93
mov rax, qword [rsp + 0x40]
cmp rax, qword [rsp + 0x50]
je 0x1400885e9
mov r15, qword [rax]
mov r13, qword [rax + 0x18]
add rax, 0x30
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [r15]
pmovmskb esi, xmm0
not esi
lea rdi, [r15 + 0x10]
sub r13, 1
jb 0x140086b83
test si, si
jne 0x140086bdd
nop dword [rax]
movdqa xmm0, xmmword [rdi]
pmovmskb esi, xmm0
add r15, 0xfffffffffffffc80
add rdi, 0x10
cmp esi, 0xffff
je 0x140086bc0
not esi
tzcnt eax, esi
neg rax
imul r14, rax, 0x38
add r14, r15
add r14, 0xffffffffffffffe0
je 0x140086b83
mov rcx, r14
lea rdx, [0x1401cd3c8]
call 0x14008d880
mov bpl, 1
test al, al
jne 0x140086c21
lea ebx, [rsi - 1]
and ebx, esi
mov rcx, r14
lea rdx, [0x1401cd3e8]
call 0x14008d880
mov esi, ebx
test al, al
je 0x140086bb2
test r12, r12
je 0x140086c3c
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.14008ea30
add rsi, 0x30
dec r12
jne 0x140086c2b
cmp qword [rsp + 0x70], 0
je 0x140086c57
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x68]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x530]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x140207908]
lea rsi, [rsp + 0x850]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400df1c0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x6b0], rax
lea rax, [0x1401cbeef]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x1c6933000f9aa9ec
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e700
movabs rcx, 0x7fba55ac972ef4f4
xor rcx, qword [rax]
movabs rdx, 0x6653301494f62a4b
xor rdx, qword [rax + 8]
movabs r8, 0x6e9977740a67b7bc
xor r8, qword [rax + 0x10]
mov r9d, 0x4e8d3eaf
xor r9d, dword [rax + 0x18]
movzx eax, word [rax + 0x1c]
mov r10d, eax
xor r10b, 0x63
shr eax, 8
xor al, 0xea
movzx r10d, r10b
movzx eax, al
shl eax, 8
or eax, r10d
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov dword [rsp + 0x158], r9d
mov word [rsp + 0x15c], ax
lea rcx, [rsp + 0x850]
lea rdx, [rsp + 0x6b0]
lea r8, [rsp + 0x140]
mov r9d, 0x1e
call fcn.140092fc0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x860]
mov rdi, qword [rsp + 0x868]
lea rax, [rdi + rdi*2]
shl rax, 4
add rax, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], 0
mov qword [rsp + 0x178], 0
lea rcx, [rsp + 0x850]
lea rdx, [rsp + 0x140]
call fcn.140094e30
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x850], rax
jne 0x140086e07
mov ebx, 8
xor esi, esi
xor r14d, r14d
jmp 0x140086f5c
movzx eax, byte [0x14024a149]
mov edx, 0x60
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rbx, rax
mov rax, qword [rsp + 0x860]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0x850]
movups xmmword [rbx], xmm0
mov qword [rsp + 0x420], 4
mov qword [rsp + 0x428], rbx
mov qword [rsp + 0x430], 1
movups xmm0, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x8a0], xmm0
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x890], xmm0
movdqu xmm0, xmmword [rsp + 0x140]
movdqu xmm1, xmmword [rsp + 0x150]
movdqu xmm2, xmmword [rsp + 0x160]
movups xmm3, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x880], xmm3
movdqa xmmword [rsp + 0x870], xmm2
movdqa xmmword [rsp + 0x860], xmm1
movdqa xmmword [rsp + 0x850], xmm0
mov esi, 1
mov r15d, 0x18
lea r14, [rsp + 0x530]
lea r12, [rsp + 0x850]
lea r13, [rsp + 0x420]
jmp 0x140086f13
mov rax, qword [rsp + 0x540]
mov qword [rbx + r15 + 0x10], rax
movdqu xmm0, xmmword [rsp + 0x530]
movdqu xmmword [rbx + r15], xmm0
inc rsi
mov qword [rsp + 0x430], rsi
add r15, 0x18
mov rcx, r14
mov rdx, r12
call fcn.140094e30
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x530], rax
je 0x140086f4c
cmp rsi, qword [rsp + 0x420]
jne 0x140086ee8
mov rcx, r13
mov rdx, rsi
call fcn.140090ff0
mov rbx, qword [rsp + 0x428]
jmp 0x140086ee8
mov r14, qword [rsp + 0x420]
mov rbx, qword [rsp + 0x428]
lea rax, [rsi*8]
lea rcx, [rax + rax*2]
mov rax, rbx
mov r15, rcx
test rcx, rcx
je 0x140086f8e
mov rdx, qword [rax + 0x10]
cmp rdx, 0x40
je 0x140086f8e
add rax, 0x18
lea rcx, [r15 - 0x18]
cmp rdx, 0x80
jne 0x140086f6b
test rsi, rsi
jne 0x140087ccf
test r14, r14
je 0x140086fad
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
je 0x140086fc8
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
call fcn.14008ea30
add rsi, 0x30
dec rdi
jne 0x140086fb7
cmp qword [rsp + 0x50], 0
je 0x140086fe3
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x6b0]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rdx, [0x140207908]
lea rsi, [rsp + 0x850]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400df1c0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0x530], rax
lea rax, [0x1401ca404]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x265154c01a70a718
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e030
movabs rcx, 0x8fbf27517157894e
xor rcx, qword [rax]
movabs rdx, 0xe4474cdb01f36d9b
xor rdx, qword [rax + 8]
movabs r8, 0xe2bbaf70b6596c95
xor r8, qword [rax + 0x10]
mov r9d, 0x7de97f9a
xor r9d, dword [rax + 0x18]
movzx r10d, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
mov r11d, eax
shr r11d, 8
xor al, 0x77
xor r11b, 0xc4
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
xor r10b, 0x58
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov dword [rsp + 0x158], r9d
mov word [rsp + 0x15c], r11w
mov byte [rsp + 0x15e], r10b
lea rcx, [rsp + 0x850]
lea rdx, [rsp + 0x530]
lea r12, [rsp + 0x140]
mov r9d, 0x1f
mov r8, r12
call fcn.140092fc0
cmp byte [rsp + 0x850], 0x12
jne case.0x14008b089.0
mov rbx, qword [rsp + 0x858]
mov rsi, qword [rsp + 0x860]
mov r14, qword [rsp + 0x868]
test r14, r14
je 0x140087156
mov rdi, rsi
mov r13, r14
mov rcx, rdi
call fcn.14008ea30
add rdi, 0x30
dec r13
jne 0x140087145
test rbx, rbx
je 0x14008716c
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov edi, 0x9a7ecbe7
mov rcx, qword [rsp + 0x530]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.14009e2f0
mov rcx, rsi
call fcn.14009e5b0
mov r13, qword [rsp + 0x910]
lea rbx, [rdi + 0x45813419]
mov rcx, rsi
call fcn.14008da20
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.14009e2f0
mov rcx, rsi
call fcn.14009e5b0
call sub.KERNEL32.dll_GetTickCount64
mov rdi, rax
mov rcx, rsi
call fcn.14008da20
movzx eax, byte [rsp + 0x78]
or al, byte [rsp + 0x58]
or al, bpl
jne 0x140087cfe
test r15, r15
jne 0x140087cfe
cmp r14, 2
jb 0x140087cfe
cmp r13, rbx
jb 0x140087cfe
mov eax, 0x9a7ecbe7
cmp rdi, rax
ja 0x140087cfe
mov qword [rsp + 0x140], 0
mov dword [rsp + 0x420], 0
mov qword [rsp + 0x850], 0
mov dword [rsp + 0x530], 0
call sub.KERNEL32.dll_GetCurrentProcess
lea rdx, [rsp + 0x530]
mov rcx, rax
call sub.KERNEL32.dll_CheckRemoteDebuggerPresent
call sub.KERNEL32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea rbp, [rsp + 0x140]
mov rcx, rax
mov edx, 7
mov r8, rbp
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
call sub.KERNEL32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x420]
mov rcx, rax
mov edx, 0x1f
mov r9d, 4
call sub.ntdll.dll_NtQueryInformationProcess
call sub.KERNEL32.dll_GetCurrentProcess
mov qword [rsp + 0x20], 0
lea rsi, [rsp + 0x850]
mov rcx, rax
mov edx, 0x1e
mov r8, rsi
mov r9d, 8
call sub.ntdll.dll_NtQueryInformationProcess
cmp dword [rsp + 0x530], 0
jne 0x1400885df
cmp qword [rsp + 0x140], 0
jne 0x1400885df
cmp dword [rsp + 0x420], 0
je 0x1400885df
cmp qword [rsp + 0x850], 0
jne 0x1400885df
mov ecx, 5
xor edx, edx
call fcn.1400723f0
lea rax, [0x1401bd75f]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xa8c5ec218a0d9c47
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e4a0
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov edi, dword [rax + 0x18]
movzx ebx, byte [rax + 0x1c]
movzx eax, byte [0x14024a149]
mov edx, 0x1d
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rsi, rax
xor bl, 0xf1
xor edi, 0xf244df03
movabs rax, 0x17f8b6af50815f1
xor r14, rax
movabs rax, 0x1a74ce0ba36ba85b
xor r15, rax
movabs rax, 0xa2b72caa882941e0
xor r12, rax
mov qword [rsi], r12
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r14
mov dword [rsi + 0x18], edi
mov byte [rsi + 0x1c], bl
lea rcx, [rsp + 0x850]
mov r8d, 0x1d
mov rdx, rsi
call fcn.140082a60
cmp dword [rsp + 0x850], 2
jne 0x1400885df
mov rax, qword [rsp + 0x858]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x14008744a
test rcx, rcx
je 0x14008744a
lea rbx, [rax - 1]
mov r12, qword [rax - 1]
mov rdi, qword [rax + 7]
mov rcx, r12
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140087439
cmp qword [rdi + 0x10], 0x11
jb 0x140087428
mov r12, qword [r12 - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x850], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x858], xmm0
mov dword [rsp + 0x868], 7
mov qword [rsp + 0x86c], 0
mov word [rsp + 0x874], 0
mov byte [rsp + 0x871], 1
mov byte [rsp + 0x874], 1
mov byte [rsp + 0x873], 1
lea rdi, [rsp + 0x850]
mov edx, 0x1d
mov rcx, rsi
mov r8, rdi
call fcn.140082560
mov rbx, rax
mov rsi, rdx
lea rax, [0x1401be77a]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xcee2b2ebfe1873a5
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e3d0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rbx, rbx
jne case.0x14008b089.0
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rax, [0x1401bf35b]
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0x2269b22c5eb2a365
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e5d0
mov rdi, qword [rax]
mov esi, dword [rax + 8]
movzx ebx, word [rax + 0xc]
movzx r14d, byte [rax + 0xe]
movzx eax, byte [0x14024a149]
xor r13d, r13d
mov edx, 0xf
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
shl r14d, 0x10
or ebx, r14d
mov ecx, ebx
shr ecx, 0x10
xor cl, 0xd8
mov edx, ebx
xor dl, 0xfa
shr ebx, 8
xor bl, 0x8b
movzx edx, dl
movzx r8d, bl
shl r8d, 8
or r8d, edx
xor esi, 0xde17ed67
movabs rdx, 0xc4f54b49d44cc04b
xor rdi, rdx
mov qword [rax], rdi
mov dword [rax + 8], esi
mov word [rax + 0xc], r8w
mov byte [rax + 0xe], cl
mov qword [rsp + 0x688], 0xf
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x698], 0xf
lea rax, [rsp + 0x688]
mov qword [rsp + 0x530], rax
lea rax, [0x140054170]
mov qword [rsp + 0x538], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x530]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
mov rcx, rbp
lea rdx, [rsp + 0x850]
call fcn.1400039a0
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x650], rax
mov edi, 0xa
movabs r14, 0x23eacbca900546e6
mov r15d, 0xffffffff
jmp 0x1400876b7
cmp qword [rsp + 0x5b8], 0
je 0x1400876b1
mov r8, qword [rsp + 0x5c0]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
inc r13d
add rdi, rdi
lea rax, [0x1401c0fd8]
mov qword [rsp + 0x850], rax
lea rbx, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0x9cdaddabcfe6f560
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e8a0
mov rcx, qword [rax]
movabs rdx, 0xb39c537030b3fa81
xor rcx, rdx
mov rdx, qword [rax + 8]
movabs r8, 0x7dba755e07bbbea9
xor rdx, r8
mov r8, qword [rax + 0x10]
movabs r9, 0x2b35214551243616
xor r8, r9
mov r9, qword [rax + 0x18]
movabs r10, 0x255318636ca51fab
xor r9, r10
mov r10d, dword [rax + 0x20]
mov r11d, 0x8db432cc
xor r10d, r11d
movzx r11d, byte [rax + 0x26]
movzx eax, word [rax + 0x24]
mov esi, eax
shr esi, 8
xor al, 0x7a
xor sil, 0x50
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0x5b
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov dword [rsp + 0x160], r10d
mov word [rsp + 0x164], si
mov byte [rsp + 0x166], r11b
mov rcx, rbx
mov rdx, rbp
call fcn.1400b4660
lea rcx, [rsp + 0x530]
mov rdx, rbx
call fcn.1400c29d0
mov r12, qword [rsp + 0x530]
movabs rax, 0x8000000000000001
cmp r12, rax
je 0x1400885f9
cmp r13d, 4
je 0x1400888b2
lea rax, [0x1401cc3a9]
mov qword [rsp + 0x850], rax
lea rsi, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0x3eaf536eba3e2767
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e150
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
movzx r10d, byte [rax + 0x22]
movzx eax, word [rax + 0x20]
mov r11d, eax
shr r11d, 8
xor al, 0xe3
xor r11b, 0x66
movzx eax, al
movzx r11d, r11b
shl r11d, 8
or r11d, eax
movabs rax, 0x1eab9ca3112fb726
xor rcx, rax
mov qword [rsp + 0x140], rcx
movabs rax, 0x75510084cac68dbc
xor rdx, rax
mov qword [rsp + 0x148], rdx
movabs rax, 0x74ab8074fd74eea4
xor r8, rax
mov qword [rsp + 0x150], r8
xor r9, r14
mov qword [rsp + 0x158], r9
mov word [rsp + 0x160], r11w
xor r10b, 0xe5
mov byte [rsp + 0x162], r10b
mov qword [rsp + 0x420], rbp
mov qword [rsp + 0x428], 0x23
lea rax, [rsp + 0x420]
mov qword [rsp + 0x6b0], rax
lea rax, [0x140082540]
mov qword [rsp + 0x6b8], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
mov rcx, rsi
call fcn.14007c420
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call sub.KERNEL32.dll_CreateWaitableTimerExW
test rax, rax
je 0x1400879b1
mov rsi, rax
test rdi, rdi
js 0x1400879a9
imul rax, rdi, 0xffffffffff676980
mov qword [rsp + 0x850], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rsi
lea rdx, [rsp + 0x850]
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetWaitableTimer
test eax, eax
je 0x1400879a9
mov rcx, rsi
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov ebx, eax
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
cmp ebx, 0xffffffff
jne 0x1400879c4
jmp 0x1400879b1
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
imul rcx, rdi, 0x3e8
cmp rcx, r15
cmovae rcx, r15
call sub.KERNEL32.dll_Sleep
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x140087b1d
movabs rax, 0x8000000000000001
cmp r12, rax
jne 0x140087bb6
cmp qword [rsp + 0x538], 0
je 0x140087a0b
mov r8, qword [rsp + 0x540]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x590], 0
je 0x140087a2c
mov r8, qword [rsp + 0x598]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x5b8]
test rsi, rsi
je 0x140087a6a
mov rbx, qword [rsp + 0x5b0]
add rbx, 8
jmp 0x140087a50
add rbx, 0x20
dec rsi
je 0x140087a6a
cmp qword [rbx - 8], 0
je 0x140087a47
mov r8, qword [rbx]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140087a47
cmp qword [rsp + 0x5a8], 0
je 0x140087a8b
mov r8, qword [rsp + 0x5b0]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x618]
mov rbx, qword [rsp + 0x620]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140087ac3
cmp qword [rbx + 0x10], 0x11
jb 0x140087ab2
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x5d0]
test rsi, rsi
je 0x140087b01
mov rbx, qword [rsp + 0x5c8]
add rbx, 8
jmp 0x140087ae7
add rbx, 0x58
dec rsi
je 0x140087b01
cmp qword [rbx - 8], 0
je 0x140087ade
mov r8, qword [rbx]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140087ade
cmp qword [rsp + 0x5c0], 0
je 0x1400876b1
mov r8, qword [rsp + 0x5c8]
jmp 0x1400876a3
mov rax, qword [rsp + 0x538]
cmp rax, qword [rsp + 0x60]
je 0x140087b47
test rax, rax
je 0x140087b47
mov r8, qword [rsp + 0x540]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x550]
cmp rax, qword [rsp + 0x60]
je 0x140087b71
test rax, rax
je 0x140087b71
mov r8, qword [rsp + 0x558]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x5a8]
test rsi, rsi
je 0x1400876b1
mov rbx, qword [rsp + 0x5b0]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1400876b1
cmp qword [rbx + 0x10], 0x11
jb 0x140087ba5
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
jmp 0x1400876ac
test r12, r12
je 0x140087bd1
mov r8, qword [rsp + 0x538]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x588], 0
je 0x140087bf2
mov r8, qword [rsp + 0x590]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x5b0]
test rsi, rsi
je 0x140087c30
mov rbx, qword [rsp + 0x5a8]
add rbx, 8
jmp 0x140087c16
add rbx, 0x20
dec rsi
je 0x140087c30
cmp qword [rbx - 8], 0
je 0x140087c0d
mov r8, qword [rbx]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140087c0d
cmp qword [rsp + 0x5a0], 0
je 0x140087c51
mov r8, qword [rsp + 0x5a8]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x610]
mov rbx, qword [rsp + 0x618]
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x140087c89
cmp qword [rbx + 0x10], 0x11
jb 0x140087c78
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x5c8]
test rsi, rsi
je 0x140087690
mov rbx, qword [rsp + 0x5c0]
add rbx, 8
jmp 0x140087cb5
add rbx, 0x58
dec rsi
je 0x140087690
cmp qword [rbx - 8], 0
je 0x140087ca8
mov r8, qword [rbx]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140087ca8
lea r12, [rbx + 8]
jmp 0x140087ce2
add r12, 0x18
dec rsi
je 0x140086f97
cmp qword [r12 - 8], 0
je 0x140087cd5
mov r8, qword [r12]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140087cd5
lea rax, [0x1401c28b5]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x19545ba874134d44
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008ea10
movabs rcx, 0x177edbaecabe1210
xor rcx, qword [rax]
mov edx, 0x4d64c8cb
xor edx, dword [rax + 8]
movzx eax, word [rax + 0xc]
mov r8d, eax
xor r8b, 0x55
shr eax, 8
xor al, 0x9c
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x420], rcx
mov dword [rsp + 0x428], edx
mov word [rsp + 0x42c], ax
lea rax, [rsp + 0x420]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 0xe
mov qword [rsp + 0x530], r12
lea rax, [0x140082540]
mov qword [rsp + 0x538], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x530]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.14007c420
cmp byte [rsp + 0x78], 0
je 0x140088296
lea rax, [0x1401c13cc]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x7266fbabdae8102e
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e580
movabs rcx, 0x631cf2ec5cdd0113
xor rcx, qword [rax]
movabs rdx, 0xfefdc320556085cc
xor rdx, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0xec
shr eax, 8
xor al, 0xed
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov word [rsp + 0x150], ax
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x12
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
cmp byte [rsp + 0x58], 0
jne 0x1400882a1
test bpl, bpl
je 0x140088387
lea rax, [0x1401c85b9]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xdb8890ba34b38e3c
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008df40
movabs rcx, 0xce1571673a161d59
xor rcx, qword [rax]
movabs rdx, 0xf1e2afc670d8e1b
xor rdx, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov r8d, eax
xor r8b, 0x5c
shr eax, 8
xor al, 0x34
movzx r8d, r8b
movzx eax, al
shl eax, 8
or eax, r8d
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov word [rsp + 0x150], ax
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x12
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
test r15, r15
jne 0x140088390
cmp r14, 2
jae 0x1400884c9
lea rax, [0x1401bdf7f]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xa4d3b9916ceb73d6
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e7d0
movabs rcx, 0xbced0d85c8d249d1
xor rcx, qword [rax]
movabs rdx, 0x4a3cca3bb6e9c64b
xor rdx, qword [rax + 8]
movzx r8d, byte [rax + 0x12]
movzx eax, word [rax + 0x10]
mov r9d, eax
shr r9d, 8
xor al, 0x46
xor r9b, 0xb3
movzx eax, al
movzx r9d, r9b
shl r9d, 8
or r9d, eax
xor r8b, 3
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov word [rsp + 0x150], r9w
mov byte [rsp + 0x152], r8b
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x13
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
cmp r13, rbx
jb 0x1400884d2
mov eax, 0x9a7ecbe7
cmp rdi, rax
jbe 0x140088291
lea rax, [0x1401c2706]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x2f60da37f12d2a16
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e1d0
movabs rcx, 0xa99b7aeb2486b2e6
xor rcx, qword [rax]
movabs rdx, 0xd41233841e094888
xor rdx, qword [rax + 8]
mov r8d, 0xde3dac15
xor r8d, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
mov r9d, eax
xor r9b, 0x8a
and eax, 0xff00
movzx r9d, r9b
or r9d, eax
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov dword [rsp + 0x150], r8d
mov word [rsp + 0x154], r9w
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x16
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
call fcn.14007bb60
cmp byte [rsp + 0x58], 0
je 0x140087f22
lea rax, [0x1401c4cbd]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xa15731d27c5c1315
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e730
movabs rcx, 0xadddfc9d15a9cd3a
xor rcx, qword [rax]
mov edx, 0x5b84e2fa
xor edx, dword [rax + 8]
mov qword [rsp + 0x420], rcx
mov dword [rsp + 0x428], edx
lea rax, [rsp + 0x420]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], 0xc
mov qword [rsp + 0x530], r12
lea rax, [0x140082540]
mov qword [rsp + 0x538], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x530]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
test bpl, bpl
jne 0x140087f2b
test r15, r15
je 0x14008803d
lea rax, [0x1401ccf5c]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x4518ec5dcf602f98
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e7a0
movabs rcx, 0xf4b0fe283d6a8d49
xor rcx, qword [rax]
movabs rdx, 0x4528210d85c4f9d2
xor rdx, qword [rax + 8]
mov r8d, 0x603d90a9
xor r8d, dword [rax + 0x10]
movzx r9d, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
mov r10d, eax
shr r10d, 8
xor al, 0x1d
xor r10b, 0xee
movzx eax, al
movzx r10d, r10b
shl r10d, 8
or r10d, eax
xor r9b, 0x33
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov dword [rsp + 0x150], r8d
mov word [rsp + 0x154], r10w
mov byte [rsp + 0x156], r9b
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x17
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
cmp r14, 2
jb 0x140088047
cmp r13, rbx
jae 0x14008816d
lea rax, [0x1401c52d5]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x14ee0fde57a0a558
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e2b0
movabs rcx, 0x7438c44b1e8bf179
xor rcx, qword [rax]
movabs rdx, 0x9133f695fa83d073
xor rdx, qword [rax + 8]
movabs r8, 0xfdc36b9b13c50dc5
xor r8, qword [rax + 0x10]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x530], r12
mov qword [rsp + 0x538], 0x18
lea rax, [rsp + 0x530]
mov qword [rsp + 0x420], rax
lea rax, [0x140082540]
mov qword [rsp + 0x428], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x420]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
mov eax, 0x9a7ecbe7
cmp rdi, rax
ja 0x14008817b
jmp 0x140088291
call fcn.140012880
call fcn.14007bb60
xor ebp, ebp
test r12, r12
jne 0x140086c26
jmp 0x140086c3c
mov dword [rsp + 0x850], 0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x858], xmm0
mov dword [rsp + 0x868], 7
mov qword [rsp + 0x86c], 0
mov word [rsp + 0x874], 0
mov byte [rsp + 0x871], 1
mov byte [rsp + 0x874], 1
mov byte [rsp + 0x873], 1
lea rbx, [rsp + 0x850]
mov rcx, qword [rsp + 0x658]
mov rdx, qword [rsp + 0x650]
mov r8, rbx
call fcn.140082560
mov r13, rax
mov rsi, rdx
lea rax, [0x1401c93fc]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xc0afd562603cddbf
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e480
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov ecx, dword [rax + 0x20]
movzx eax, byte [rax + 0x24]
test r13, r13
jne case.0x14008b089.0
mov qword [rsp + 0x6a0], rsi
lea rcx, [rsp + 0x538]
call fcn.1400abd60
mov rbx, rax
mov r13, rdx
mov r8, qword [rdx + 0x48]
lea rsi, [rsp + 0x850]
lea r9, [rsp + 0x6a0]
mov rcx, rsi
mov rdx, rax
call fcn.1400950e0
lea rax, [0x1401c2518]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0xc934263e792c8458
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14008e500
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
cmp qword [rsp + 0x850], 0
jne case.0x14008b089.0
mov rcx, rbx
call qword [r13]
cmp qword [r13 + 8], 0
je 0x140088784
cmp qword [r13 + 0x10], 0x11
jb 0x140088773
mov rbx, qword [rbx - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x658]
mov rdx, qword [rsp + 0x650]
call fcn.1400947e0
mov r13, rax
mov rbx, rdx
lea rax, [0x1401cab6c]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xc8c2d33e3a58e7da
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e440
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx ecx, byte [rax + 0x16]
movzx eax, word [rax + 0x14]
test r13, r13
jne case.0x14008b089.0
lea rcx, [rsp + 0x850]
mov rdx, rbx
call fcn.140091970
lea rax, [0x1401c6eb8]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x985539ee57744221
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14008e550
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
movzx eax, word [rax + 0x18]
cmp dword [rsp + 0x850], 4
jne case.0x14008b089.0
mov rsi, qword [rsp + 0x858]
mov rcx, qword [rsp + 0x860]
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rcx
mov rax, qword [rsi + 0x20]
mov qword [rsp + 0x760], rax
test rax, rax
jne 0x140089a6d
call sub.KERNEL32.dll_CloseHandle
lock dec qword [rsi]
jne 0x1400888a0
mov rcx, qword [rsp + 0xc8]
call fcn.140095340
mov rcx, qword [rsp + 0x6a0]
call sub.KERNEL32.dll_CloseHandle
jmp 0x140088a21
lea rax, [0x1401c5c37]
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0x59dafe9ba6d21f82
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e6b0
movabs rcx, 0x4d39200a53b2cc56
xor rcx, qword [rax]
movabs rdx, 0xc9f9a86a4e32c656
xor rdx, qword [rax + 8]
movabs r8, 0xb4640c2262665410
xor r8, qword [rax + 0x10]
movabs r9, 0xd76cb56e89ea8c92
xor r9, qword [rax + 0x18]
movabs r10, 0xa926f91f79ebe44e
xor r10, qword [rax + 0x20]
movzx r11d, byte [rax + 0x2a]
movzx eax, word [rax + 0x28]
mov esi, eax
shr esi, 8
xor al, 0xbd
xor sil, 0x61
movzx eax, al
movzx esi, sil
shl esi, 8
or esi, eax
xor r11b, 0xa1
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov qword [rsp + 0x160], r10
mov word [rsp + 0x168], si
mov byte [rsp + 0x16a], r11b
mov qword [rsp + 0x420], rbp
mov qword [rsp + 0x428], 0x2b
lea rax, [rsp + 0x420]
mov qword [rsp + 0x6b0], rax
lea rax, [0x140082540]
mov qword [rsp + 0x6b8], rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x850], rax
mov qword [rsp + 0x858], 2
mov qword [rsp + 0x870], 0
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x860], rax
mov qword [rsp + 0x868], 1
lea rcx, [rsp + 0x850]
call fcn.14007c420
lea rcx, [rsp + 0x530]
call fcn.14008d020
mov rcx, qword [rsp + 0x658]
mov rdx, qword [rsp + 0x650]
call fcn.1400829a0
mov rsi, rax
lea rax, [0x1401cb877]
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0xfa196989cb538dab
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e110
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test rsi, rsi
jne case.0x14008b089.0
lea rax, [0x1401c8b89]
mov qword [rsp + 0x850], rax
lea rdx, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rax, 0x7afc1d56f6f6ec1c
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e330
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov r14, qword [rax + 0x10]
mov r15, qword [rax + 0x18]
mov ebp, dword [rax + 0x20]
movzx eax, byte [0x14024a149]
mov edx, 0x24
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rbx, rax
movabs rax, 0x57790207aac2bca
xor rsi, rax
movabs rax, 0x89226b15190e98b9
xor rdi, rax
movabs rax, 0x494d79864c558f95
xor r14, rax
movabs rax, 0xf40bd0a129c49db8
xor r15, rax
xor ebp, 0x4de9426e
mov qword [rbx], rsi
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x20], ebp
lea rsi, [rsp + 0x140]
mov r8d, 0x24
mov rcx, rsi
mov rdx, rbx
call fcn.140003710
lea r15, [rsp + 0x850]
mov rcx, r15
mov rdx, rsi
call fcn.1400015b0
mov dword [rsp + 0x910], 0x8000000
lea rcx, [rsp + 0x140]
mov rdx, r15
call fcn.140077a20
lea rax, [0x1401cac43]
mov qword [rsp + 0x530], rax
lea rdx, [rsp + 0x530]
mov rcx, qword [rsp + 0x530]
movabs rax, 0x814d42d406002ab5
mov qword [rsp + 0x530], rax
mov rdx, qword [rsp + 0x530]
call fcn.14008e4d0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov rbp, qword [rsp + 0x140]
cmp rbp, 2
je case.0x14008b089.0
mov r12, qword [rsp + 0x148]
mov r14, qword [rsp + 0x150]
mov r15, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
mov r13, qword [rsp + 0x178]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test rbp, rbp
jne 0x140089a46
test r14, r14
jne case.0x14008bc7b.25
test rdi, rdi
je 0x140088c5b
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rcx, [rsp + 0x850]
call fcn.14008d0f0
mov ecx, 0x64
xor edx, edx
call fcn.1400723f0
mov qword [rsp + 0x850], 0x24
mov qword [rsp + 0x858], rbx
mov qword [rsp + 0x860], 0x24
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.1400947a0
test rax, rax
je 0x140088d04
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140088d04
test rcx, rcx
je 0x140088d04
mov rbx, rax
dec rbx
mov r15, qword [rax - 1]
mov rdi, qword [rax + 7]
mov rcx, r15
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140088cf3
cmp qword [rdi + 0x10], 0x11
jb 0x140088ce2
mov r15, qword [r15 - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
lea rax, [0x1401c2c31]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xde8a1eb70dbdfc06
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008df70
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov r14, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
movzx ebp, word [rax + 0x28]
movzx eax, byte [0x14024a149]
mov edx, 0x2a
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov ecx, ebp
xor cl, 0x25
shr ebp, 8
xor bpl, 0x20
movzx edx, bpl
shl edx, 8
movzx ecx, cl
or ecx, edx
movabs rdx, 0x9289ee01934912af
xor rsi, rdx
movabs rdx, 0x689a99e8467aad05
xor rdi, rdx
movabs rdx, 0x48baac654f57035b
xor rbx, rdx
movabs rdx, 0x7a6507d6bbf65d3e
xor r14, rdx
movabs rdx, 0x1debe077896af9b9
xor r15, rdx
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], r15
mov word [rax + 0x28], cx
lea rsi, [rsp + 0x140]
mov r8d, 0x2a
mov rcx, rsi
mov rdx, rax
call fcn.140003710
lea rbx, [rsp + 0x850]
mov rcx, rbx
mov rdx, rsi
call fcn.1400015b0
mov dword [rsp + 0x910], 0x8000000
lea rcx, [rsp + 0x140]
mov rdx, rbx
call fcn.140077a20
lea rax, [0x1401c0134]
mov qword [rsp + 0x530], rax
lea rdx, [rsp + 0x530]
mov rcx, qword [rsp + 0x530]
movabs rax, 0xfd56464f642ee739
mov qword [rsp + 0x530], rax
mov rdx, qword [rsp + 0x530]
call fcn.14008e820
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
movzx eax, word [rax + 0x20]
mov r13, qword [rsp + 0x140]
cmp r13, 2
je case.0x14008b089.0
mov r15, qword [rsp + 0x148]
mov r14, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
mov r12, qword [rsp + 0x178]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14008c32f
test r14, r14
jne 0x14008c340
test rdi, rdi
je 0x140088eeb
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.14008d0f0
mov ecx, 0xf
xor edx, edx
call fcn.1400723f0
lea rax, [0x1401bd588]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x1acfcd82efe9462c
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e1a0
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov r14, qword [rax + 0x18]
mov r15, qword [rax + 0x20]
mov ebp, dword [rax + 0x28]
movzx eax, byte [0x14024a149]
mov edx, 0x2c
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
movabs rcx, 0xb2913218c81f2761
xor rsi, rcx
movabs rcx, 0xaab7c93a0e9d7651
xor rdi, rcx
movabs rcx, 0x7c0616fb2184beb2
xor rbx, rcx
movabs rcx, 0x34c38ffe65fc1b77
xor r14, rcx
movabs rcx, 0x892829eee2b1c160
xor r15, rcx
xor ebp, 0xea05364
mov qword [rax], rsi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], r15
mov dword [rax + 0x28], ebp
lea rsi, [rsp + 0x140]
mov r8d, 0x2c
mov rcx, rsi
mov rdx, rax
call fcn.140003710
lea rbx, [rsp + 0x850]
mov rcx, rbx
mov rdx, rsi
call fcn.1400015b0
mov dword [rsp + 0x910], 0x8000000
lea rcx, [rsp + 0x140]
mov rdx, rbx
call fcn.140077a20
lea rax, [0x1401bfc2d]
mov qword [rsp + 0x530], rax
lea rdx, [rsp + 0x530]
mov rcx, qword [rsp + 0x530]
movabs rax, 0xffaa58325f77ce8e
mov qword [rsp + 0x530], rax
mov rdx, qword [rsp + 0x530]
call fcn.14008e960
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r13, qword [rsp + 0x140]
cmp r13, 2
je case.0x14008b089.0
mov r14, qword [rsp + 0x148]
mov r12, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
mov r15, qword [rsp + 0x178]
call sub.KERNEL32.dll_CloseHandle
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r13, r13
jne 0x14008c356
test r12, r12
jne 0x14008c367
test rdi, rdi
je 0x1400890d6
mov rcx, rsi
call sub.KERNEL32.dll_CloseHandle
lea rsi, [rsp + 0x850]
mov rcx, rsi
call fcn.14008d0f0
mov ecx, 0xf
xor edx, edx
call fcn.1400723f0
lea rax, [0x1401be4fd]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0x1648ff8b58a32749
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e9a0
mov esi, dword [rax]
movzx edi, word [rax + 4]
movzx ebx, byte [rax + 6]
movzx eax, byte [0x14024a149]
mov edx, 7
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
shl ebx, 0x10
or edi, ebx
mov ecx, edi
xor cl, 0xbf
mov edx, edi
shr edx, 8
xor dl, 0x59
movzx ecx, cl
movzx edx, dl
shl edx, 8
or edx, ecx
movzx ecx, dx
shl rcx, 0x20
shr edi, 0x10
xor dil, 0xf7
movzx edx, dil
mov byte [rax + 6], dl
shl rdx, 0x30
or rdx, rcx
xor esi, 0x189b8675
mov dword [rax], esi
shr rdx, 0x20
mov word [rax + 4], dx
lea rbx, [rsp + 0x140]
mov r8d, 7
mov rcx, rbx
mov rdx, rax
call fcn.140003710
lea rsi, [rsp + 0x850]
mov rcx, rsi
mov rdx, rbx
call fcn.1400015b0
mov dword [rsp + 0x910], 0x8000000
lea rax, [0x1401c40d8]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x2dd88192190f09
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14008e650
movzx eax, word [rax]
mov ecx, eax
xor cl, 0x51
shr eax, 8
xor al, 0x88
movzx ecx, cl
movzx eax, al
shl eax, 8
or eax, ecx
mov word [rsp + 0x6b0], ax
lea rdx, [rsp + 0x6b0]
mov r8d, 2
mov rcx, rsi
call fcn.140001450
lea rax, [0x1401cb27f]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x140]
movabs rax, 0x74d3ff0328738fb8
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x140]
call fcn.14008e060
movabs rcx, 0x9ef7fdd68d2c89d
xor rcx, qword [rax]
movabs rdx, 0x4abd359424813637
xor rdx, qword [rax + 8]
movabs r8, 0xe2fa1ef76df7b1f3
xor r8, qword [rax + 0x10]
movabs r9, 0x94db501185b162c5
xor r9, qword [rax + 0x18]
movabs r10, 0x588d9ac25f8e0dd
xor r10, qword [rax + 0x20]
movabs r11, 0x383b42f2c91788b2
xor r11, qword [rax + 0x28]
movabs rdi, 0x1932a0c5cc072c0
xor rdi, qword [rax + 0x30]
movabs rbx, 0x4f330be9fe8194c5
xor rbx, qword [rax + 0x38]
mov ebp, 0xe789a50e
xor ebp, dword [rax + 0x40]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rdx
mov qword [rsp + 0x150], r8
mov qword [rsp + 0x158], r9
mov qword [rsp + 0x160], r10
mov qword [rsp + 0x168], r11
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x178], rbx
mov dword [rsp + 0x180], ebp
lea r12, [rsp + 0x140]
mov r8d, 0x44
mov rcx, rsi
mov rdx, r12
call fcn.140001450
lea rcx, [rsp + 0x530]
mov rdx, rsi
call fcn.140077a20
lea rax, [0x1401c4389]
mov qword [rsp + 0x420], rax
lea rdx, [rsp + 0x420]
mov rcx, qword [rsp + 0x420]
movabs rax, 0xd6a7ce71d453c271
mov qword [rsp + 0x420], rax
mov rdx, qword [rsp + 0x420]
call fcn.14008e6e0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov r14, qword [rsp + 0x530]
cmp r14, 2
je case.0x14008b089.0
mov r13, qword [rsp + 0x538]
mov rbx, qword [rsp + 0x540]
mov r15, qword [rsp + 0x548]
mov rdi, qword [rsp + 0x550]
mov rsi, qword [rsp + 0x558]
mov rcx, qword [rsp + 0x560]
mov rbp, qword [rsp + 0x568]
call sub.KERNEL32.dll_CloseHandle
mov rcx, rbp
call sub.KERNEL32.dll_CloseHandle
test r14, r14
jne 0x14008c37d
test rbx, rbx
jne 0x14008c38e
test rdi, rdi
je 0x14008941a
mov rcx, r12
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x140088c4e
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rdi, rdi
jne 0x140088c53
jmp 0x140088c5b
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x4f0], rax
pxor xmm6, xmm6
mov qword [rsp + 0x508], rax
mov qword [rsp + 0x500], rax
xor eax, eax
mov qword [rsp + 0x4f8], rax
clc
add al, 0
add bl, ch
invalid
clc
add al, 0
add bl, ch
mov rcx, qword [0x14024a138]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x268]
call fcn.140173eb0
mov rcx, qword [rsp + 0x4f8]
inc rcx
mov rax, rcx
mov qword [rsp + 0x4f8], rcx
cmp rcx, qword [rsp + 0x760]
je 0x14008cea9
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x4f8]
cmp qword [rax + 0x20], rcx
jbe 0x140089b2d
mov rdi, qword [rax + 0x18]
imul rbx, qword [rsp + 0x4f8], 0xb0
mov eax, 0x21
mov esi, 2
cmp byte [rdi + rbx + 0xa6], 0
je 0x140089b41
lea rcx, [0x1401cd855]
mov qword [rsp + 0x90], rcx
jmp 0x140089cf6
mov esi, 3
xor eax, eax
mov qword [rsp + 0x90], rax
jmp 0x140089cf6
mov rdx, qword [rdi + rbx + 0x80]
mov qword [rsp + 0x850], 0
mov rcx, qword [rsp + 0xd0]
lea r8, [rsp + 0x850]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140089cd7
mov dword [rsp + 0x850], 0
mov r8d, 4
mov rcx, qword [rsp + 0x4f0]
lea rdx, [rsp + 0x850]
call fcn.140094880
test rax, rax
je 0x140089baf
xor esi, esi
mov qword [rsp + 0x90], rax
jmp 0x140089cee
cmp dword [rsp + 0x850], 0x4034b50
jne 0x14008c236
mov qword [rsp + 0x850], 0
mov rcx, qword [rsp + 0xd0]
mov edx, 0x16
lea r8, [rsp + 0x850]
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140089cd7
mov word [rsp + 0x850], 0
mov r8d, 2
mov rcx, qword [rsp + 0x4f0]
lea rdx, [rsp + 0x850]
call fcn.140094880
test rax, rax
jne 0x140089ba0
movzx r14d, word [rsp + 0x850]
mov word [rsp + 0x850], 0
mov r8d, 2
mov rcx, qword [rsp + 0x4f0]
lea rdx, [rsp + 0x850]
call fcn.140094880
test rax, rax
jne 0x140089ba0
lea rax, [rdi + rbx]
add rax, 0x80
movzx ecx, word [rsp + 0x850]
mov rax, qword [rax]
add rcx, r14
lea rdx, [rax + rcx]
add rdx, 0x1e
mov qword [rdi + rbx + 0x90], rdx
mov qword [rsp + 0x850], 0
mov rcx, qword [rsp + 0xd0]
lea r8, [rsp + 0x850]
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140089cd7
mov rax, qword [rdi + rbx + 0x70]
mov qword [rsp + 0x98], rax
mov eax, 0x20
cmp word [rdi + rbx + 0x98], 5
jne 0x14008c261
lea rcx, [0x1402079ab]
mov qword [rsp + 0x90], rcx
jmp 0x140089cf6
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x90], rax
xor esi, esi
mov rax, qword [rsp + 0x98]
mov edi, 6
mov bl, 1
mov qword [rsp + 0x780], rax
mov qword [rsp + 0x778], rsi
lea rax, [0x1401c25c6]
mov qword [rsp + 0x850], rax
lea rax, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rdx, 0xbb2a929d99a7c70f
mov qword [rsp + 0x850], rdx
mov rdx, qword [rsp + 0x850]
call fcn.14008e7f0
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx eax, byte [rax + 0x1c]
test bl, bl
jne case.0x14008b089.0
mov qword [rsp + 0x140], rdi
mov rax, qword [rsp + 0x778]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x780]
mov qword [rsp + 0x158], rax
mov r8d, 0x120
lea rcx, [rsp + 0x160]
lea rdi, [rsp + 0x850]
mov rdx, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x280], rax
mov rbx, qword [rsp + 0x768]
mov qword [rsp + 0x288], rbx
mov r8d, 0xa0
lea rcx, [rsp + 0x290]
lea rsi, [rsp + 0x790]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x330], 0
mov eax, dword [rsp + 0x640]
mov ecx, dword [rsp + 0x643]
lea rdx, [rsp + 0x280]
mov dword [rdx + 0xb1], eax
mov dword [rdx + 0xb4], ecx
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x338], rax
lea rax, [0x1401cd6f8]
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x770]
mov qword [rsp + 0x348], rax
mov r8d, 0xc8
lea rcx, [rsp + 0x350]
lea rdx, [rsp + 0x420]
call sub.msvcrt.dll_memcpy
movdqu xmm0, xmmword [rbx + 8]
movdqu xmmword [rsp + 0x790], xmm0
lea rcx, [rsp + 0x688]
mov qword [rsp + 0x420], rcx
lea r8, [0x140054170]
mov qword [rsp + 0x428], r8
mov qword [rsp + 0x430], rsi
lea rax, [0x140082540]
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x6b0], 0
mov qword [rsp + 0x6b8], 1
mov qword [rsp + 0x6c0], 0
mov qword [rsp + 0x880], 0x20
mov byte [rsp + 0x888], 3
mov qword [rsp + 0x850], 0
mov qword [rsp + 0x860], 0
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x870], rax
lea rax, [0x1401afd90]
mov qword [rsp + 0x878], rax
mov rdx, rdi
call r8
test al, al
jne case.0x14008b089.0
mov rcx, qword [rsp + 0x870]
mov rax, qword [rsp + 0x878]
mov r8d, 1
lea rdx, [0x1401cced8]
call qword [rax + 0x18]
test al, al
jne case.0x14008b089.0
mov rcx, qword [rsp + 0x430]
lea rdx, [rsp + 0x850]
call qword [rsp + 0x438]
test al, al
jne case.0x14008b089.0
lea rax, [rsp + 0x280]
mov rcx, qword [rsp + 0x60]
cmp qword [rsp + 0x280], rcx
jne 0x140089f91
mov rax, qword [rsp + 0x288]
mov rcx, qword [rsp + 0x6b0]
mov qword [rsp + 0x788], rcx
mov rcx, qword [rsp + 0x6b8]
mov qword [rsp + 0x660], rcx
mov r8, qword [rsp + 0x6c0]
mov r9, qword [rax + 0x10]
test r9, r9
je 0x14008a0b2
mov r10, qword [rax + 8]
movzx eax, byte [r10 + r9 - 1]
test al, al
jns 0x14008a023
movzx ecx, byte [r10 + r9 - 2]
cmp cl, 0xc0
jge 0x14008a000
movzx edx, byte [r10 + r9 - 3]
cmp dl, 0xbf
jg 0x14008a005
movzx r9d, byte [r10 + r9 - 4]
and r9d, 7
shl r9d, 6
and edx, 0x3f
or edx, r9d
jmp 0x14008a008
and ecx, 0x1f
jmp 0x14008a010
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and eax, 0x3f
or eax, ecx
cmp eax, 0x110000
je 0x14008a0b2
cmp eax, 0x2f
je 0x14008a031
cmp eax, 0x5c
jne 0x14008a0b2
mov byte [rsp + 0x850], 1
lea rdi, [rsp + 0x850]
mov rcx, rdi
mov rdx, qword [rsp + 0x660]
call case.0x140076630.465
mov rsi, rax
lea rax, [0x1401c100e]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xe8898f62b61d1f18
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e400
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov ecx, dword [rax + 0x28]
movzx eax, byte [rax + 0x2c]
test rsi, rsi
je 0x14008bbef
jmp case.0x14008b089.0
mov dword [rsp + 0x850], 0
lea rax, [rsp + 0x858]
movdqu xmmword [rax], xmm6
mov dword [rsp + 0x868], 7
mov word [rax + 0x1c], 0
mov qword [rax + 0x14], 0
mov byte [rsp + 0x871], 1
mov word [rsp + 0x873], 0x101
mov rcx, qword [rsp + 0x660]
mov rdx, r8
lea rdi, [rsp + 0x850]
mov r8, rdi
call fcn.140082560
mov rbx, rax
mov rsi, rdx
lea rax, [0x1401c9eb4]
mov qword [rsp + 0x850], rax
mov rcx, qword [rsp + 0x850]
movabs rax, 0xe20f8ddfee83c69e
mov qword [rsp + 0x850], rax
mov rdx, qword [rsp + 0x850]
call fcn.14008e850
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov ecx, dword [rax + 0x18]
movzx ecx, byte [rax + 0x1e]
movzx eax, word [rax + 0x1c]
test rbx, rbx
jne case.0x14008b089.0
mov qword [rsp + 0x520], rsi
xor ecx, ecx
jmp 0x14008a186
mov ecx, 0x2000
cmp byte [r13 + 0x10], 0x23
jne case.0x14008ba7f.2
mov r8d, 0x2000
sub r8, rcx
add rcx, rsp
add rcx, 0x850
xor edx, edx
call sub.msvcrt.dll_memset
mov r15, qword [rsp + 0x140]
test r15, r15
jne 0x14008b07b
movzx eax, byte [rsp + 0x330]
mov byte [rsp + 0x330], 3
mov qword [rsp + 0x40], rax
cmp rax, 3
je case.0x14008b089.0
movzx r8d, byte [rsp + 0x331]
mov rax, qword [rsp + 0x288]
lea rcx, [rax + 0x98]
mov rdx, qword [rsp + 0x60]
cmp qword [rsp + 0x280], rdx
lea rdx, [rsp + 0x318]
cmovne rcx, rdx
lea rdx, [rsp + 0x280]
cmovne rax, rdx
movzx ecx, word [rcx]
cmp byte [rsp + 0x40], 2
mov edx, 0
mov qword [rsp + 0x68], r8
cmove edx, r8d
mov dword [rsp + 0x58], edx
cmp rcx, 4
ja case.0x14008b089.0
mov edx, dword [rsp + 0x332]
movzx r13d, word [rsp + 0x336]
shl r13, 0x20
or r13, rdx
movdqu xmm11, xmmword [rsp + 0x338]
mov rdx, qword [rsp + 0x348]
mov qword [rsp + 0x128], rdx
mov rdx, qword [rsp + 0x350]
mov qword [rsp + 0x70], rdx
mov rdx, qword [rsp + 0x358]
mov qword [rsp + 0x78], rdx
movdqu xmm8, xmmword [rsp + 0x360]
mov rdx, qword [rsp + 0x370]
mov qword [rsp + 0xa8], rdx
mov rdx, qword [rsp + 0x378]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0x380]
mov qword [rsp + 0x130], rdx
movdqu xmm7, xmmword [rsp + 0x388]
mov rdx, qword [rsp + 0x398]
mov qword [rsp + 0x138], rdx
mov edx, dword [rsp + 0x3a0]
mov dword [rsp + 0x8c], edx
movzx edx, byte [rsp + 0x3a7]
shl edx, 0x10
movzx ebx, word [rsp + 0x3a5]
or ebx, edx
movzx edx, byte [rsp + 0x3cf]
shl edx, 0x10
movzx ebp, word [rsp + 0x3cd]
or ebp, edx
movzx edx, byte [rsp + 0x3f7]
shl edx, 0x10
movzx r12d, word [rsp + 0x3f5]
or r12d, edx
movzx edx, byte [rsp + 0x3a4]
mov byte [rsp + 0x3e], dl
movdqu xmm10, xmmword [rsp + 0x3b0]
movzx edx, byte [rsp + 0x3cc]
mov byte [rsp + 0x3f], dl
movdqu xmm9, xmmword [rsp + 0x3d8]
mov eax, dword [rax + 0x9c]
mov dword [rsp + 0x50], eax
lea rdx, [0x1401abfc4]
movsxd rax, dword [rdx + rcx*4]
add rax, rdx
movzx edi, byte [rsp + 0x3f4]
mov rcx, qword [rsp + 0x3a8]
mov qword [rsp + 0xf0], rcx
mov rcx, qword [rsp + 0x3c0]
mov qword [rsp + 0xf8], rcx
mov ecx, dword [rsp + 0x3c8]
mov dword [rsp + 0x88], ecx
mov rcx, qword [rsp + 0x3d0]
mov qword [rsp + 0x100], rcx
mov rcx, qword [rsp + 0x3e8]
mov qword [rsp + 0x108], rcx
mov r14d, dword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x3f8]
mov qword [rsp + 0x120], rcx
mov rcx, qword [rsp + 0x400]
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rsp + 0x408]
mov qword [rsp + 0xe8], rcx
mov rcx, qword [rsp + 0x410]
mov qword [rsp + 0x110], rcx
jmp rax
mov rax, qword [0x14024a140]
test rax, rax
je 0x14008baf2
movq qword [rsp + 0xb8], xmm11
pshufd xmm0, xmm11, 0xee
movq qword [rsp + 0x510], xmm0
mov r15d, 2
test al, 2
jne 0x14008a8ba
xor eax, eax
jmp 0x14008a8d3
mov edx, 0x8000
mov ecx, 8
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rsi, rax
movzx eax, byte [0x14024a149]
mov edx, 0xab08
xor ecx, ecx
call fcn.140080d30
mov qword [rsp + 0x518], rax
test rax, rax
je case.0x14008b089.0
mov r15, qword [rsp + 0x518]
movdqu xmmword [r15 + 0xaaf0], xmm6
mov r8d, 0xaaea
mov rcx, r15
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [r15 + 0xab00], 0x10201
mov dword [rsp + 0x420], 0
mov byte [rsp + 0x424], 0
mov rax, qword [0x14024a140]
test rax, rax
je 0x14008bafc
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
je 0x14008a4fd
mov rcx, qword [0x14024a140]
mov rax, rcx
test rcx, rcx
je 0x14008bb68
shr eax, 0xa
and eax, 1
mov qword [rsp + 0xa0], rax
movzx eax, byte [rsp + 0x424]
mov byte [rsp + 0x6b4], al
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x4f], al
mov rax, rsi
shr rax, 0x20
mov rcx, rsi
shr rcx, 0x28
mov qword [rsp + 0x508], rcx
mov ecx, dword [rsp + 0x420]
mov dword [rsp + 0x6b0], ecx
movq qword [rsp + 0xb8], xmm11
pshufd xmm0, xmm11, 0xee
movq qword [rsp + 0x510], xmm0
mov r15d, 3
mov ecx, 0x8000
mov qword [rsp + 0x678], rcx
xor ecx, ecx
mov qword [rsp + 0xc0], rcx
mov dword [rsp + 0x84], r14d
mov byte [rsp + 0x3d], dil
mov ecx, dword [rsp + 0x50]
mov dword [rsp + 0xb4], ecx
mov dword [rsp + 0x58], eax
mov eax, esi
mov dword [rsp + 0x50], esi
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xd8], rax
mov rdi, qword [rsp + 0xe8]
xor eax, eax
mov qword [rsp + 0x670], rax
xor eax, eax
mov qword [rsp + 0x668], rax
jmp 0x14008aba8
movzx eax, byte [0x14024a149]
mov edx, 0x2000
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rsi, rax
movzx eax, byte [0x14024a149]
mov edx, 0x50
xor ecx, ecx
call fcn.140080d30
mov rcx, rax
mov qword [rsp + 0xc0], rax
test rax, rax
je case.0x14008b089.0
mov rcx, qword [rsp + 0xc0]
movdqu xmmword [rcx + 0x40], xmm6
movdqu xmmword [rcx + 0x30], xmm6
movdqu xmmword [rcx + 0x20], xmm6
movdqu xmmword [rcx + 0x10], xmm6
movdqu xmmword [rcx], xmm6
xor edx, edx
xor r8d, r8d
call fcn.14010abe0
test eax, eax
jne case.0x14008b089.0
mov rax, qword [0x14024a140]
test rax, rax
je 0x14008bb18
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
je 0x14008a678
mov rcx, qword [0x14024a140]
mov rax, rcx
test rcx, rcx
je 0x14008bb72
shr eax, 0xa
and eax, 1
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x68]
shl rax, 8
add rax, qword [rsp + 0x40]
shl r13, 0x10
or r13, rax
mov eax, dword [rsp + 0x420]
mov dword [rsp + 0x6b0], eax
movzx eax, byte [rsp + 0x424]
mov byte [rsp + 0x6b4], al
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x4f], al
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x3f], al
mov rdx, qword [rsp + 0x118]
mov rax, rdx
shr rax, 0x20
mov byte [rsp + 0x3e], al
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x130]
mov ecx, esi
shr ecx, 8
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x78], r13
mov r13, rsi
shr r13, 0x10
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x88], eax
mov eax, edx
shr rdx, 0x28
mov ecx, r12d
mov qword [rsp + 0x508], rcx
mov r12d, ebp
mov ebp, ebx
mov ebx, edx
pshufd xmm0, xmm9, 0xee
movq qword [rsp + 0xd8], xmm9
movdqa xmm9, xmm10
movdqa xmm10, xmm7
movdqa xmm7, xmm8
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x518], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x118], rcx
mov qword [rsp + 0x40], rsi
mov ecx, dword [rsp + 0x50]
mov dword [rsp + 0xb4], ecx
mov dword [rsp + 0x50], r14d
mov rcx, qword [rsp + 0x108]
mov qword [rsp + 0x110], rcx
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x108], rcx
mov dword [rsp + 0x8c], eax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x668], rax
movdqa xmm8, xmm11
mov eax, edi
mov dword [rsp + 0x58], eax
movq rdi, xmm0
mov eax, 0x2000
mov qword [rsp + 0xb8], rax
mov r15d, 4
mov eax, 0
mov qword [rsp + 0x70], rax
mov eax, 0
mov qword [rsp + 0x510], rax
xor eax, eax
mov qword [rsp + 0x128], rax
jmp 0x14008abaa
call fcn.14015b6e0
mov qword [rsp + 0xb8], rax
test rax, rax
je 0x14008a905
js case.0x14008b089.0
movzx eax, byte [0x14024a149]
xor ecx, ecx
mov rdx, qword [rsp + 0xb8]
call fcn.140080d30
mov r15, rax
test rax, rax
jne 0x14008a90b
jmp case.0x14008b089.0
mov rcx, qword [0x14024a140]
mov rax, rcx
test rcx, rcx
je 0x14008bb5e
shr eax, 0xa
and eax, 1
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x84], r14d
mov byte [rsp + 0x3d], dil
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xd8], rax
mov rdi, qword [rsp + 0xe8]
jmp 0x14008abb2
mov r15d, 1
call fcn.14015c300
mov rcx, rax
mov qword [rsp + 0xc0], rax
test rax, rax
je case.0x14008b089.0
mov rsi, qword [rsp + 0xc0]
mov rcx, rsi
call fcn.1401751f0
mov rcx, rsi
lea rdx, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
xor r8d, r8d
call fcn.14015aac0
mov rsi, rax
mov rcx, rax
call fcn.140175810
test eax, eax
jne 0x14008cecd
movzx eax, byte [rsp + 0x6b4]
mov byte [rsp + 0x424], al
mov eax, dword [rsp + 0x6b0]
mov dword [rsp + 0x420], eax
mov rax, qword [0x14024a140]
test rax, rax
je 0x14008bb34
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
je 0x14008a9b5
mov rcx, qword [0x14024a140]
mov rax, rcx
test rcx, rcx
je 0x14008bb7c
shr eax, 0xa
and eax, 1
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x68]
shl rax, 8
add rax, qword [rsp + 0x40]
shl r13, 0x10
or r13, rax
mov eax, dword [rsp + 0x420]
mov dword [rsp + 0x6b0], eax
movzx eax, byte [rsp + 0x424]
mov byte [rsp + 0x6b4], al
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x4f], al
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x3f], al
mov rdx, qword [rsp + 0x118]
mov rax, rdx
shr rax, 0x20
mov byte [rsp + 0x3e], al
pshufd xmm0, xmm9, 0xee
movq qword [rsp + 0xd8], xmm9
movdqa xmm9, xmm10
movdqa xmm10, xmm7
movdqa xmm7, xmm8
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x130]
mov ecx, r15d
shr ecx, 8
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x78], r13
mov r13, r15
shr r13, 0x10
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x88], eax
mov eax, edx
shr rdx, 0x28
mov ecx, r12d
mov qword [rsp + 0x508], rcx
mov r12d, ebp
mov ebp, ebx
mov ebx, edx
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x518], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x118], rcx
mov ecx, r15d
mov qword [rsp + 0x40], rcx
mov ecx, dword [rsp + 0x50]
mov dword [rsp + 0xb4], ecx
mov dword [rsp + 0x50], r14d
mov rcx, qword [rsp + 0x108]
mov qword [rsp + 0x110], rcx
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x108], rcx
mov dword [rsp + 0x8c], eax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x668], rax
movdqa xmm8, xmm11
mov eax, edi
mov dword [rsp + 0x58], eax
movq rdi, xmm0
mov r15d, 5
xor eax, eax
mov qword [rsp + 0x510], rax
xor eax, eax
mov qword [rsp + 0x70], rax
xor eax, eax
mov qword [rsp + 0x128], rax
xor eax, eax
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x140]
cmp rax, 4
ja case.default.0x14008abce
lea rcx, [0x1401abfd8]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x158], 2
jb case.0x14008abce.0
mov rsi, qword [rsp + 0x178]
mov r14, qword [rsp + 0x180]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je case.0x14008abce.0
cmp qword [r14 + 0x10], 0x11
jb 0x14008ad77
mov rsi, qword [rsi - 8]
jmp 0x14008ad77
cmp qword [rsp + 0x160], 0
je 0x14008ac34
mov r8, qword [rsp + 0x158]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x180], 2
jb 0x14008ac77
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x1a8]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14008ac77
cmp qword [r14 + 0x10], 0x11
jb 0x14008ac66
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x268]
call fcn.140173eb0
jmp case.0x14008abce.0
cmp byte [rsp + 0x158], 2
jb 0x14008accc
mov rsi, qword [rsp + 0x178]
mov r14, qword [rsp + 0x180]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14008accc
cmp qword [r14 + 0x10], 0x11
jb 0x14008acbb
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x248], 0
je 0x14008aced
mov r8, qword [rsp + 0x240]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x260]
mov rcx, qword [0x14024a138]
xor edx, edx
jmp 0x14008ad83
cmp qword [rsp + 0x160], 0
je 0x14008ad24
mov r8, qword [rsp + 0x158]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x180], 2
jb 0x14008ad67
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x1a8]
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14008ad67
cmp qword [r14 + 0x10], 0x11
jb case.default.0x14008b089
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x268]
mov rcx, rsi
call fcn.14010ab60
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x140], r15
mov rax, qword [rsp + 0xa0]
mov dword [rsp + 0x148], eax
mov dword [rsp + 0x14c], 0
mov qword [rsp + 0x150], 0
mov rax, qword [rsp + 0x40]
mov byte [rsp + 0x158], al
mov rax, qword [rsp + 0x68]
mov byte [rsp + 0x159], al
mov dword [rsp + 0x15a], r13d
shr r13, 0x20
mov word [rsp + 0x15e], r13w
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x160], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x180], rax
movdqu xmmword [rsp + 0x188], xmm8
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x1a8], rax
movdqu xmmword [rsp + 0x1b0], xmm7
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x1c8], eax
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x1cc], al
mov word [rsp + 0x1cd], bx
shr ebx, 0x10
mov byte [rsp + 0x1cf], bl
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x1d0], rax
movdqu xmmword [rsp + 0x1d8], xmm10
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x1e8], rax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x1f0], eax
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0x1f4], al
mov word [rsp + 0x1f5], bp
shr ebp, 0x10
mov byte [rsp + 0x1f7], bpl
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x1f8], rax
movdqu xmmword [rsp + 0x200], xmm9
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x210], rax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x218], eax
movzx eax, byte [rsp + 0x3d]
mov byte [rsp + 0x21c], al
mov word [rsp + 0x21d], r12w
shr r12d, 0x10
mov byte [rsp + 0x21f], r12b
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], rdi
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x238], rax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x240], eax
mov eax, dword [rsp + 0x58]
mov byte [rsp + 0x244], al
mov rax, qword [rsp + 0x508]
mov word [rsp + 0x245], ax
shr eax, 0x10
mov byte [rsp + 0x247], al
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x670]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x518]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x268], rax
mov word [rsp + 0x270], 0
mov rax, qword [rsp + 0x500]
mov byte [rsp + 0x272], al
movzx eax, byte [rsp + 0x6b4]
lea rcx, [rsp + 0x280]
mov byte [rcx - 9], al
mov eax, dword [rsp + 0x6b0]
mov dword [rcx - 0xd], eax
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0x278], eax
movzx eax, byte [rsp + 0x4f]
mov byte [rsp + 0x27c], al
movzx eax, word [rsp + 0x420]
mov word [rcx - 3], ax
movzx eax, byte [rsp + 0x422]
mov byte [rcx - 1], al
lea rcx, [0x1401abfec]
movsxd rax, dword [rcx + r15*4]
add rax, rcx
jmp rax
mov rsi, qword [rsp + 0x158]
test rsi, rsi
je 0x14008bb8a
cmp rsi, 0x2000
mov r9d, 0x2000
cmovb r9, rsi
mov rdx, qword [rsp + 0x148]
mov rax, qword [rsp + 0x150]
lea rcx, [rsp + 0x420]
lea r8, [rsp + 0x850]
call qword [rax + 0x18]
cmp qword [rsp + 0x420], 0
mov r13, qword [rsp + 0x428]
jne 0x14008ba62
sub rsi, r13
jb case.0x14008b089.0
mov qword [rsp + 0x158], rsi
mov rbp, r13
cmp r13, 0x2001
jb 0x14008b69b
jmp case.0x14008b089.0
mov esi, dword [rsp + 0x14c]
mov edi, dword [rsp + 0x240]
movzx ebx, byte [rsp + 0x244]
mov r9d, 0x2000
lea rcx, [rsp + 0x420]
lea rdx, [rsp + 0x158]
lea r8, [rsp + 0x850]
call fcn.1400df720
cmp qword [rsp + 0x420], 0
je case.default.0x14008b171
mov r13, qword [rsp + 0x428]
mov eax, r13d
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x278]
cmp eax, dword [rsp + 0x14c]
sete al
cmp byte [rsp + 0x27c], 0
setne bl
or bl, al
mov rsi, qword [rsp + 0x250]
mov r13, qword [rsp + 0x258]
cmp rsi, r13
jne 0x14008b1fa
mov r8, qword [rsp + 0x240]
mov r9, qword [rsp + 0x248]
lea rcx, [rsp + 0x420]
lea rdx, [rsp + 0x158]
call fcn.1400df720
cmp qword [rsp + 0x420], 0
mov r13, qword [rsp + 0x428]
jne 0x14008ba62
mov qword [rsp + 0x258], r13
mov qword [rsp + 0x250], 0
xor esi, esi
jmp 0x14008b200
ja case.0x14008b089.0
cmp r13, qword [rsp + 0x248]
ja case.0x14008b089.0
mov rdx, qword [rsp + 0x240]
add rdx, rsi
mov r8, r13
sub r8, rsi
sete al
mov r14, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x270]
shl al, 2
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], 0x2000
lea rcx, [rsp + 0x260]
lea r9, [rsp + 0x850]
call fcn.1400121b0
mov rbp, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x258]
mov rcx, qword [rsp + 0x268]
sub rcx, r14
add rcx, qword [rsp + 0x250]
cmp rcx, rdx
cmovae rcx, rdx
mov qword [rsp + 0x250], rcx
cmp eax, 2
jne 0x14008b6cf
shr rax, 0x20
test al, al
je 0x14008b2a2
movzx eax, al
cmp eax, 1
jne 0x14008b2b6
cmp r13, rsi
je 0x14008b2b6
mov r13, rdx
mov rsi, rcx
cmp rbp, rdi
je 0x14008b1a1
sub rbp, rdi
sete al
not bl
test bl, al
je 0x14008b645
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x140207fb8]
call fcn.1400e0000
mov r13, rax
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [rsp + 0x278]
cmp eax, dword [rsp + 0x14c]
sete al
cmp byte [rsp + 0x27c], 0
setne bl
or bl, al
jmp 0x14008b321
mov byte [rsp + 0x270], 1
sub rbp, rdi
jne 0x14008b637
cmp byte [rsp + 0x270], 0
je 0x14008b339
cmp byte [rsp + 0x271], 0
je 0x14008b635
mov rbp, qword [rsp + 0x158]
mov rax, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
mov r13, rcx
sub r13, rax
jbe 0x14008b36a
test rbp, rbp
je 0x14008ba62
add rbp, rax
jmp 0x14008b3f6
mov rsi, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x178]
mov r8, rsi
sub r8, rcx
jb case.0x14008b089.0
add rcx, rbp
xor edx, edx
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x420]
lea rdx, [rsp + 0x180]
mov r8, rbp
mov r9, rsi
call fcn.1400df720
cmp qword [rsp + 0x420], 0
mov r13, qword [rsp + 0x428]
je 0x14008b3cc
test r13, r13
jne 0x14008ba62
xor r13d, r13d
jmp 0x14008b3d5
cmp rsi, r13
jb case.0x14008b089.0
mov qword [rsp + 0x168], 0
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rsi
xor eax, eax
mov rcx, r13
cmp byte [rsp + 0x270], 0
je 0x14008b49c
cmp byte [rsp + 0x271], 0
je case.0x14008b089.0
cmp rcx, rax
je 0x14008b635
movzx eax, byte [0x14024a149]
mov edx, 0x50
xor ecx, ecx
call fcn.140080d30
test rax, rax
je case.0x14008b089.0
mov rsi, rax
movdqu xmmword [rax + 0x40], xmm6
movdqu xmmword [rax + 0x30], xmm6
movdqu xmmword [rax + 0x20], xmm6
movdqu xmmword [rax + 0x10], xmm6
movdqu xmmword [rax], xmm6
mov rcx, rax
xor edx, edx
xor r8d, r8d
call fcn.14010abe0
test eax, eax
jne case.0x14008b089.0
mov rcx, qword [rsp + 0x268]
call fcn.14010ab60
mov r8, qword [rsp + 0x268]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x268], rsi
mov byte [rsp + 0x270], 0
jmp 0x14008b4a4
mov rsi, qword [rsp + 0x268]
mov r14, qword [rsi + 0xc]
mov rdi, qword [rsi + 0x24]
mov eax, 0xffffffff
cmp r13, rax
cmovb rax, r13
mov qword [rsi], rbp
mov dword [rsi + 8], eax
lea rax, [rsp + 0x850]
mov qword [rsi + 0x18], rax
mov dword [rsi + 0x20], 0x2000
mov rcx, rsi
call fcn.140109ae0
add eax, 5
cmp eax, 9
clc
or dword [rdi], ecx
xchg dword [rsi], ebx
test al, 0xff
invalid
clc
or dword [rdi], ecx
xchg dword [rsi], ebx
test al, 0xff
dec dword [rax - 0x73]
lea rcx, [0x1401ac004]
lea rcx, [0x1401ac004]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
invalid
jmp rax
mov dl, 1
mov cl, 2
xor eax, eax
jmp 0x14008b527
mov cl, 1
xor eax, eax
mov dl, 1
jmp 0x14008b527
mov cl, 5
xor eax, eax
jmp 0x14008b525
mov dl, 1
mov cl, 3
xor eax, eax
jmp 0x14008b527
mov dl, 1
xor eax, eax
xor ecx, ecx
jmp 0x14008b527
xor eax, eax
xor ecx, ecx
jmp 0x14008b525
mov cl, 4
mov al, 1
xor edx, edx
mov r10, qword [rsp + 0x170]
mov r8, qword [rsp + 0x268]
mov r9, qword [r8 + 0xc]
mov rbp, qword [r8 + 0x24]
mov r8, r9
sub r8, r14
mov r11, qword [rsp + 0x168]
add r11, r8
cmp r11, r10
cmovae r11, r10
mov qword [rsp + 0x168], r11
test dl, dl
jne 0x14008ba44
test al, al
jne 0x14008b310
cmp rbp, rdi
jne 0x14008b318
cmp r9, r14
jne 0x14008b318
cmp r8, r13
jne 0x14008b318
mov r8d, 0x2a
mov cl, 0x25
lea rdx, [0x140207a44]
jmp 0x14008ba5a
mov eax, dword [rsp + 0x278]
cmp eax, dword [rsp + 0x14c]
sete dil
cmp byte [rsp + 0x27c], 0
setne r14b
movzx eax, byte [rsp + 0x270]
cmp rax, 2
je 0x14008b5e9
cmp eax, 1
jne 0x14008b6f9
cmp byte [rsp + 0x272], 0
je 0x14008ba4b
mov byte [rsp + 0x270], 2
or dil, r14b
je 0x14008b9f0
xor ebp, ebp
jmp 0x14008b652
mov rbp, qword [rsp + 0x428]
cmp edi, esi
je 0x14008b645
test bl, bl
jne 0x14008b645
test rbp, rbp
jne 0x14008b645
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x140207fb8]
call fcn.1400e0000
mov r13, rax
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
xor ebp, ebp
test rbp, rbp
setne al
or bl, al
je 0x14008ba1a
cmp rbp, 0x2001
jae case.0x14008b089.0
add qword [rsp + 0x150], rbp
cmp dword [rsp + 0x148], 0
je 0x14008b67d
mov ecx, dword [rsp + 0x14c]
lea rdx, [rsp + 0x850]
mov r8, rbp
call fcn.140010d90
jmp 0x14008b694
mov ecx, dword [rsp + 0x14c]
lea rdx, [rsp + 0x850]
mov r8, rbp
call fcn.140010920
mov dword [rsp + 0x14c], eax
test rbp, rbp
je 0x14008bb8a
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x850]
mov r8, rbp
call fcn.140094ac0
mov ecx, 0x2000
test rax, rax
je 0x14008a186
jmp case.0x14008ba7f.2
mov r8d, 0x16
mov cl, 0x14
lea rdx, str.corrupt_deflate_stream
call fcn.1400e0000
mov r13, rax
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
lea rax, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
mov qword [rsp + 0x790], rax
lea rax, [rsp + 0x798]
movdqu xmmword [rax], xmm6
lea rax, [rsp + 0x850]
mov qword [rsp + 0x6b0], rax
mov qword [rsp + 0x6b8], 0x2000
mov qword [rsp + 0x6c0], 0
mov rdx, qword [rsp + 0x268]
lea rcx, [rsp + 0x420]
lea r8, [rsp + 0x790]
lea r9, [rsp + 0x6b0]
call fcn.1400e0860
cmp qword [rsp + 0x420], 0
mov r13, qword [rsp + 0x428]
jne 0x14008ba62
test r13, r13
jne 0x14008b797
mov byte [rsp + 0x272], 1
cmp byte [rsp + 0x271], 0
je 0x14008b797
mov byte [rsp + 0x270], 2
mov rbp, qword [rsp + 0x6c0]
mov rax, qword [rsp + 0x168]
mov rcx, qword [rsp + 0x170]
add rax, qword [rsp + 0x7a0]
cmp rax, rcx
cmovae rax, rcx
mov qword [rsp + 0x168], rax
test rbp, rbp
jne 0x14008b645
movzx edx, byte [rsp + 0x270]
test rdx, rdx
jne 0x14008bb50
mov r13, rcx
mov rsi, qword [rsp + 0x158]
sub r13, rax
jbe 0x14008b801
test rsi, rsi
je 0x14008ba62
add rsi, rax
jmp 0x14008b88d
mov rbx, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x178]
mov r8, rbx
sub r8, rcx
jb case.0x14008b089.0
add rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x420]
lea rdx, [rsp + 0x180]
mov r8, rsi
mov r9, rbx
call fcn.1400df720
cmp qword [rsp + 0x420], 0
mov r13, qword [rsp + 0x428]
je 0x14008b863
test r13, r13
jne 0x14008ba62
xor r13d, r13d
jmp 0x14008b86c
cmp rbx, r13
jb case.0x14008b089.0
mov qword [rsp + 0x168], 0
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], rbx
xor eax, eax
mov rcx, r13
cmp rcx, rax
jne 0x14008b8b0
mov byte [rsp + 0x270], 1
movzx edx, byte [rsp + 0x270]
test rdx, rdx
je 0x14008b7e0
jmp 0x14008bb50
mov qword [rsp + 0x790], rsi
mov qword [rsp + 0x798], r13
mov qword [rsp + 0x7a0], 0
lea rax, [rsp + 0x850]
mov qword [rsp + 0x6b0], rax
mov qword [rsp + 0x6b8], 0x2000
mov qword [rsp + 0x6c0], 0
cmp byte [rsp + 0x272], 0
je 0x14008b73c
mov rcx, qword [rsp + 0x268]
mov edx, 1
call fcn.14015b320
mov rbx, rax
mov rcx, rax
call fcn.140175810
mov esi, eax
test eax, eax
je 0x14008b9d2
mov rcx, rbx
call fcn.140174690
mov rbx, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rcx, [rsp + 0x420]
mov rdx, rbx
mov r8, rax
call fcn.140010720
cmp qword [rsp + 0x420], 0
jne case.0x14008b089.0
mov r13, qword [rsp + 0x428]
mov rbx, qword [rsp + 0x430]
test rbx, rbx
je 0x14008b997
js case.0x14008b089.0
movzx eax, byte [0x14024a149]
xor ecx, ecx
mov rdx, rbx
call fcn.140080d30
mov rbp, rax
test rax, rax
jne 0x14008b99c
jmp case.0x14008b089.0
mov ebp, 1
mov rcx, rbp
mov rdx, r13
mov r8, rbx
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x420], rbx
mov qword [rsp + 0x428], rbp
mov qword [rsp + 0x430], rbx
lea rcx, [rsp + 0x420]
call fcn.1400e0a70
mov rbx, rax
test esi, esi
mov r13d, 0
cmovne r13, rbx
test r13, r13
jne 0x14008ba62
mov byte [rsp + 0x272], 0
jmp 0x14008b73c
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x140207fb8]
call fcn.1400e0000
mov r13, rax
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r8d, 0x10
mov cl, 0x27
lea rdx, [0x140207fb8]
call fcn.1400e0000
mov r13, rax
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
invalid
jmp rax
enter 0xffffffffffffe0ff, 0xffffffffffffffe8
xchg dword [rsi + 5], eax
add bl, ch
adc al, 0x41
mov eax, 0x10
call fcn.1400e00d0
jmp 0x14008ba5f
mov r8d, 0x10
mov cl, 0x25
lea rdx, str.incomplete_frameInvalid_checksumfailed_to_fill_whole_buffer
call fcn.1400e0000
mov r13, rax
test r13, r13
je 0x14008bb8a
mov eax, r13d
and eax, 3
lea rcx, [0x1401ac02c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [r13 + 0xf], 0x23
jne case.0x14008ba7f.2
mov rsi, qword [r13 - 1]
mov rdi, qword [r13 + 7]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
cmp dword [rdi + 8], 0
cmp dword [rdi + 8], 0
je 0x14008babc
cmp qword [rdi + 0x10], 0x11
jb 0x14008baab
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
dec r13
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov ecx, 0x2000
jmp 0x14008a186
shr r13, 0x20
mov ecx, 0x2000
cmp r13d, 0x23
je 0x14008a186
jmp case.0x14008ba7f.2
call fcn.140084ac0
jmp 0x14008a412
call fcn.140084ac0
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
jne 0x14008a4dc
jmp 0x14008a4fd
call fcn.140084ac0
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
jne 0x14008a657
jmp 0x14008a678
call fcn.140084ac0
xor ecx, ecx
mov qword [rsp + 0xa0], rcx
test al, 2
jne 0x14008a994
test dword [rcx - 0x12], ecx
invalid
invalid
test dword [rcx - 0x12], ecx
invalid
jmp 0x14008a9b5
cmp edx, 1
je 0x14008b5d3
jmp 0x14008b5e9
call fcn.140084ac0
jmp 0x14008a8cd
call fcn.140084ac0
jmp 0x14008a4ef
call fcn.140084ac0
jmp 0x14008a66a
call fcn.140084ac0
jmp 0x14008a9a7
xor esi, esi
jmp 0x14008bb8d
mov sil, 1
lea rax, [0x1401ccb04]
mov qword [rsp + 0x850], rax
lea rax, [rsp + 0x850]
mov rcx, qword [rsp + 0x850]
movabs rdx, 0xb0b046befdfb8da2
mov qword [rsp + 0x850], rdx
mov rdx, qword [rsp + 0x850]
call fcn.14008e460
mov rcx, qword [rax]
mov rcx, qword [rax + 8]
mov ecx, dword [rax + 0x10]
movzx eax, word [rax + 0x14]
test sil, sil
je case.0x14008b089.0
mov rcx, qword [rsp + 0x520]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x788], 0
je 0x14008bc10
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x660]
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x60]
cmp qword [rsp + 0x280], rax
je 0x14008c02b
mov r8d, 0x10000
lea rcx, [rsp + 0x850]
push rax
or byte [rax], al
add byte [rcx], dh
shr al, cl
pop rax
mov edi, 0x8b480007
test byte [rax + rax*2], ah
add dword [rax], eax
add byte [rax - 0x7b], cl
invalid
je 0x14008bcb5
push rax
or byte [rax], al
add byte [rcx], dh
shr al, cl
pop rax
mov edi, 0x8b480007
test byte [rax + rax*2], ah
add dword [rax], eax
add byte [rax - 0x7b], cl
sal byte [rax + rsi*2 + 0x44], 0xf
mov dh, 0xbc
and al, 0x58
add dword [rax], eax
add byte [rax - 0x75], cl
mov ah, 0x24
js 0x14008bc55
movzx r15d, byte [rsp + 0x158]
mov rsi, qword [rsp + 0x178]
add byte [rax], al
add byte [rbx + rcx*4 - 0x4c], cl
and al, 0x80
add dword [rax], eax
add byte [rax - 0x39], cl
test byte [rax + rax*2], ah
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add byte [rax - 1], cl
enter 0xffffffffffff8d48, 0xd
lea rcx, [0x1401ac03c]
mov r14, qword [rsp + 0x180]
mov qword [rsp + 0x140], 0
dec rax
lea rcx, [0x1401ac03c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
movdqu xmm7, xmmword [rsp + 0x148]
movzx eax, byte [rsp + 0x15f]
shl eax, 0x10
movzx ecx, word [rsp + 0x15d]
or ecx, eax
mov edi, dword [rsp + 0x159]
shl rcx, 0x28
shl rdi, 8
or rdi, rcx
or rdi, r15
jmp 0x14008bf3e
movzx eax, byte [rsp + 0x330]
mov rsi, qword [rsp + 0x350]
mov rbx, qword [rsp + 0x358]
mov byte [rsp + 0x330], 3
cmp al, 3
je case.0x14008b089.0
movdqu xmm7, xmmword [rsp + 0x338]
mov rdi, qword [rsp + 0x348]
add rax, qword [rax]
add byte [rdx + rax], bh
add rax, qword [rax]
add byte [rdx + rax], bh
jb 0x14008bf3e
mov rcx, rsi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x14008bf3e
cmp qword [rbx + 0x10], 0x11
jb 0x14008bd11
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
jmp 0x14008bf3e
add byte [rcx], dh
ror byte [rcx - 0x77], cl
invalid
movdqu xmm7, xmmword [rsp + 0x160]
mov rdi, qword [rsp + 0x170]
jmp 0x14008bd87
mov esp, 0x16024
add byte [rax - 0x75], cl
mov esp, 0x17024
add bl, ch
movdqu xmm7, xmmword [rsp + 0x160]
mov rdi, qword [rsp + 0x170]
mov rbx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x260]
mov r12, qword [rsp + 0x248]
add byte [rax - 0x75], cl
or eax, 0x1be3ce
add byte [rax - 0x75], cl
or eax, 0x1be3ce
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test r12, r12
je 0x14008bd87
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
cmp r15b, 2
jb 0x14008bf3e
mov rcx, rsi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x14008bf3e
cmp qword [r14 + 0x10], 0x11
jae 0x14008bd0d
jmp 0x14008bd11
dec byte [rdi]
test dh, ch
add byte [rax], al
add byte [rax - 0x75], cl
and al, 0x40
mov rsi, qword [rsp + 0x50]
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x14008bf3e
mov rax, qword [rsp + 0x50]
cmp qword [rax + 0x10], 0x11
jb 0x14008be81
mov rax, qword [rsp + 0x40]
mov rax, qword [rax - 8]
mov qword [rsp + 0x40], rax
mov rcx, qword [0x14024a138]
xor edx, edx
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x40
ror byte [rbx + rcx*4 + 0x44], cl
and al, 0x40
call sub.KERNEL32.dll_HeapFree
jmp 0x14008bf3e
movq rsi, xmm7
pshufd xmm0, xmm7, 0xee
movq rbx, xmm0
test rdi, rdi
je 0x14008bf9e
cmp rdi, 0x10000
mov r9d, 0x10000
cmovb r9, rdi
lea rcx, [rsp + 0x420]
mov rdx, rsi
lea r8, [rsp + 0x850]
call qword [rbx + 0x18]
cmp qword [rsp + 0x420], 0
jne case.0x14008b089.0
mov rax, qword [rsp + 0x428]
sub rdi, rax
jb case.0x14008b089.0
test rax, rax
jne 0x14008bf4d
mov rax, qword [rsp + 0x280]
cmp rax, qword [rsp + 0x60]
je 0x14008c02b
test rax, rax
je 0x14008bfc8
mov r8, qword [rsp + 0x288]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x298], 0
je 0x14008bfe9
mov r8, qword [rsp + 0x2a0]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x2b0], 0
je 0x14008c00a
mov r8, qword [rsp + 0x2b8]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x2c8], 0
je 0x14008c02b
mov r8, qword [rsp + 0x2d0]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [rsp + 0x330]
cmp al, 3
test byte [rax + rsi], ah
add eax, dword [rax]
add byte [rbx + rax], bh
je 0x14008c073
cmp al, 2
jb 0x14008c073
mov rsi, qword [rsp + 0x350]
mov rdi, qword [rsp + 0x358]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14008c073
cmp qword [rdi + 0x10], 0x11
jb 0x14008c062
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
invalid
call sub.KERNEL32.dll_HeapFree
invalid
mov rax, qword [rsp + 0x140]
cmp rax, 4
ja case.default.0x14008c08f
lea rcx, [0x1401ac050]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [rsp + 0x158], 2
jb case.0x14008c08f.0
mov rsi, qword [rsp + 0x178]
mov rdi, qword [rsp + 0x180]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je case.0x14008c08f.0
cmp qword [rdi + 0x10], 0x11
jb 0x14008c0ca
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
jmp 0x14008c22c
invalid
add byte [rax - 0x7d], cl
mov esp, 0x16024
add byte [rax], al
cmp qword [rsp + 0x160], 0
je 0x14008c0fc
mov r8, qword [rsp + 0x158]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x180], 2
jb 0x140089aae
mov rsi, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0x1a8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140089aae
cmp qword [rdi + 0x10], 0x11
jb 0x140089a9d
mov rsi, qword [rsi - 8]
jmp 0x140089a9d
cmp byte [rsp + 0x158], 2
jb 0x14008c180
invalid
cmp byte [rax - 0x75], cl
mov ah, 0x24
js 0x14008c14f
mov rsi, qword [rsp + 0x178]
add byte [rax], al
add byte [rax - 0x75], cl
mov esp, 0x18024
add byte [rax - 0x77], cl
int1
mov rdi, qword [rsp + 0x180]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14008c180
cmp qword [rdi + 0x10], 0x11
jb 0x14008c16f
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
cmp qword [rsp + 0x248], 0
add byte [rax], al
je 0x14008c1a1
mov r8, qword [rsp + 0x240]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov r8, qword [rsp + 0x260]
jmp 0x14008c223
cmp qword [rsp + 0x160], 0
je 0x14008c1cc
mov r8, qword [rsp + 0x158]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x180], 2
jb 0x14008c20e
mov rsi, qword [rsp + 0x1a0]
mov rdi, qword [rsp + 0x1a8]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14008c20e
cmp qword [rdi + 0x10], 0x11
jb 0x14008c1fd
mov rsi, qword [rsi - 8]
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x268]
call fcn.14010ab60
mov r8, qword [rsp + 0x268]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp case.0x14008c08f.0
mov esi, 1
mov eax, 0x19
mov qword [rsp + 0x98], rax
lea rax, str.Invalid_local_file_headerInvalid_Central_Directory_headerArchive_header_is_too_largeAES_encryption_without_AES_extra_data_fieldInvalid_central_directory_size_or_offsetSupport_for_multi_disk_files_is_not_implementedFile_cannot_contain_ZIP64_central_directory_endPassword_required_to_decrypt_fileCould_not_seek_to_start_of_central_directoryIWbemClassWrapperinner
mov qword [rsp + 0x90], rax
mov eax, 0x19
jmp 0x140089cf6
cmp byte [rdi + rbx + 0xa5], 2
jne case.0x14008b089.0
add rdi, rbx
mov r8d, 0xa0
lea rbx, [rsp + 0x6b0]
mov rcx, rbx
lea rsi, [rsp + 0x790]
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x640]
mov ecx, dword [rsp + 0x643]
mov dword [rsp + 0x520], eax
mov dword [rsp + 0x523], ecx
mov r8d, 0xc8
lea r14, [rsp + 0x850]
mov rcx, r14
lea r15, [rsp + 0x420]
mov rdx, r15
call sub.msvcrt.dll_memcpy
mov r8d, 0xa0
mov rcx, rsi
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x520]
mov ecx, dword [rsp + 0x523]
mov dword [rsp + 0x640], eax
mov dword [rsp + 0x643], ecx
mov r8d, 0xc8
mov rcx, r15
mov rdx, r14
call sub.msvcrt.dll_memcpy
xor ebx, ebx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x770], rax
mov qword [rsp + 0x768], rdi
xor edi, edi
jmp 0x140089d0d
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test r14, r14
je 0x140088ede
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test rdi, rdi
jne 0x140088ee3
jmp 0x140088eeb
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
test r12, r12
je 0x1400890c9
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
test rdi, rdi
jne 0x1400890ce
jmp 0x1400890d6
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test rbx, rbx
je 0x14008940d
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
test rdi, rdi
jne 0x140089412
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
call sub.KERNEL32.dll_CloseHandle
lock dec qword [rsi]
je 0x140088893
jmp 0x1400888a0
mov rcx, rsi
call fcn.140174690
mov rsi, rax
mov rcx, rax
call sub.msvcrt.dll_strlen
lea rcx, [rsp + 0x420]
mov rdx, rsi
mov r8, rax
call fcn.140010720
cmp qword [rsp + 0x420], 0
jne case.0x14008b089.0
mov rdi, qword [rsp + 0x428]
mov rsi, qword [rsp + 0x430]
mov r14d, 1
test rsi, rsi
jne 0x14008cff5
mov rcx, r14
mov rdx, rdi
mov r8, rsi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x420], rsi
mov qword [rsp + 0x428], r14
mov qword [rsp + 0x430], rsi
lea rcx, [rsp + 0x420]
call fcn.1400e0a70
mov rcx, qword [rsp + 0xc0]
call fcn.140173eb0
cmp qword [rsp + 0xb8], 0
je 0x14008cf7d
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
cmp byte [rsp + 0x40], 2
jb case.0x14008b089.0
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
call qword [rsi]
cmp qword [rsi + 8], 0
je case.0x14008b089.0
mov rax, qword [rsp + 0x78]
cmp qword [rax + 0x10], 0x11
jb 0x14008cfb9
mov rax, qword [rsp + 0x70]
mov rax, qword [rax - 8]
mov qword [rsp + 0x70], rax
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
ud2
js case.0x14008b089.0
movzx eax, byte [0x14024a149]
xor ecx, ecx
mov rdx, rsi
call fcn.140080d30
mov r14, rax
test rax, rax
jne 0x14008cf21
jmp case.0x14008b089.0
mov edi, esi
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rdi
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sub.KERNEL32.dll_HeapFree
mov edx, 8
mov rcx, rsi
call fcn.140003040
ud2
invalid
or esp, dword [rsi + 0x66]
nop word cs:[rax + rax]
nop dword cs:[rax + rax]
nop dword cs:[rax + rax]
add byte [rax - 0x7d], cl
in al, dx
sub byte [rdi + rcx - 0x4a], al
add dword [rdx + rdi + 2], eax
sub rsp, 0x28
movzx r8d, byte [rcx]
cmp r8b, byte [rdx]
jne 0x14008d8d5
mov al, 1
lea r9, [r8 - 2]
cmp r9, 0xe
ja case.default.0x14008d8a7
lea r10, [0x1401ac064]
lea edx, [0x1401ac064]
movsxd r9, dword [r10 + r9*4]
add r9, r10
jmp r9
cmp r8d, 2
jne case.default.0x14008d8a7
clc
add dh, byte [rbp + 0x27]
mov r8, qword [rcx + 0x18]
cmp r8, qword [rdx + 0x18]
sbb byte [rdi], cl
test dword [rdi + 1], ecx
add byte [rax], al
sbb byte [rdi], cl
test dword [rdi + 1], ecx
add byte [rax], al
mov rdx, qword [rdx + 0x10]
mov edx, dword [rdx + 0x10]
mov rcx, qword [rcx + 0x10]
call sub.msvcrt.dll_memcmp
test eax, eax
sete al
add rsp, 0x28
ret
xor eax, eax
add rsp, 0x28
ret
sub bl, al
cmp r8d, 4
jne case.default.0x14008d8a7
jmp 0x14008d918
cmp r8d, 5
jne case.default.0x14008d8a7
jmp 0x14008d9e4
cmc
add byte [rax], al
add byte [rcx - 0x7d], al
cmp r8d, 6
cmp r8d, 6
cmp eax, 6
jne case.default.0x14008d8a7
jmp 0x14008d92e
cmp r8d, 9
jne case.default.0x14008d8a7
or dword [rbp - 0x26], esi
cmp byte [rcx + 1], 0
sete cl
cmp byte [rdx + 1], 0
add dword [rax], eax
add dword [rax], eax
setne al
xor al, cl
add rsp, 0x28
ret
cmp r8d, 0xb
jne case.default.0x14008d8a7
movzx eax, word [rcx + 2]
cmp ax, word [rdx + 2]
sete al
add rsp, 0x28
ret
cmp r8d, 0xd
jne case.default.0x14008d8a7
or eax, 0x8b48a975
or byte [r8 + 0x3b], cl
or byte [rdi], cl
xchg esp, eax
ror byte [rax - 0x7d], 0xc4
add esp, 0x28
ret
mov rax, qword [rcx + 8]
cmp rax, qword [rdx + 8]
sete al
add rsp, 0x28
add esp, 0x28
add esp, 0x28
ret
cmp r8d, 0xe
jne case.default.0x14008d8a7
mov rax, qword [rcx + 0x10]
mov r10, qword [rcx + 0x18]
mov edx, dword [rcx + 0x18]
adc byte [r11 + rcx*4 + 0x51], cl
sbb byte [rbx + rcx*4 + 0x42], cl
adc byte [rbx + rcx*4 + 0x4a], cl
sbb byte [rax - 0x77], cl
ror dword [rcx + rcx*4 - 0x2e], 0x48
add esp, 0x28
mov edx, dword [rcx + 0x18]
mov r8, qword [rdx + 0x10]
mov r9, qword [rdx + 0x18]
mov rcx, rax
mov rdx, r10
add rsp, 0x28
jmp fcn.140002e20
inc dword [rcx - 0x7d]
clc
adc byte [rdi], cl
invalid
test dword [rdx - 1], ebp
invalid
cmp r8d, 0x10
jne case.default.0x14008d8a7
jmp 0x14008d9fc
cmp r8d, 3
jne case.default.0x14008d8a7
invalid
invalid
invalid
jmp 0x14008d9cb
cmp r8d, 7
jne case.default.0x14008d8a7
movss xmm0, dword [rdx + 4]
movups xmm0, xmmword [rdx + 4]
cmpeqss xmm0, dword [rcx + 4]
movd eax, xmm0
and eax, 1
add rsp, 0x28
ret
cmp r8d, 8
jne case.default.0x14008d8a7
or byte [rdi], cl
test dword [rsi], ebp
invalid
movsd xmm0, qword [rdx + 8]
cmpeqsd xmm0, qword [rcx + 8]
movq rax, xmm0
and eax, 1
loopne 0x14008d9bd
loopne 0x14008d9bd
add rsp, 0x28
add esp, 0x28
ret
cmp r8d, 0xa
jne case.default.0x14008d8a7
movzx eax, byte [rcx + 1]
cmp al, byte [rdx + 1]
sete al
add rsp, 0x28
ret
cmp r8d, 0xc
jne case.default.0x14008d8a7
mov eax, dword [rcx + 4]
cmp eax, dword [rdx + 4]
sete al
add rsp, 0x28
ret
cmp r8d, 0xf
jne case.default.0x14008d8a7
mov rcx, qword [rcx + 8]
mov rdx, qword [rdx + 8]
add rsp, 0x28
jmp fcn.1400dbfd0
xor eax, eax
add rsp, 0x28
ret
shr rax, 0xc
xor rax, rdx
neg rax
mov rdx, rax
rol rdx, 6
xor edx, eax
movzx eax, dx
add rax, rcx
ret
ret
sub al, 0x55
mov rax, rdx
rol rax, 6
xor eax, edx
movzx eax, ax
add rax, rcx
ret
movdqa xmm0, xmmword [rsi]
pmovmskb eax, xmm0
not eax
ror byte [rbp + rcx*4 + 0x76], 1
adc byte [rbp + rcx*4 + 0x3d], cl
invalid
invalid
adc dword [rax], eax
mov r12, rsi
jmp 0x14008eaa3
ror byte [rbp + rcx*4 + 0x76], 1
adc byte [rbp + rcx*4 + 0x3d], cl
invalid
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop word cs:[rax + rax]
dec rbx
lea eax, [r13 - 1]
and eax, r13d
test rbx, rbx
je 0x14008eb3c
test ax, ax
jne 0x14008eacd
nop dword [rax + rax]
movdqa xmm0, xmmword [r14]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffc80
add r14, 0x10
cmp eax, 0xffff
je 0x14008eab0
not eax
mov r13d, eax
tzcnt eax, r13d
neg rax
imul rax, rax, 0x38
lea rbp, [r12 + rax]
cmp qword [r12 + rax - 0x38], 0
je 0x14008eafa
mov r8, qword [rbp - 0x30]
mov rcx, qword [0x14024a138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
movzx eax, byte [rbp - 0x20]
cmp rax, 0xf
ja 0x14008ea77
movsxd rax, dword [r15 + rax*4]
add rax, r15
jmp rax
lea rax, [rdi + 1]
mov ecx, 0x38
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rdi, rax
cmp rdi, 0xffffffffffffffef
je 0x14008eb7d
sub rsi, rax
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rsi
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret